Free malware removal tool to remove Antivir Solution Pro

Antivir Solution Pro is another rogue Antispyware from the Antispyware Soft and Antivirus Suite, that tries to get money from users by prompting them to register and buy their Fake products. Some old malwares often return to the front of the stage and Antivir Solution Pro is replacing Antivirus Live and Antivirus Soft. Remove Antivir Solution Pro immediately from your system.

To remove Antivir Solution Pro (Uninstall Antivir Solution Pro)

• Download this free removal tool for Antivir Solution Pro
• Extract it on your desktop
• Run this application
• Click on the delete button
• Wait for a confirmation and restart your computer after the confirmation of deletion

Antivir Solution Pro will be removed from your system in less than 10s.

Processes :

• [random]sysguard.exe
• [random]sftav.exe
• [random]tssd.exe
• [random]

Files :

• %AppData%\[random]\[random]sftav.exe
• %AppData%\[random]\[random]sysguard.exe
• %AppData%\[random]\[random]tssd.exe
• %AppData%\[random]

Registry

Registry keys created

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
• HKEY_CURRENT_USER\Software\Microsoft\Windows Script
• HKEY_CURRENT_USER\Software\Microsoft\Windows Script\Settings
• HKEY_CURRENT_USER\Software\avsoft
• HKEY_CURRENT_USER\Software\avsuite
• HKEY_LOCAL_MACHINE\Software\avsoft
• HKEY_LOCAL_MACHINE\Software\avsuite

Registry values created

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  
  • [random] = "%AppData%\agolui\[random]sftav.exe"
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
  
  • RunInvalidSignatures = 0x00000001
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
  
  • LowRiskFileTypes = ".exe"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments
  
  • SaveZoneInformation = 0x00000001
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  
  • [random = "%AppData%\[random]\[random]sftav.exe"
• HKEY_CURRENT_USER\Software\Microsoft\Windows Script\Settings
  
  • JITDebug = 0x00000001
• HKEY_CURRENT_USER\Software\avsoft
  
  • knkd = 0x00000001

Registry value deleted

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
  
  • AppInit_DLLs = ""

Registry value modified

• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
  
  • CheckExeSignatures = ""/ Original value =" yes"

For manual removal :

• Restart your computer in safe mode using your usual account
• Open Explorer
• Type %AppData% on the address bar
• Remove all RANDOM CHARACTERS files
• Remove all RANDOM CHARACTERS folders if exist
• Click on the Start menu
• Click on Run
• Type msconfig and enter
• Go to StartUp tab
• Uncheck all RANDOM CHARACTERS values which point to a process under %AppData%\[random characters]
• Restart your computer in normal mode