How to remove AV Security Suite

Wednesday, June 2nd, 2010 at 6:08 am
Home » Rogue Antispyware » AV Security Suite

AV Security Suite description

AV Security Suite fraud comes to replace Antispyware Soft and AntispywareSoftware malware. Don’t expect AVSecurity Suite to work as antivirus + antispyware kit: the program is a hoax.

AV Security Suite uses fabricated infection warnings to intimidate its victims thus making them interested in purchasing the tool. AV Security Suite imitates computer scan, scan reports, Windows notifications and infection alerts. Since it loads the counterfeit pop-ups constantly, using the compromised machine becomes almost impossible. AV Security Suite may cause other problems as well. It may hijack web browser and prevent people from visiting websites related to cyber security. AV Security Suite may also block regular applications including firewalls and spyware and virus removers.

Under no circumstances buy AV Security Suite! It should be eliminated as soon as it’s noticed on a PC.

Get rid of AV Security Suite

AV Security Suite is a Rogue Antispyware software

How to manually remove AV Security Suite

To remove AV Security Suite spyware you must block AV Security Suite sites, stop and remove processes, unregister DLL files, search and delete all other AV Security Suite files and registry utility. Follow the AV Security Suite detection and removal instructions below.

The most typical software removal method is to remove AV Security Suite by using "Add or Remove Programs" service. However there may be hidden AV Security Suite files, running processes and registries in your computer, so AV Security Suite may recreate all other files after reboot.

AV Security Suite manual removal instructions

Block AV Security Suite sites:
antispyprogtool.net
antimalwaresecurity.net
antispyware-guard.net
threatremover.net
antispywareprog.net
antispantispycastle.com
omegantivir.com
antispybase.net
antispybase.com
profantivir.com
av-look.net
av-look.com
Antivirprime.com
Antivir-product.com
Antivirmore.com
Antispywarepc.com
antivirback.com
antivirback.net
antiviractive.net
profantivir.net
antispymega.net
antivirfox.com Read more how to block AV Security Suite sites

Stop and remove AV Security Suite processes:
[random string]tssd.exe Read more how to kill AV Security Suite processes

Locate and delete AV Security Suite registry entries:
HKEY_CURRENT_USER\Software\avsoft
HKEY_CURRENT_USER\Software\avsuite
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter "Enabled" = "0"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:1041"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ouferdbubtdve"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ouferdbubtdve"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1" Read more how to delete AV Security Suite registry entries
Download RegistryBooster 2010 to scan errors caused by AV Security Suite

Detect and delete other AV Security Suite files:
%Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe
%Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe

We strongly recommend you to use spyware remover to track AV Security Suite and automaticaly remove AV Security Suite processes, registries and files as well as other spyware threats.

av security suite removal tool

Download does not start? Try a mirror download here

Tags: AntiSpyware Soft, Antispyware Software, AV Security Suite, AV SecuritySuite, AVSecurity Suite, AVSecuritySuite how to get rid of AV Security Suite how to remove AV Security Suite how to uninstall AV Security Suite

102 Responses to

AV Security Suite

john galpin
June 5th, 2010 at 7:55 am
This program is crap. It takes over your computer and every time you start to look for the program a screen pops up and ask if you want to continue the protection. When you click YES or NO it shuts down everything you have started to try and remove it. This program will make you want to throw your computer out the back door. I will never buy this and only highly critized it. THIS PROGRAM STINKS.

Reply
Tim Reply:
July 5th, 2010 at 5:53 am
I have internet explorer,,which it has blocked,,,and I have mozilla,,,,which it did not block. Was able to download spyware doctor and removed it. Its always good to have this or firefox loaded on your computer, at least then u have internet, and a way to beat this thing

Reply
daniel Reply:
July 6th, 2010 at 12:41 pm
thanx thanx thanx….it works

Reply
Charles
June 5th, 2010 at 9:44 am
AV Security Suite has hijacked my laptop and will not let me download anything or go to any websites. I do not know what to do. Any suggestions?

Reply
Luciana Reply:
June 6th, 2010 at 11:08 pm
You were able to post this comment, so I assume you got access to another PC. Use other computer to print the manual removal tutorial and then follow the guidelines step-by-step to delete malware from your computer.

Reply
Daniel Reply:
July 5th, 2010 at 6:27 pm
ok first try to open up your computer in a safety mode with networking…later if you try to browse the internet it will say access had been denied. so you will have to go to tools then internet options under internet options go to connections and finally LAN settings. make sure to uncheck the any categories under proxy server and the internet would work fine. then if you have an Antivirus run a full system scan. hopefully it will find the virus and you will be able to get rid of it. Hope i helped you out.

Reply
Georgia Reply:
August 9th, 2010 at 3:56 pm
Thanks – my husband loaded this “security” program a while ago and he had problems when he first did it but that was a long time ago (I KNEW you should never do that). Apparently it wasn’t deletable and now it popped up again months later. His system restore was blocked, internet explorer, etc. I even right clicked on properties of one of the warnings, to see if I can find where it is nested, and it reads kkds://C:/documents & settings… needless to say this stumped me because I have no concept how to get before C: on any computer. Our webroot spysweeper antivirus software, which we bought with the computer years ago and have updated ever since, popped up 3 malware warnings and told us to run a full scan, which we are now. Let me know if there is anything else that I might have to do….

Reply
sophia valencia Reply:
August 15th, 2010 at 5:58 pm
this suite thing randomnly popped up. it ownt let me on internt or go on control panel. i have no idea what to do. please help me!

Reply
Ulises
June 9th, 2010 at 5:57 pm
I deleted the registry keys. Except for me, it was a file called “fwexkj.exe” not “ouferdbubtdve”. Then I deleted the files too, then rebooted, and my computer is running fine. Thank you so much for this. This virus was driving me insane. Thanks again. I am a very happy panda bear again.

Reply
kurt
June 9th, 2010 at 6:44 pm
help none of the stuff works!!!!!!!!!!!!!!!help

Reply
sophie
June 9th, 2010 at 7:14 pm
What I found most useful is to hit Ctrl-Alt-Del immediately after logging on to to your User profile, this must happen before AVsecur. suite has a chance to load. What I noticed was in processes it was listed as Oakyc.exe. Ending that process allowed me to get my computer back with out the annoying popups but it didn’t give me access to anything but gmail. So I created an alternate user profile and downloaded an anti spy ware and have been battling this thing ever since. I repaired my IP address and that seemed to bring back the internet (as I am typing on the infected profile). This is only a temporary solution. The damn thing is still there I haven’t been able to get rid of it yet but it has allowed me to use my computer like normal until I turn it off and it begins again! This thing popped up on Yahoo while I was reading the headlines…I swear..lol. Good luck to the rest of youse.

Reply
GC
June 9th, 2010 at 7:41 pm
Hi, I have tried all of these fixes and nothing works. I downloaded the SpyWare Doctor and it would not open due to the AV suite being in operation. How do I get the Spyware doctor to work?

Reply
yo Reply:
June 13th, 2010 at 10:32 pm
well for me if you hold the power button for a while it closes and when you restart it, the comp gives me option to either open it normally or in safe mode. if you open in safe mode, it lets you open the spywaer removal thingy.

Reply
pm
June 10th, 2010 at 8:55 am
followed the instructions manual instructions. got rid of the av security suite and after reboot, system seems to be working normally. phew!!!!

Reply
Rylan
June 10th, 2010 at 2:57 pm
Ya this worked great but my firewall is all messed up along with windows security center not knowing about my anti-virus anymore.

Reply
Lisa
June 11th, 2010 at 6:34 am
Your “AV Security Suite manual removal instructions” worked like champ!
My laptop is alive again!!!!!!!
Thank you so much.

Reply
mike Reply:
June 22nd, 2010 at 6:46 am
Hello, I need a copy of the AV Security Suite manual removal instructions. Can you forward them to my email somebody?

Reply
pickle
June 11th, 2010 at 3:24 pm
I followed the manual instructions, and it appears to have worked. One thing- the primary .exe file on my system was named wlopiip.exe. I had to remove this from the Registry and the file system. This is a nasty piece of malware- best of luck to everyone in getting rid of it!

Reply
Jimbo Wayne
June 14th, 2010 at 12:28 pm
Anyone identify the administrator of the AV Security Suite “purchase” site?

Get the name, track them down, press charges!

Reply
Todd
June 19th, 2010 at 6:40 am
Can the manual delete be done in safe mode? the bug will not let me do anything in reg windows

Reply
Adri Reply:
June 21st, 2010 at 11:35 am
No I don’t think it can (but you can try)

I got rid of it using the manual intructions and by downloading malwarebytes. But you’ll have to download malwarebytes in safe mode first. Then, (while you’re still in safe mode) the malwarebytes program will perform a quick scan and it’ll remove the infections. Then you can restart and begin in regular mode. In regular mode is how i performed the manual steps. Now you may be asking, why did i perform the manual steps if the malwarebytes removed it? well I did this because I just wanted to be sure. And the manual steps listed above are excellent.

Reply
Todd Reply:
June 22nd, 2010 at 8:14 am
I was able to do this manualy from safe mode. (if thats not possible don’t tell microsoft hehe) That is one nasty bug. for people that try this some of the file names have changed so pay close attention.

Reply
Bob Reply:
June 26th, 2010 at 6:32 am
i did the ctl _ alt _ delete before it had a chance to load in regular windows and it stopped it from loading so I can do all the rest…

Reply
george wilberg
June 19th, 2010 at 1:11 pm
My computer had AV installed free version from vendor from E-Bay-when bought a refurbished Dell Computer with XP. All of these error messages came up and finally purchased the AV premium program for $69.95 to get the computer to work at all. The CPU was maxed out at 100% and the computer was non-responsive. Now it will not let me unin stall the program normally. This sucks.

Reply
Bob Reply:
June 26th, 2010 at 6:36 am
you actually bought this dam thing from them… I would be watching you credit card for any unauthorized usage… these guys are crooks

Reply
george wilberg
June 19th, 2010 at 1:12 pm
Got hijacked like described. Paid almost $70 for their premium 3 yr program and do not know if can get a refund as used my debit card. This sucks.

Reply
Gustavo
June 19th, 2010 at 6:43 pm
In my case the name of the file was rigkdxutssd.exe (instead of tssd.exe). All the other instructions worked fine, except that I had to run them in safe mode. Thanks for sharing this info!!

Reply
BT Reply:
June 22nd, 2010 at 6:35 pm
how did you discover the .exe file if it wasnt “tssd.exe”? help….

Reply
Kelli Reply:
July 4th, 2010 at 1:05 pm
I found a file that the last portion was tssd.exe and deleted it. I think they change the preceding ‘name’ to confuse the issue, but the ending is always tssd.exe. If you look this way *tssd.exe, you’ll find it. Good luck!

Reply
Teddy
June 20th, 2010 at 2:50 am
I manually delete AV SS seeing as how that’s the only thing that work but in doing so my Internet explore can’t connect to the Internet it states that the proxy will not allow it to and yet I can connect with yahoo messager and my Internet downloaded games an insite would be very helpfull

Reply
Danielle
June 21st, 2010 at 11:31 am
My father downloaded this stupid thing! I’ve blocked the websites, but task manager will not open!

Reply
Adri
June 21st, 2010 at 11:36 am
These Instructions, which is quite consistent with the others on the net were very very helpful. Thank you!

Reply
rod
June 21st, 2010 at 6:11 pm
Hey that stupid av security thing has invaded my computer and its anoying because it does let me go onto the internet ….. like I click on the internet and the av thing pops out and it doesn’t let me go onto any anyy site. …… so I can’t use the internet at all what can I do to delete this virus ..plzzzzzzzzzz help seriously I will really apriciate it

Reply
Todd Reply:
June 24th, 2010 at 6:28 am
Rod
You will need to manualy remove it in safe mode. instructions for that are above. If you are not used to this type of work on your computer you might want to find someone who is. You can mess up your computer if you make a mistake. I am not trying to scare you, just pointing out a fact.

Reply
Daniel Reply:
July 5th, 2010 at 6:36 pm
OK first don’t panic..
Try to turn your computer off, then turn it on again and run it in a safe mode with networking. Now when your computer is on safe mode with networking you still will not be able to access the internet, so go to tools, under tools go to internet options, in internet options you should go connections and click on LAN settings. Make sure that you uncheck all the categories under proxy server. and now you can run the internet.

Reply
Robert
June 22nd, 2010 at 11:25 am
Mine keeps opening porno and it wont stop

Reply
Kojiro
June 22nd, 2010 at 4:01 pm
I’ve caught this thing twice. It’s really freaking hard to remove. Avira couldn’t even detect it in Safe Mode. Fortunately, now, I’ve blocked all of the involved sites this page lists. Hopefully that’ll be the last I hear of it.

Reply
GG
June 23rd, 2010 at 10:50 am
to delete irritating av security…open computer in safe mode by tapping on f8 on restart…click safemode with internet…..go to system restore in accessories…..restore to a earlier time……..it worked for my computer…….good luck………

Reply
Lexee Reply:
June 25th, 2010 at 10:26 am
Thank you so much!!

I tried like 5 other manual removal things but what you put here is the only thing that worked for my computer.

Reply
Robin
June 25th, 2010 at 3:17 pm
nicivcjtssd.exe = the name of the file on my machine. I found it after doing a search for ‘tssd’. I’m a rookie, and don’t know the success of my endeavor, but I found the darned thing and it’s dated today at the same time I started having problems. So far – so good. Thanks everyone.

Reply
Mike
June 25th, 2010 at 8:14 pm
I just got done manually removing this virus. I had to go to task manager and stop a program in order to properly delete the virus. The .exe process started with a t, but I can remember exactly what it was called. Also when removing HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “ouferdbubtdve” from the registry “ouferdbubtdve” was named something else. I think it started with a r or n. I hope this helps.

Reply
Bob
June 26th, 2010 at 7:21 am
i cant seem to find any file called *tssd.exe … I was able to use the ctrl + alt + del to stop the load and look around my computer but was unable to access the internet to download a better malware/spyware terminator to get rid of this piece of $hit. These guys should be taken out back… if you know what I mean.. The fbi should shut them down…this is all illegal crap…

Reply
Bob
June 26th, 2010 at 7:22 am
ok…now I dont have the dam thing loading, it shows I am connected to the internet but I cant access it… page pops up to diagnose connection problems
any help?

Reply
Bob Reply:
June 26th, 2010 at 7:28 am
i changed my proxy server settings in LAN settings to automatic and disabled proxy… was able to go to my homepage..then tried to load google and it said internet explorer not responding…. dont know what to do from here… cant load pages again

Reply
I Thaler Reply:
June 28th, 2010 at 6:49 am
All the published help did not work. It locked down all my programs and I could do nothing. The only thing that helped is going to MY COMPUTER then C: (this my default disk) go to DOCUMENT & Settings then to ALL USERS then to APPLICATION DATA. Look for a subdirectory created on the date the trouble started. Click that file and you will find an icon that is an envelop , Rename that icon (I just removed the .exe and moved the file to my desktop. I then rebooted and was able to regain control of my computer. I the cleaned my reg of all avsoft, av4you and avsuite. Everything is now fine. Also wanted to mention that I run Norton 360 and it did not detect this virus

Reply
Kollo
June 27th, 2010 at 10:05 pm
Hi, that Virus showed several bad action on my PC, so it was sent back to vendor for repair.

Reply
Terry
June 28th, 2010 at 9:25 am
Delete the jun files from the following location in safe mode
Documents and Settings%\[UserName]\Local Settings\Application Data\

Reply
Sandra
June 28th, 2010 at 10:27 pm
AV Security Suite Registry File Names and Locations I personally found and removed from my sisters computer through desktop sharing.

1. Registry File – jfaywihg

Registry Location –
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “jifaywihg”

Data –
C:\Users\Kim\AppData\Local\wjnbohfbx\csknjcutssd.exe

2. Registry File – Oqeqezusu
Infected dll file – shlian.dll

Registry Location –
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Oqeqezusu”

Data –
rundll32.exe “C:\Users\Kim\AppData\Local\shlian.dll,Startup

Reply
Steve
June 29th, 2010 at 8:32 am
Has anyone had the experience of this thing shutting down a large number of your network ports? For example I cannot get to any standard website from my previously infected computer. Https: Sites work fine, for example https:www.microsoft.com works fine but http:www.microsoft.com can’t be reached. I’ve tried resetting the Windows Firewall to default settings but that hasn’t helped.

Reply
RoxyMoron
June 29th, 2010 at 9:12 pm
im trying to download the removal tool but my security settings don’t let me download anything on safe mode any suggestions?

Reply
don p
June 30th, 2010 at 3:11 pm
AV security attacked my computer and I had a hell of a time getting rid of it! I could not do nothing including using system restore, getting into my own files, sending emails, nothing! Their should be something done about this company that has a fake 800 number and London address.

Reply
AV Security
June 30th, 2010 at 10:48 pm
I dont understand our program is a very elite and user friendly application. You may disagree with our tactics, but its advertising at best. If you are not happy with our products please fill out the contact us tab on our website with your name, SSN and credit card. Our PR department is prepared to take on any calls or questions regarding our services. I am joking this was a bunch of BS that made me a better user. Unfortunately, the writers of the program have gotten smarter b/c some of this stuff I found didnt work. I refused to restart and was able to access the net to download a malware remover with AV still active on my pc. Blahhh -take that you AV Jerks! Bottom line it operates on IE so if you can get behind it to IE its cake. I wont say anymore bc they a watching us.

Reply
Diane
July 1st, 2010 at 4:29 pm
Dear All, I found all files above, my tssd also had a different name, but I just can’t locate these two. I ended up rebooting out of safe mode and it the blocked IP addy’s keep popping up. We are on a network at work. Friend borrowed netbook and ended up purchasing the soft ware. I immediately got her a refund and deleted the program. then I found those nasty pop up.s Any ideas on why these files don’t show?

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:1041″

Reply
BWM Reply:
July 4th, 2010 at 2:47 pm
If you already deleted these with a scanner, or turned off the proxy server, that may have done it. I couldn’t find them either, but I had already run Hijack This and killed everything suspcious.

Reply
Achtung
July 1st, 2010 at 9:42 pm
ATTENTION Every1!

I’ve caught this sh!tware twice and, with some much appreciated help from techies on other sites, was able to figure out how the damn thing gets thru. it does not matter were you go, even your office computer is susceptible is you have access to the Internets.

You see those pests use ADOBE ACROBAT and SHOCKWAVE FLASH to sneak into your computer. And from what I’ve figured, ADOBE vulnerabilities allow unauthorized changes to registry keys, as well as installing rootkits, even when you’re logged on as a regular user, not as an administrator. So, if you’ve visited some sites that had streaming videos, or even Flash Ads, you might have as well opened your doors for AV piece of crap.

So my advice to you all would be to simply disable Flash and Adobe Acrobat add-ons in your browser. If you absolutely have to have them enabled, at least have the browser prompt you every time you’re about to open a .PDF file or watch a Flash stream. I know IE has this option. But then again – you never know what you’re getting until it’s too late. Some ppl caught this thing from Facebook, Youtube and even Wikipedia. Besides, I’m sure you can do a day or two without annoying animated ads. And as for streaming videos, if you’re persistent, you can always find an alternative.

Good luck y’all, be good

Reply
ChrisC Reply:
July 3rd, 2010 at 9:42 am
Yeah I got this AV Security Suite 2 time also! Second time I was on Yahoo checking my mail and all of a sudden a pdf file which was blank opened all on its own and I had the virus. Disable your adobe pdf from opening automatically!

Reply
Carissa
July 3rd, 2010 at 2:15 am
Words cannot even begin to describe how grateful I am for this website! I entered my computer in safe mode (“F8″ for those who aren’t sure how ) and followed all of those steps. The only one I couldn’t complete was the second one, removing it from the processes, but I completed everything else and my computer went back to running great!

I love how this website completely delineates step-by-step how to manually remove everything, and in such an easy way so that even fairly beginner / intermediate users (such as myself) can navigate removing the malware.

For the following prompt:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”

I didn’t have anything in the policies folder, however there was a folder that was just a bunch of jumbled letters “dfsfasljflakfsdj” with a ton of files that were also jumbled letters so I deleted this assuming that that was also apart of their devious program.

I don’t want to say too much more, knowing that they probably scour the web trying to figure out how to make their program “smarter” (as*sholes … pardon my french); I’ll definitely be looking into ways to preventing from happening to others.

Again, much thanks!!! I thought I was going to have to get a new computer or completely restart from scratch!

Reply
Ivanisnotveryclever
July 6th, 2010 at 11:31 pm
Ok, manual removal instructions are great. everything was going swimmingly, I found a random process that ended in tssd, and killed it, I got up to the registry removal bit, this one wasn’t there

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″

so, I held my breath, closed my eyes and deleted something similar sounding, something like CheckExe something… and then I checked to see if I’d ruined my little lappy, and found that everything seems to be working. Everything that is, except the internet. Firefox, Explorer, no dice. So can someone help? How do I repair my IP settings, or fix the proxy or generally make it work? I don’t want to make anything worse.

p.s. also, there was no file *tssd.* on my hard drive, or anything suspicious in the directories specified in that last step.

Reply
Squeezey
July 7th, 2010 at 5:36 am
I tried some of the programs including Spyware Doctor and Malwarebytes. Spyware Doctor was a pay program and Malware didn’t get rid of it. What worked for me was doing a system restore. I just restored my computer (after booting up in safe mode) to an update before I got the virus. My computer works great now.

Reply
david
July 8th, 2010 at 12:18 pm
Boot up in safe mode and go to the system restore for the day before and restart, ALL WILL BE GOOD!!!!

Reply
Judy
July 8th, 2010 at 3:13 pm
Iv done all the steps and its not working can u please help me ?

Reply
Infinity
July 8th, 2010 at 5:17 pm
Windows Defender is the ultimate solution…you don’t have to go through anything else!

Reply
larry
July 8th, 2010 at 8:34 pm
i can not enter system restore, i can not enter safe mode.

Reply
Josh
July 9th, 2010 at 1:34 am
ok this easy. Some guy explained it perfectly. Just go to search on ur computer ( with that little dog) and type tssd.exe, you’ll find it. Basically the app that pops up on ur search is the virus. Drag that whole folder to ur desktop ( it’s goin 2 have a application in the folder and that’s the stupid virus.) restart ur computer and before the virus can load delte it completly off ur computer and it’s gone. Worked perfectly!!!!!!!!

Reply
Jeff
July 9th, 2010 at 7:24 am
Just rid my laptop of this rotten virus by:
1. rebooting Windows XP in safe mode with no networking (hit F8 during boot after BIOS)
2. click start, click run, type “msconfig”, hit OK
3. click on ’startup’ tab, click ‘disable all’, hit OK
4. reboot normally then run anti-virus software to clean out the virus
5. roundly curse the soulless demons who created this monstrosity

Reply
Ellen
July 9th, 2010 at 5:56 pm
Guys
I have Vista which does not allow me to save edited hosts in C/windows/system32/drivers/etc
what should I do?

Reply
Chris Reply:
July 13th, 2010 at 11:34 am
Are they read-only? Cause the “hosts” file is read-only by default, meaning you can’t save the changes. Change it so that it isn’t read-only. and make sure it’s called “hosts.txt” It won’t affect how it works, it just makes it save to itself without creating another hosts file. Add your changes, save, then make it read-only when your done.

Reply
Renee
July 9th, 2010 at 11:01 pm
I cant get rid of this thing!!! I did a full scan (I have McAfee) while in safe mode and nothing came up!! I’ve tried searching for the exact file names people have given here but there are so many. What folder weere these files in, so maybe I can look there. McAfee can mobily fix it for $80… do I go this route??? I already pay $80 a year to have virus protection, which I am wondering what good that is!!!

Also, anyone know if this came from Facebook?? My husband is crazy paranoid and wants me off FB!! I typically do not click on links or videos on FB for this exact reason!!!

Thanks for your help in advance!!

Reply
Cwill
July 11th, 2010 at 1:24 pm
Thanks to those who suggested opening in safe mode to rid this, especially GG who told us novices like me to “tap” the f8 key to open as I couldn’t open by holding it down. Was able to restore and now up and running.

Reply
Chris
July 13th, 2010 at 11:31 am
Guys, guys, just restart you computers in Safe Mode then run System Restore from your control panel. Worked for me.

Reply
Diane
July 14th, 2010 at 8:27 am
Hello again, In safe mode, I was able to find and delete the items listed above. Some files just aren’t there. I’m still receiving the the red threat notices were blocked. I created a new profile in safe mode, but maybe I didn’t do it correctly. Should I just purchase spy doctor and be done with it. ? I’m sort of at a loss now. Thank you, Diane

Reply
liam
August 15th, 2010 at 6:08 am
hay guys i need help iv have what u guys have had and iv had it befor but diffrent this time im able to go onto the web and my anti virus but it wont find it …..
eney way im got pornograthik sits poping up and that spam thing in the botem corner OMG fuck of plz help me im geting pissed of when i go into safe mode it lockes me down what do i do

Reply
Nathan
August 15th, 2010 at 7:56 am
I’d like to thank Spywarevoid for posting these direction and everyone else for their comments- it was a tremendous help so I figured I’d update the page with what I found.
First, it looks like they’ve changed the root of the base exe to [random]SHDW.exe

Second the registy entries listed don’t match an IE8 install or at least that is my guess for not finding them where they were listed; but they did provide me with enough information to remove the appropriate and important ones.

Reply
Shawn
August 17th, 2010 at 3:54 pm
make it easy on yourself and to a system restore vs. manually trying to get rid of it.

Reply
lucky tree
August 20th, 2010 at 1:44 am
THANK YOU GUYSSS… FOR ALL HELPPPP

Reply
Mike
August 27th, 2010 at 2:50 pm
ok this thing is on my computer and i cant get rid. i cant run it in safe mode or completely restart my computer, because as the computer starts every button is disabled for some reason and im a bit thick at this stuff may need a guid for dumb people… thanks

Reply
Tarique
August 27th, 2010 at 5:00 pm
Thanks for the instructions. I ended up using PC Spyware Doctor which cleaned it up quickly. One thing that helped us is that we mostly get on the internet from a limited user account, so it didn’t have the permissions to spread too far.

I did see that it did a fake restart when I tried to reboot the computer from the Start menu. Once I rebooted manually by holding down the power button, it did it for real.

Good luck.

Reply
Rmay
August 28th, 2010 at 7:49 am
Thank you so much for this information. I was able to get rid of it and I don’t know anything about computers

Reply
Ryan
January 16th, 2011 at 9:55 am
I used safe mode (F8) the did a system restore to a date before the AV security suite was installed and it worked perfectly.

Reply
Dan
June 20th, 2011 at 9:30 pm
As soon as you see this thing start……hit and hold down the start button on the computer. It will stop it from completing it’s installation.
After the computer has shut off re-start it and everything will be fine.

Reply
That Guy 87
November 12th, 2011 at 2:45 am
I was able to go in and as soon as i started up my user account to go through and start my task manager and delete all 35 or so files that had been created its a pain in the ass but as long as you have fire fox or chrome you should be able to do it good luck all

Reply
Davielle
November 30th, 2011 at 8:00 pm
Where do I go to get a refund on this false AV Protection?

Reply
Luciana Reply:
December 1st, 2011 at 2:01 am
Since there is no real company behind this “AV Security Suite” thing, and they don’t provide contact information, it’s impossible to reach those people. However, you can contact your people at your bank and they should be able to help you. Even if they can’t cancel the payment, they can protect your account from being charged by scammers in a future.

Reply
Kathy Schroer
December 27th, 2011 at 7:55 am
I purchased this program in error after it took over my internet exployer and would not let me access anything. I am not satisfied. It has not been down loaded to my computer yet and DO NOT DOWN LOAD THIS TO MY COMPUTER. My order number is 429454.
I would like you to credit my credit card and provide me with a phone number for any other problems.
If I do not see the credit within 24 hours I will take other action.

Thank you for your corporation in this matter.

Reply
Luciana Reply:
December 28th, 2011 at 3:21 am
Hello,

You should take other actions as soons as possible. Spywarevoid.com does not sell AV Security Suite nor are we related to the scam in some way. We merely provide information about computer infections and we help people to delete them.

The creators of AV Security Suite will not give you your money back, because they are criminals. I strongly recommend calling your local bank authorities and explaining that you are a victim of online scam. They might be still be able to cancel the payment. Also, you should remove the fraudulent program if it is still on your PC.

Reply

Trackbacks

av security suite removal tool

Download does not start? Try a mirror download here

How to remove AV Security Suite

AV Security Suite description

Get rid of AV Security Suite

AV Security Suite is a Rogue Antispyware software

How to manually remove AV Security Suite

AV Security Suite manual removal instructions

AV Security Suite

Trackbacks

Leave a Reply

Subscribe

Search

Categories

Latest spyware threats

Recently commented

Malicious domains

Fake warning messages

Tutorials

Archive

Tags

Security News