Windows Vista Blog

A rogue antivirus application related to Antivirus Soft, Antivirus Suite uses scare tactics to trick users into purchasing a software license. Antivirus Suite reaches user systems via Trojan viruses that get downloaded from malicious websites advertising fake online scanners. Once installed, Antivirus Suite proceeds to load itself at startup. Antivirus Suite performs an endless stream of fake security scans on the system and reports that it is under threat from a large number of non-existent viruses. This rogue program also redirects the user’s web browser via a proxy setting to its own promotional website. It also generates fake warning pop-ups from the Windows taskbar. Meanwhile, Antivirus Suite repeatedly requests the user to purchase a license to the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is incapable of removing the detected ‘threats’ properly. However, the so-called ‘full’ version of Antivirus Suite is just as ineffective at removing these ‘threats’ as the ‘trial’ version, therefore, you should never allow yourself to be tricked into paying for it. Check here Antivirus Suite Removal to learn to how remove Antivirus Suite.

For Antivirus Suite removal, it is necessary to stop processes, delete files and folders and remove registry entries.

File Removal Procedures

The first step in Antivirus Suite removal is to kill the following process:

• [random characters]tssd.exe

Next, it is necessary to delete the following files and folders:

• %UserProfile%\Local Settings\Application Data\[random characters]\
• %UserProfile%\Local Settings\Application Data\[random characters]\[random characters]tssd.exe

After the above steps have been completed, Antivirus Suite no longer resides on your file system.

Registry Removal Procedures

For complete Antivirus Suite removal, it is necessary to delete the following keys and settings from the Windows registry:

• HKEY_CURRENT_USER\Software\avsuite
• HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “”
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″

Now it is prudent to say that you have completely removed Antivirus Suite from your computer. However, in order to make sure of this fact it is recommended to scan the entire computer using genuine software such as Spyware Doctor with Antivirus.

Conclusion

Manual Antivirus Suite removal is not recommended for inexperienced users as any mistake made due to inexperience could cause damage to the computer. Inexperienced users are advised to use a web-based repair service such as www.onlinecomputerrepair.org or a legitimate antivirus application such as Spyware Doctor with Antivirus for safe and efficient Antivirus Suite removal.