Comments on: Antivir

By: stuart

stuart — Thu, 17 Feb 2011 03:53:22 +0000

Dmoney you are a champion….had got rid of everything but the proxy server settings change it had made……once I did that I can browse

By: Jazz

Jazz — Mon, 14 Feb 2011 21:35:05 +0000

Thanks a lot for your help! I followed all your steps and they worked for me. But finding the correct file in the task manager consumed most of my time. In my case it was “yrbussjsika.exe”. Just an input for those who are still working on this problem.

By: Bridget

Bridget — Thu, 12 Aug 2010 04:03:13 +0000

I was finally able to delete by restarting, doing alt/ctrl/del at the very beginning of startup, and ending the file from within Task Manager that ended in tssd.exe –This ended the pop-ups temporarily so that I could proceed to finally run my REAL anti-virus software (the virus had previously stopped access to all programs including the Internet, and also would cause all browsers to crash within 30 seconds of opening.)

Five days later, the virus is back again, calling itself by a new name (System Secure? I have already deleted it so I can’t remember exactly) and with a slightly different icon (greenish instead of blue)– This time the file in Task Manager was droarmush.exe

I’m upgrading my antivirus software (webroot) so that it will detect viruses and not just spyware/adware… hopefully that will keep it gone for good.

By: BmC

BmC — Fri, 06 Aug 2010 16:00:10 +0000

This is what I did:

Reboot your computer, and as soon as your desktop is displayed, hit ctrl + alt + del. That will normally load task manager BEFORE the antivir is fully loaded, and it won’t close it down. You then need to find the process and end it. Mine wasn’t called antivir.exe like it says here, it was a heap of random letters starting with ID I think.

By: mnp1962

mnp1962 — Thu, 05 Aug 2010 16:10:16 +0000

I could not open any programs at all. Started up in safe mode with command prompt and did a system restore by typing in rstrui.exe
This allowed me to run in in safe mode. It worked as I have now rebooted and everyting seems fine. Will now download some splyware programs etc and make sure it is all gone

Martin

By: StorminNorman

StorminNorman — Thu, 05 Aug 2010 01:48:55 +0000

DMoney, you rock. Thanks for your post, you’re helping a lot of people.

By: Jodi

Jodi — Wed, 04 Aug 2010 05:37:46 +0000

Thank you! This was the post that helped me FINALLY have my husband’s computer back! Good grief this malware is a pain. Thanks again for all your helpful information!!

By: Gulfwave

Gulfwave — Tue, 03 Aug 2010 22:20:00 +0000

Thanks so much to DMONEY’s comments above so I can now work to get this junk off.
God bless & thanks to all.

By: DMoney

DMoney — Mon, 02 Aug 2010 19:34:53 +0000

1) Open Windows Explorer – Either by right-clicking on the START menu and selecting ‘Browse’ or from a desktop icon if the infection allows you to.
2) Navigate to C:Windows\sytem32\taskmgr.exe. Right-click and copy this file to your clipboard. Paste it on to your desktop.
3) Rename the file ‘iexplore.exe’ and double-click it. Task Manager should open.
4) search-probably manually- for a file that ends in the characters ‘tssd.exe’ (i.e. 1234567tssd.exe). The first seven characters are gibberish, but it always ends in ‘tssd.exe’. KILL IT! This will give you control of your pc back…
5) In Internet Explorer, go to Tools>Internet Options>Connections Tab>LAN Settings button.
6) You will see that the virus has checked the proxy server box at the bottom left. Uncheck ALL proxy settings boxes. Then, check the ‘Automatically Detect Settings” checkbox at the top left. OK out of the dialog series and this will give you back web access.
7) Now you can go about updating virus defs and scanning your machine and cleaning reg entries, etc.

By: Tiago

Tiago — Thu, 29 Jul 2010 12:55:53 +0000

Hello guys, i have tried everything but is not working… basically antivir is blocking the install of new programs, the opening of new folders, even task manager he does not allow me to open it i have tried to install iexplorer and most spyware programs but antivir does not even let me open them. Does anyone else have a solution to it. Please it woul be much appreciated.

By: anne-sophie

anne-sophie — Fri, 23 Jul 2010 21:39:28 +0000

antivir has infected my PC and even internet explorer, i can’t manage to download the program you are suggesting because of that and I can’t find the files you said to delete

please help me

By: PC Dunce

PC Dunce — Wed, 14 Jul 2010 19:01:49 +0000

I know this may read like I’m the dumbest in the world; but the sites are KNOWN:

browsersecurityaddon.com
prowebantimalware.com
top-rate-scan8.com
computer24protection.com
antivrusfreescan07.com

The sites are ON physical servers located SOMEWHERE physically? So I guess writting and distributing virus software is NOT illegal? or just to small-fry for any police agency to pay attention?

By: Kari Lynn

Kari Lynn — Wed, 14 Jul 2010 16:46:49 +0000

I’ve uploaded the virus software you’ve recommended. I’ve updated it as it asked. My computer is telling me that TASK MANAGER has been disabled and I cannot get to my processes as I know how too to stop the antivir.exe process. It looks like the antivirus software cant get past this darn virus.

Any other option you can offer?

By: Jimbo

Jimbo — Wed, 14 Jul 2010 12:56:49 +0000

Download on the other computer and transport it via thumb drive or CD to infected PC. The removal tool is approx 36mb in size.

By: Tyler

Tyler — Tue, 13 Jul 2010 19:37:28 +0000

I tried to find the process through Task Manager, but it was not listed. Right now I am just running antivirus and hoping for the best… =(

By: Tanner

Tanner — Tue, 13 Jul 2010 08:12:58 +0000

Antivir has downloaded itself onto my computer and has blocked everything including the internet. I am writing this from another computer because of this. How the heck do I get rid of this thing, if i can’t get onto the internet to download the removal tool?

By: Lee

Lee — Sat, 20 Feb 2010 00:39:52 +0000

if you have difficulty removing updatecheck.dll you need to first unregister it. This is the process to unregister the .dll file for windows xp

Goto your taskmanager and go to processes. Highlight the process called “antivir.exe” (or “av.exe”) and hit the button “end process”. Exit the task manager.

1.) close all applications and open windows that you may have open (so copy these directions or print them out because you can not have this open either.)
2.) select start -> run
3.) Type “CMD”. then hit “OK”. ( a black window will appear)
4.) type “cd C:\” and hit enter(or your local hard drive letter name, typically C)
5.) then type “cd windows” and hit enter
6.) then tpye “cd system32″ and hit enter
7.) now type “regsvr32 /u updatecheck.dll” and hit enter
8.) a windows error message may appaer… its ok just hit OK
9) now try to delete the updatecheck.dll file and it should work…

By: katy Bee

katy Bee — Thu, 14 Jan 2010 16:51:00 +0000

Thanks so much, I deleted and uninstaled AntiVi and theres no more popups! I Installed AVG and its taking the rest of the viruses off my PC. Thanks!

By: Jacob

Jacob — Sun, 20 Dec 2009 21:19:30 +0000

Try going to task manager and close it in processes then try to delete files thats what i did

By: Luciana

Luciana — Mon, 07 Dec 2009 08:13:43 +0000

If you deleted every thing related to Antivir, there’s probably another infection ruining your computer. We could help you with the manual removal if we knew the name of the infection. For now, I recommend running anti-spyware.

By: Melissa

Melissa — Sun, 06 Dec 2009 05:36:50 +0000

This Antivir program just downloaded itself onto my computer when I never even clicked on it! I tried to stop it from installing but to no avail. I deleted everything I could that was associated with it, but now everytime I go onto my usual websites, even my own homepage, it keeps blocking me! I don’t know what to do to get rid of these annoying website blockings!!!

By: bec

bec — Sat, 05 Dec 2009 03:45:00 +0000

My web browser was caught by AntiVir yesterday and I found it SOO irritating. I then followed your manual steps and now AntiVir is nowhere to be found! I can’t thank you enough for your removal tutorial!!! (:

By: jennifer.

jennifer. — Fri, 04 Dec 2009 00:49:13 +0000

ive done almost all the manuel removal steps, but when i tried to delete the registry key files it had one file that couldnt be deleted. then when i tried to unregister the dll files it said it wasnt a valid file. please help!!!

By: Luciana

Luciana — Tue, 01 Dec 2009 14:52:30 +0000

Make sure your anti-spyware is updated. Run a scan and remove everything it finds.

By: Binnaccle

Binnaccle — Tue, 01 Dec 2009 14:33:07 +0000

Last night I subscribed to Spyware Doctor, for $29.95 , and have a receipt.
I am still being bombarded with “Antivir” popups !!!!

HELP !!!!! Please

By: Luciana

Luciana — Fri, 27 Nov 2009 15:08:20 +0000

If you find the manual removal too complicated, download some anti-spyware and let it do the job. The websites are blocked by Antivir, this problem will disappear once you delete this malware.

By: kevin frey

kevin frey — Fri, 27 Nov 2009 14:44:22 +0000

i am a complete novice i do not understand how to get antivir off my computer its telling me i cant go on safe sites i cant do anythin i usually do!!!