Free malware removal tool to remove Antivirus Suite

Écrit par Administrator | Lundi, 29 Mars 2010 18:04

There are no translations available.

Antivirus Suite is a rogue Antispyware, a ransomware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Antivirus Suite. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Antivirus Suite is a suite of Antivirus Soft or Antivirus Live. Uninstall Antivirus Suite immediately from your system^.

Antivirus Suite

To remove Antivirus Suite (Uninstall Antivirus Suite)

Download this free removal tool for Antivirus Suite
Extract it
Launch
Click on the delete button

Antivirus Suite will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

[random]tssd.exe

Files :

%AppData%\[random]\[random]tssd.exe
%AppData%\[random]

Registry

Registry keys created

HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
HKEY_CURRENT_USER\Software\Microsoft\Windows Script
HKEY_CURRENT_USER\Software\Microsoft\Windows Script\Settings
HKEY_CURRENT_USER\Software\avsuite

Registry values created

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
- RunInvalidSignatures = 0x00000001
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
- LowRiskFileTypes = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
- SaveZoneInformation = 0x00000001
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- [random] = "%AppData%\[random]\[random]tssd.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows Script\Settings
- JITDebug = 0x00000001

Registry value deleted

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
- AppInit_DLLs = ""

Ajouter un Commentaire