How to remove Antivirus System Pro alert

Monday, June 8th, 2009 at 3:16 am
Home » Fake warning messages » Antivirus System Pro alert

Antivirus System Pro alert description

Antivirus System Pro alert is typical fabricated security message. AntivirusSystem Pro loads several falsified alerts to make an impression of badly infected computer. The main purpose of such alerts is tricking people into buying AntivirusSystemPro as it was a useful program.

antivirus-system-pro-alert

Antivirus System Pro alert
INFILTRATION ALERT
Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan – dropper or similar.
DETAILS
Threat: Win32/Nuqel.E

The trojan reported by Antivirus System Pro is not even a real thing. Win32/Nuqel.E is just a name made up by scammers to intimidate victims. If you receive the alert, remove Antivirus System Pro as soon as possible.

How to manually remove Antivirus System Pro alert

To remove Antivirus System Pro alert spyware you must block Antivirus System Pro alert sites, stop and remove processes, unregister DLL files, search and delete all other Antivirus System Pro alert files and registry utility. Follow the Antivirus System Pro alert detection and removal instructions below.

The most typical software removal method is to remove Antivirus System Pro alert by using "Add or Remove Programs" service. However there may be hidden Antivirus System Pro alert files, running processes and registries in your computer, so Antivirus System Pro alert may recreate all other files after reboot.

Antivirus System Pro alert manual removal instructions

Block Antivirus System Pro alert sites:
antivirsystem.com Read more how to block Antivirus System Pro alert sites

Stop and remove Antivirus System Pro alert processes:
Antivirussystempro.exe
uninstall.exe Read more how to kill Antivirus System Pro alert processes

Locate and delete Antivirus System Pro alert registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Antivirus System PRO"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "ieModule" Read more how to delete Antivirus System Pro alert registry entries
Download RegistryBooster 2010 to scan errors caused by Antivirus System Pro alert

Detect and delete other Antivirus System Pro alert files:
Antivirussystempro.exe
uninstall.exe
%ProgramFiles%\Antivirus System PRO\conf.cfg
%ProgramFiles%\Antivirus System PRO\mbase.vdb
%ProgramFiles%\Antivirus System PRO\quarantine.vdb
%ProgramFiles%\Antivirus System PRO\queue.vdb

We strongly recommend you to use spyware remover to track Antivirus System Pro alert and automaticaly remove Antivirus System Pro alert processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , ,

94 Responses to

Antivirus System Pro alert

  1. john Bowman
    June 10th, 2009 at 1:28 pm

    THIS IS NOT WORKING. I have had this twice in the last week and NONE of the online services take it out unless i buy the dam program. ANd I can’t get to my regedit or task manager because the program has it locked up. SOMEONE PLEASSE HELP ME!!!!!!!!!!!!!!!!!!!!!!! send me anything you might have to get rid of this british piece of shit.

    Luciana Reply:
    June 10th, 2009 at 10:13 pm

    Have you tried removing Antivirus System Pro manually? The removal guidelines are given above the comments section.

    Marie Reply:
    October 17th, 2009 at 3:08 pm

    How do you remove it manually? I tried checking antivirsystem.com but the website either does not exist or my computer refuses to go to that website. Please help!

    Luciana Reply:
    October 18th, 2009 at 10:58 pm

    Antivirsystem.com is a malicious website and you need to block it.

    Ian Reply:
    July 9th, 2009 at 4:14 am

    computer won’t start in safe mode, i can’t open hosts file, taskmgr, etc….they close right away and i hear the “pop-up” noise, i run cc cleaner and avg and nothing, cc cleaner says i’m okay, avg finds a iehelper.dll or a trojan horse dropper.generic.asah/trojan horse BHO.BGL/JGV and i can’t do anything about it. I hit heal and it shuts down avg

    Luciana Reply:
    July 9th, 2009 at 4:56 am

    Try to remove the malicious files without killing the processes first.

    lilkunta Reply:
    October 27th, 2009 at 6:58 am

    Luciana : I have posted 2 times but my comments dont go thru! This is my 3rd attempt.

    This thing (is it a trojan? vitus? malware?) has disabled me from getting online, from editing the registry, and from doing system restore.

    I have found some of the infected files. 1 was in a windows prefetch folder. I have renamed it. So now when the comp starts I dont see the security tool nor window security center popups. I then deleted the file ( it is in the recylce bin).

    But I still cannot get online nor opne the registry nor open safe mode.

    What do I do? Thanks.

    Kaderu-senpai Reply:
    November 27th, 2009 at 7:56 am

    people people you’re wasting your time… just system restore???? gosh….. if it says system restore cant open, restart your computer and open it as fast as you can, because the anti virus thing doesn’t pop up automatically. by the time you open it the anti virus will be here but you’d have already opened it. then system restore to a time a it wasn’t bothering you….. that’s it…

    DK Reply:
    December 3rd, 2009 at 6:17 am

    Thank you so much. You are so right. That worked perfectly. I am now anti virus PRO free. YAHOOOOOOO!!!!!!!!!

    Paolo Reply:
    February 22nd, 2010 at 7:22 am

    Excellent….I knew I had to do a restore but couldn’t get to it on time. I made a shortcut to ’system restore’ restarted and whammo…got to it in time and now I’m anti virus pro FREE….thanks again

    BA Reply:
    May 4th, 2010 at 6:29 am

    Great… it worked perfectly. Just had to fiddle with timings to get restore started before spyware kicked in…. Many thanks…

    Andrea Reply:
    December 12th, 2009 at 10:05 am

    Kaderu-senpai, whoever you are, you are my saviour. THANK YOU, thank you, thank you.

    Belinda Reply:
    December 27th, 2009 at 5:28 pm

    After three hours of searching and trying this, that and all sorts of frustrating dead ends- you’re suggestion has been the only one that has worked! Many blessings upon you : )

    lilkunta Reply:
    December 28th, 2009 at 12:40 pm

    belinda: Whose post is it that you followed and worked? Please share! Thanks.

    Belinda Reply:
    December 29th, 2009 at 2:06 am

    That of Kaderu-senpai (27/11/09)– was able to get into system restore before the nasty virus started up and put in a previous date and reset computer – did the job, and all is well. Much relieved to have things working properly again.

    lilkunta ( belinda ) Reply:
    December 29th, 2009 at 7:24 am

    belinda:
    Oh ok. Thanks for clarifying. I tried to do system restore but this malware has disabled it.
    I think I need to d/l a malware removal to a cd, then put it in my computer. Hopefully that will work. Thannls.

    Yoli Reply:
    January 8th, 2010 at 10:43 pm

    Thank you so much. This program has been kicking my ass for the last 4 hours. Luckily I had another laptop to research a solution. This is the only thing that’s worked. Great! I can breathe now!

    ky Reply:
    March 30th, 2010 at 6:49 am

    OMG THANK YOU!!!!!!!!! my computer now works good thing i had another laptop to research this

    ni Reply:
    April 9th, 2010 at 1:13 pm

    Worked great. Had to do it in “safe mode” Thanks

    SV Reply:
    April 9th, 2010 at 5:19 pm

    Kaderu-senpai, your solution of system restore along with Paulo’s tip worked perfectly. Thanks very much!

    david T Reply:
    December 5th, 2009 at 1:51 am

    Seriously, simply turn off. Turn back on , instantly go to system restore , it starts to put up it’s warning messeges but not enough to stop the restore working, go back a couple of days and it’s fine !

    Both a malware scan and virus scan show the systems clean.

    God it was annoying though !!!!!

    Barbara Reply:
    April 20th, 2010 at 5:05 pm

    You are wonderful!! Thanks so much this was driving us nuts! Many thanks!

  2. Aaron!
    June 27th, 2009 at 8:24 am

    OMG!!!!!!!!!!!!!!! Thank U SOOOOOOOOOOO MUCH! I practically peed my pants when that trjan thingy came up and its so annoying, plus my mom was out of town with my sister and my mom is usually the expert at getting rid of these things. THANX!

  3. John
    July 4th, 2009 at 6:56 am

    OMG, this thing wont allow me to open up anything. Not the registry, or anything. This has to be illegal for someone to do this crap.

    Luciana Reply:
    July 6th, 2009 at 9:49 pm

    It is illegal. Boot your computer in a safe mode and you will be able to use the manual removal or run anti-spyware scan.

    AJS Reply:
    November 30th, 2009 at 1:15 pm

    How do tun run anti-spyware scan from safe mode?

  4. Joel
    July 25th, 2009 at 6:38 pm

    Can’t access my registry. I get a message that says this function has been disabled by my administrator… but it’s my personal computer (and to my knowledge, I don’t have an administrator). Any advice?

    Luciana Reply:
    July 26th, 2009 at 10:23 pm

    Boot your computer in a safe mode and then use the manual removal guide.

  5. tgwizman
    August 20th, 2009 at 5:42 pm

    how do you start your computer in safe mode?

    Please!!! Give me step by step instructions on how to remove the HKEY_ stuff

    Luciana Reply:
    August 20th, 2009 at 10:36 pm

    Restart your computer and keep pressing F8 button while PC is still booting. You will see an option to start in a safe mode. Here’s explanation how to remove registry entries. Once you’re done with the removal, restart your computer and choose the option to boot in a normal mode.

  6. Ken
    October 18th, 2009 at 7:41 pm

    So what is the short abreviated name for this so i can find it in the task manager? it doesent show up in my add remove programs either unless i canr find it there too. Please help. I did see an apple update program I dont ever remember seeing.. Ive got xp …LOL… but it wont let me delete it.

    Luciana Reply:
    October 18th, 2009 at 11:05 pm

    The processes are Antivirussystempro.exe and uninstall.exe. If those are not on the Task Manager, run an anti-spyware and let it do the job for you.

  7. Spark
    October 20th, 2009 at 9:41 pm

    New vertion or just rename?

    Antivirus System Pro alert, pop and nage change for
    Kgamsysguard.exe in forlder program/bgin.

    (it can be error in name, i erase before take notes)

  8. JC
    October 28th, 2009 at 6:17 am

    What if you can’t open in safe mode. What do I do then

  9. lilkunta
    October 28th, 2009 at 11:41 am

    The virus has blocked me from getting to safe mode and from getting online. Please what do I do? Thanks.

    Luciana Reply:
    October 28th, 2009 at 11:22 pm

    Safe mode s not necessary for the removal. You can download some security tool on another computer, copy the file to an usb drive and then copy it to the infected PC.

    lilkunta Reply:
    October 29th, 2009 at 1:45 pm

    Luciana: THANK YOU SO MUCH for replying.
    My usb drive is blocked as well.

  10. Iain
    October 30th, 2009 at 1:04 pm

    There is a new updated version of this, similar pop ups but none of these removal instructions work, hopefully you’ll have removal instructions for the new version coming soon

  11. stu in kc
    November 2nd, 2009 at 9:11 am

    This is a bad, bad program. It infects your .exe files so you can’t even pull up Internet Explorer! I got this from an adult site, and I should know better. A tablespoon of castor oil and no dinner, straight to bed!!!!

    Rus Reply:
    November 21st, 2009 at 4:49 pm

    same.. lol :( but when i restarted my PC it worked jsut fine and no lag.. but internet dosent work… and says something up with proxy..?

  12. Jamie
    November 2nd, 2009 at 11:45 am

    I am having the same problem it seems to be to new for the current known fix. I have gotten around it with temp solutions running on a very limitted start up also they had mcafee which was expired and then they installed norton after the problem was there needless to say norton doesn’t work proper either. Hopefully there is a permantent solution for this soon.

    Luciana Reply:
    November 2nd, 2009 at 11:07 pm

    Anti-virus tools are not meant to deal with frauds like Antivirus System Pro, you need anti-spyware for that.

  13. Ermst
    November 11th, 2009 at 1:04 pm

    Instead of booting in safemode go to Start > Execute and enter msconfig to the text field (then press enter key). In the popup window go to “Systemstart” tab and deactivate whatever you think is causing the trouble. Generally speaking, none of the entries in the list is really needed. So deactivate them all – reboot – and remove the malicious software. Turn off the computer using the switch on the rear (i.e. do not shut down the system but turn off the power supply).

    After restarting the machine return to msconfig and activate whatever you think you really need.

  14. Ralph
    November 11th, 2009 at 2:28 pm

    I tried to use the Malwarbyte Anti-malware but the I keep getting the pop-ups and I still see the Antivirus System Pro icon and another one that is called Windows System Defender. What do I do??

    Luciana Reply:
    November 12th, 2009 at 12:16 am

    Apparently your anti-spyware is blocked by Antivirus System Pro. Use Antivirus System Pro manual removal instructions to deal with this pest.

  15. Ralph
    November 12th, 2009 at 2:02 am

    Thanks for replying. I tried to manually remove it but the file Antivirus System Pro is not on my taskmanger and something is blocking me from using my registry also. Any idea what this “Windows System Defender” is? I’m seeing the icon on several different programs.

    Luciana Reply:
    November 12th, 2009 at 2:32 am

    Windows System Defender is another fake program, here’s a link to remove it on your own.

  16. Rus
    November 21st, 2009 at 8:06 pm

    Well when i restart it gives me an option to open it or cancel like you know VISTA program requires your permission i found the “sys” one and deleted it and i try my internet and dose not work please reply i rly need my pc back because of all the high school shit.

  17. wizzard*one
    November 25th, 2009 at 9:50 am

    The best way to get rid of this trojan is to pull drive an scan it from another pc …with microsoft security essentials!!

  18. Ruffle
    November 26th, 2009 at 7:43 am

    Hi, can someone please please HELP! I got this program on my toolbar, vista laptop. I can see the name and popup as “Antivirus System PRO” but when I followed instructions above, I couldn’t find the files in Program Manager as “Antivirus… ” Please HELP! Many THANKS!!!

  19. Alex
    November 26th, 2009 at 8:25 am

    I removed this thing from my computer but now my internet is saying it cannot display the webpage…any suggestions…my mmos are waiting and this is aggravating me

  20. Mary Ann
    November 27th, 2009 at 12:23 am

    Same thing with me….can not get IE after removal….was able to get Firefox working after changing a setting…but the computer is a friends, and she like IE…any ideas…PLEASE

  21. Strawberry
    November 27th, 2009 at 5:29 am

    I got the Antivirus System Pro 2010 since yesterday. I deleted files in the safe mode more than once, using Smitfraudfix.exe and nothing had change. I even run spybot and avast! and I keep deleting the files, it keep coming back. The only way I can get rid of the pop up is by opening task manager at the beginning. If I don’t, I can’t even open any other program. And I tried to locate the Antivirus System Pro alert registry entries and I can’t even find them, there are no traces of them. Any others suggestions please!

  22. VICTIM
    November 28th, 2009 at 1:28 am

    FOR ALL YOU GUYS IN TROUBLE.. TRY RESTARTING THE SYSTEM
    AND THEN QUICKLY OPEN TASK MANAGER “CTRL + ALT + DEL” AND THEN
    DELETE THE PROCESS WHENEVER YOU SEE IT THERE.

    “aralsysguard.exe”

    PROCESS STARTS ITSELF , THIS WONT ALLOW YOU TO START TASK MANAGER.. RESTART AND RUN TASK MANAGER AGAIN.. TURN OFF YOUR WIRELESS. STOP “aralsysguard.exe”
    AND THEN SEARCH FOR A REMEDY AFTER STOPPING “aralsysguard.exe”

  23. Rman
    November 28th, 2009 at 5:20 am

    Kaderu-senpai, who said “system restore” had it nailed. I fought with this thing for hours, before that simple solution occurred to me. All these manual instructions may work, but the bug hindered my machines functionality so bad I couldn’t follow the instructions.

    System Restore gave me back control of the machine, then one can run whatever procedure they want to remove the thing. It took a few tries, reboots, as you have to get the restore going before the bug, but it worked.

  24. Rebecca
    November 28th, 2009 at 10:30 am

    This program has been updated and in a very bad way!! It’s such a shame that there is some jerk out there distributing this. I got this damn program by clicking on a link after doing a google search, this link was supposedly McAfee secure!! So much for trusting that anymore.. Last time I got this Antivirus System Pro program I could not remove it, I had to restart my computer in safe mode, put system restore on the desktop and get that going really fast before the program started.. The last time it worked!! NOT THIS TIME.. This program has been updated and it CANNOT be removed. It wont allow a start in safe mode, and if you do get to your system restore early enough, which I did this time, the restore is unsuccessful.. I tried it 6 times all different dates, and none of them worked. Nothing works, I tried it all! The only way to get rid of this program is to wipe your hard drive, at least I hope. With windows xp I clicked on the system recovery, that comes up during boot. Im hoping that this will work! I’ll post and let you know.

  25. TC
    November 30th, 2009 at 1:42 pm

    I was thrilled to find this site as a resource! I did stumble into some additional information that may benefit the manual removal instructions –

    Of course it wouldn’t be malicious if they didn’t change the process names – (GRR). The process for my version of Antivirus System PRO was orufsysguard.exe. Unfortunately, the version I was hit with didn’t have any obvious registry entries or executable files that I was able to isolate manually.

    If you plan to use a malware removal tool, you will quickly discover that these programs are disabled until you kill the process causing your headache. You can copy the item from a USB flash drive to the desktop or C: drive by moving the “infected” windows aside, but you MUST drop the shortcut into your StartUp menu to execute the program before the malicious process.

    The input to launch the Task Manager step 1 was priceless. This allowed for use of MSCONFIG.

    For those of you that can’t seem to get your USB drive to work… hit the Task Manager on startup and find that nasty little process (appears to have some form of sysguard in the name).

    My prounstl.exe did appear to become corrupt post scrubbing – perhaps users that are still unable to access the Internet with IE should consider updating their network drivers (In my case it was the Intel PRO set). [[It could be that I inadvertantly altered something in my irritated state post infection..]]

    I can’t lie and say it was a cut and dry process – this site has done a fantastic job putting together the core steps and things to look for. Despite being an IT professional – I still felt like I was chasing my tail around trying to find that obnioxious flea that kept biting me.

    Thanks again! Good stuff!

  26. Marisa
    November 30th, 2009 at 7:48 pm

    THIS FINALLY GOT RID OF IT FOR ME! Worked as of 11/30/09
    If antispyware pro won’t let you open anything or access the internet, download the installer for SUPERAntipyware Free Edition on another computer, put the installer on a usb, and then move the file onto your desktop.
    Restart your computer. By doing this you can quickly open files on your desktop before antispyware pro has a chance to load. Click into the installer and install the program on your computer. antispyware pro will probably start up by that time so if you need to restart your computer again and double click on the desktop shortcut to the program. perform the quick scan and it should find and terminate the bad files. The program started freaking out partway through my scan so if need be click next and remove the files without fully scanning your computer.
    Also, the process .exe file for me was hogbsysguard.exe if you want to try shutting it down that way.
    I personally am having problems connecting to the internet now but at least I finally got the pop-ups to stop and can do other noninternet related things until i fix this problem

  27. Peter
    December 1st, 2009 at 9:26 am

    I picked this up last night/early this morning on my desktop, visiting a site that I shouldn’t have been visiting in the first place (thank you again, karma!).

    In my case the file turned out to be called “fjjwsysguard”. I found it with the help of the above poster who suggested the “sysguard” content of any likely file, and then was able to confirm it with the time and date that I acquired the file. I then searched for other files acquired around the same time. Deleted them both (yes, I only found two files).

    Now, at least, AntivirusSystemPro doesn’t seem to load itself on startup, and I seem (so far) to be able to access and use the files and programs on my computer.

    But I am so far unable to access the Internet (I’m using my laptop to send this).

    Any ideas?

  28. Rick
    December 1st, 2009 at 11:37 am

    I just got Antivirus System Pro, just like this one. I just read the simple 5 minute removal method posted on Nov. 15, 2009 by Barry under the same title. I found it too late after I already wiped my system drive to install linux. Always store data on a second drive, and the system drive by itself.
    All I see are people trying to remove this malware, but novbody is talking about the other threats about idenitity theft when people enter their information these hackers hope everyone will do. I entered fake info, to see if it would shut it off, but it didn’t work of course. Then what do I see about 7 hours later but an email from PayPal, with the same info I entered to Antivirus, stating the following to paypal.com, he wrote to them, and paypal couldn’t find the account he asked for:

    Original Message Follows:
    ————————
    Form Message
    customer subject: nnnnnnn@netzero.com
    customer message: Additional Information: ‘I have a new paypal account
    nnnnnnnn@gmail.com. But I owe money on my old account.
    nnnnnnnn@netzero.com my old address was ### sterling west Justice IL
    ##### How do I get in my old account? My new account is
    nnnnnnnnn@gmail.com

    NNNN NNNN’

    This guy takes people’s old paypal accounts, and modifies them to funnel the money from his malware, and changes it enough not to get caught. If PayPal would cooperate with federal authorties and find this guy, and trace what his bank account is, we’ll finally catch him when he goes to withdraw our money.

    This program managed to find my current paypal account too. Now I have to worry about if he’ll hijack my current paypal account, which I had to change to avoid.

  29. AD
    December 1st, 2009 at 7:27 pm

    For everyone still having trouble accessing the internet: this shit program modifies your internet settings to use a proxy. You need to go into control panel, internet options, connections tab, LAN settings button, uncheck the proxy box and check the box for “automatically detect settings.” You should be back to normal from there.

    The key to getting rid of the popups and everything is to search for the “*sysguard.exe” file and delete it. In my case, it was mxxqsysguard.exe.

    Once you’re clear again, I recommend two preventative measures: (1) stop surfing porn. (2) create two different logins for your computer, even if you’re the only user, and make one of them a “limited” account. Use the limited account for your normal stuff, and use the regular (administrator) account when you need to install software, reconfigure stuff, and recover from attacks like this. Doing that made my life much easier when I got hit with this antivirus PRO bullshit because I was able to log out of my infected limited account and log into my “administrator” account. From there, I surfed the web (steering clear of porn sites) for a solution to my problem. No need for a second computer.

    Also, for what it’s worth, I traced the source of mine to a wannabe social networking site, so porn sites aren’t the only places you can pick this up.

    Peter Reply:
    December 2nd, 2009 at 10:40 am

    Thanks, AD:

    After finding and deleting the “sysguard” files (see my post of 1 Dec), your reset of the LAN settings seems to have done the trick: I am back on the internet and appear to be AntiVirus System Pro-free!

    One other thing: A free scan (via PC Tools) turned up two “sdra.exe” files on my system, which a quick Google shows are a Trojan. I don’t know if this came to me thanks to AntiVirus System Pro, but I hadn’t seen them before. Interestingly, neither Webroot Spy Sweeper nor MS File Search could find the sdra files that PC Tools discovered.

    Then I discovered the freeware Super AntiSpyware: It did a super job of finding the sdra files (and about 30 cookies that no one else had spotted) and removing them.

    After a day-and-a-half’s work, I think I am back to where I was before all this happened.

    lilkunta ( reply to AD) Reply:
    December 14th, 2009 at 7:27 am

    I changed the settings by unchecking proxy. Still the internet is blocked.
    Do I need to plug up to the modem with a ethernet cord in order to get online?

    AD Reply:
    December 18th, 2009 at 5:06 pm

    This is difficult to troubleshoot without being there. I can only suggest checking the box for “automatically detect settings,” and make sure the proxy box is cleared. I don’t know if the malware does anything to your wireless network settings.

    lilkunta(AD) Reply:
    December 21st, 2009 at 12:24 pm

    AD: I uncheck ‘proxy’ and did checked ‘automatically detect settings’. Still nothing.
    Everyone is using wireless internet, sigh. I need to find a modem to plug mu ethernet cord to and see if I may get online that way. I will let you know.

    dk Reply:
    February 16th, 2010 at 1:38 pm

    AD you are a genius!!! thankyou!!

  30. rockstar
    December 6th, 2009 at 8:16 am

    a good friend of mine recently encountered a problem that will not allow him to start up in safe mode, search the internet, or run any anti- malware , spyware, of virus software. nor will it allow him to run the task manager to see what processes are running. could i have a couple of suggestions that will help me fix this problem. (side note) running a full restore is not a possibility there are too many files that are important to his work. i did not find any reference to antivirus system pro nor can i find any .exe files that should not be there. thanks for any help that is offered.

    Luciana Reply:
    December 7th, 2009 at 12:18 am

    Maybe it’s not Antivirus System Pro that you’ve got on your computer. It might be some other infection. We could help you with the manual removal if we knew the name of the malware.

  31. LaLA
    December 9th, 2009 at 7:24 am

    OMG PLEASE i tried everthing from safe mode, regedit, task mang. ( i can’t find the name in Task mang. ) could it be under somethng else?

    Also it won’t let me run the cd i just bught( Trend Micro ) I can’t get online … porn keeps poping up.

    PS. System restore won’t open … this virus or what ever the hell it is won’t let me open the system restore.

    Bankfox and win32 nuqul…. :( im very upset please help me?Thank you …. :D

  32. lilkunta
    December 10th, 2009 at 7:42 am

    I have the exact same problem as LaLa.
    So please how do we get rid of this malware?
    We cant get online, we cant get to safemode; the malware has disabled the registry editor & system restore…. HELP!

    Luciana Reply:
    December 11th, 2009 at 12:19 am

    You can download anti-spyware on another computer and then copy the install file to your PC using USB drive or CD.

    Bri Reply:
    December 11th, 2009 at 7:56 am

    Instructions are for Windows XP. Shutdown your computer, either via shutdown or press the power button for 4 seconds. Turn your computer back on and press F8 repeatedly. If Windows starts to load you missed it. Press power button for 4 seconds until computer shuts off again. Then turn on and press F8 repeatedly. Windows will prompt you…Start Windows in Safe Mode (at the top of the screen). Log in to your computer if prompted and do a system restore. Click Start, point to All Programs, point to Accessories, point to System Tools, and then click System Restore. On the Welcome screen, click Restore my computer to an earlier time, and then click Next. Continue to follow the prompts. The computer will shut down automatically and reboot. On reboot, you’ll see the Restoration Complete page, and then click OK. Start windows normally and you will be virus free.

  33. lilkunta
    December 11th, 2009 at 11:06 am

    @lucian: The malware has disabled the USB drive. I will try via cd. I will let you know.

  34. lilkunta(LUCIANA)
    December 21st, 2009 at 12:22 pm

    @ Luciana: USB is not being read. I have to wait & get help for cd method.
    I still am unable to get to safe mode. The only 1 Im able to get to is
    ‘ Directory Services Mode Windows Domain Controllers ‘. From this mode still the regedit and system restore are disabled.

  35. stu
    January 7th, 2010 at 8:30 pm

    OK, like Rockstar asked above, what do we do with the latest nasty variant. It will not start in safe mode. Period. You can NOT get to msconfig, or task manager, or regedit. Period. Perhaps removing drive and scanning on another PC is ONLY option??

  36. stu
    January 19th, 2010 at 8:46 am

    Here’s what works when all else fails:

    –Remove Hard Drive from infected computer
    –Obtain an adapter to enable plugging the drive into a different computers USB input. (THis will be a SATA or IDE to USB adapter. Google it, they are cheap. Or find a techie friend to help.)
    –Plug the infected drive into other computer USB. It will show up in explorer as a separate drive letter. Scan the infected drive using Malware Antibytes (or other tool that you KNOW will remove this malware). It will be cured!
    –While you are at it, copy/back up any important data files from the infected drive.

    lilkunta Reply:
    January 20th, 2010 at 12:54 pm

    Hi Stu. Thanks for this detailed explanantion. I told my friend this. She is weary of letting me do this. She says that I will infect her computer. Please what may I tell her to reassure her that I wont infect her computer? Thank You.

    Everyday I try. I am was able to get the registry editor working by dowloading ‘resgitry fixer’ to a cd than loading it to my computer. But all the others things that I have tried ( malwarebytes, spyware dr, and others that Im unable to remember right now) do not work. I get various error codes. PLEASE . I do not have the $ to take it to a tech guy to fix. I did think that at first but they charge $150 for just the diagnostic (and i dont need this bc I know Im infected with malware) and then additional money 9 varying from $55-85 an hour) depending on how long it takes them to fix it. I am unable to afford that.

    Luciana Reply:
    January 20th, 2010 at 11:29 pm

    The error codes you get when trying to run security tools are displayed by the malware. It prevents you from running tools to prevent you from deleting the infection. However, you should be able to run the removal programs in a safe mode. This way you don’t need any assistance and you don’t have to pay to anyone.

    lilkunta Reply:
    January 21st, 2010 at 1:43 pm

    Luciana: Hello! I thought you had grew tired of us asking you questions.
    The malware wont allow me to get to safe mode.
    I hit F8 & choose safe mode but it does not load.
    I am only able to get to debugging mode.

  37. natalie
    January 22nd, 2010 at 1:49 pm

    i love you Kaderu,my brother gave me his comp to fix as i have another laptop to look help up and here you are, worked a treat but had to be fast.it loaded virus just as i clicked restore and it started to restore and shut down,oh he owes me big time for fixing this,thanks yr a star

  38. duece
    February 4th, 2010 at 6:32 am

    Props to Kaderu-senpai! Pretty simple fix. Rebooted system and was able to access system restore prior to the malware starting up. All is well. Thanks again Kaderu!

  39. lin
    February 5th, 2010 at 7:41 am

    Thank you so much Kaderu, a foot of snow and I get this thing!! The re-boot and restore was perfect!!!

  40. norah
    February 9th, 2010 at 2:49 pm

    lin said : “Thank you so much Kaderu, a foot of snow and I get this thing!”

    Me too, you saved the day!
    Blessings!

  41. Matt Baker
    February 14th, 2010 at 8:01 pm

    Daughter got this terd from a website doing research for high school. I did the reboot and system restore after 2 hours of chasing my tail. Seems to be working.

  42. 4RENZIXS
    February 23rd, 2010 at 7:31 am

    TO GET TO SAFE MODE YOU HAVE TO TURN YOUR COMPUTER OFF AND THEN TURN IT BACK ON WITH YOUR FINGER DEPRESSED ON THE F8 KEY ALL THE WHILE. DON’T LET UP ON THE F8 KEY, KEEP IT DEPRESSED BEFORE YOU PRESS THE ON BUTTON ON YOUR COMPUTER AND DURING BOOT UP. ONCE YOU REACH SAFE MODE YOU SHOULD BE ABLE TO SELECT SAFE MODE AND SYSTEM RESTORE. I HAD THIS RAPIST ASS VIRUS YESTERDAY !!!

  43. Mystic7
    February 28th, 2010 at 5:19 am

    The system restore trick works (safe mode or not), however, I did this 2 days ago, fixed the problem, and then this morning it came back, this time with a new name (I forget what it is, I immediately did a system restore to get rid of it again).

    Anyway, needless to say, as of now system restore seems to be only a temporary solution. I tried manual removal but as others have said, most of the files are not listed in the registry or in task manager. Seriously the guy who invented this should have his balls cut off. Why is it so difficult to find him?

  44. Johnny Horsecock
    March 6th, 2010 at 1:36 am

    I got this fuckin’ virus last night and here’s what worked for me (at least so far, I have Windows Vista by the way–that should tell you how little I care about my computer, I just use it for the internet):

    I’m not much of a computer nerd at all so of course I fucked up the system restore option at first–instead of selecting a previous restore date I clicked on create and it created a new one (which was my computer at the current moment, which obviously was no good, since it currently had this pain in the fuckin’ ass virus!) so after a couple of hours trying different shit and getting some ideas from this page and 1 or 2 others I stumbled my way to this solution, that hopefully lasts!

    Restart your computer
    as soon as it comes back on hit ctrl+alt+del to bring up the task manager
    Under ‘Processes’ look for the .exe that looks like the virus–for me it was ‘pyyrsftav.exe’, click on it and hit ‘end process’-that will at least stop the annoying pop-ups
    then while still in task manager right click the ‘pyyrsftav.exe’ to ‘open file location’-this is cool cause it tells you exactly where this cocksucking virus is on your computer-
    that brings you to the folder containing this virus–right-click this folder and select ‘Rename’-rename the folder anything you want-I renamed it ‘fucku’-you can now delete the folder from your hard drive that contains this fucking virus, I even empty the fuckin’ recycling bin just in case that matters, which it probably don’t

    that seems to be working for now, I posted this for any non-computer nerds who may be in the same boat I was, so excuse the non-technical language

  45. kaveen
    March 16th, 2010 at 11:47 pm

    here is a another way to solve this problem try it if posible :

    1)shut down your computer and turn on/or just click restart button
    2)press f8 during rebooting
    3)use arrows to highlight the phrase written “restore” safe mode
    4)click yes
    5)there will be no wallpapers for this safe mode and know you could operate your computer as usual..
    5)try uninstalling the program know and delete all files including the downloads file.
    6)click restore program and wait …………………
    7)follow the steps shown in system restore click next and wait,,,,,,,,,,,,
    8)okk!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

  46. cdl
    March 22nd, 2010 at 3:33 pm

    I got rid of the annoying parts of this virus (pop ups ect.) but now I can’t connect to the internet… I tried going into internet options & adjusted my LAN settings but nothing. And BTW, system restore is what worked for me! I deleted some stuff from my registry too… Any ideas how I can get back online??

  47. Ian
    March 30th, 2010 at 11:07 am

    did system restore in safe mode. I couldn’t find teh files that where mentioned do I still need to delete files and such.

  48. Ali
    April 17th, 2010 at 11:16 am

    hey i’ve recently had this problem on my computer however i was able to fix it through a system restore. but now the limewire program on my computer is unable to work. it says the media is damaged and wont allow me to run the program. i even recently tried uninstalling it n then reinstalling it however now it wont reinstall at all! this issue has been bothering me greatly for some time now and any advise would be a great help!
    any sugestions?!?

  49. Tony
    May 2nd, 2010 at 11:56 pm

    Hi, i’ve tried ’system restore’ in the safe mode, but the problem with this virus is still there and system restore wasn’t completed sucessfully. in normal mode, even if i try system restore, before the virus pops out, as soon as it does so, the system restore process cannot be completed. Yet the ‘antivirus system pro alert’ hasn’t been completely installed in my computer and it tries to download it when I log on without letting me do anything else. Shall I install it and then try to remove it? Any help would be very very much appreciated and needed! Thanks

  50. Adrian
    May 31st, 2010 at 2:44 am

    Im having these same problems too and its driving me mental!!! Please can someone tell me step by step what to do??

    THANKS HEAPS IF YOU CAN!!!

    Luciana Reply:
    May 31st, 2010 at 4:27 am

    Here’s Antivirus System Pro removal guide. Open the link and scroll down till you see the title “Antivirus System PRO manual removal instructions”. Then simply follow the steps given there.

Comments are closed.

Download does not start? Try a mirror download here
«
»