1 of 3
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Shows commercial adverts
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

Antivirus Soft

With all the sophistication which goes into the development of rogue security tools these days, it has become difficult even for experienced users to distinguish between genuine security tools and rubbish fake applications like AntivirusSoft. This rogue antispyware tool, which emanates from the same despicable family of rogues as Antivirus System Pro and Antivirus Live, will try everything in its power to come across as legitimate to its prospective victims. Despite what it would like its victims to believe, it has been proven that AntivirusSoft has no ability to detect or remove any type of threat from the system, and is really nothing more than a vindictive fake tool in itself.

Download Spyware Removal Tool to Remove* Antivirus Soft
  • Quick & tested solution for Antivirus Soft removal.
  • 100% Free Scan for Windows

AntivirusSoft will enter its victim’s PC under suspicious circumstances. The PC owner will not knowingly download and install AntivirusSoft to the system, but will instead become infected via various nefarious tactics employed by AntivirusSoft as part of its online marketing campaign. Some of the most popular tactics include using seditious browser hijackers to forcefully redirect users to their compromised landing pages, where the AntivirusSoft infection will be rooted into the system through the use of drive-by download tactics. Other forms of infiltration used include infected online flash ads, and bogus online malware scanners.

The rogue will edit the PC’s registry entries as soon as possible to enable it to launch along with Windows each time it is booted up. This will present the user with a fake security scan of the system which will inevitably yield false positives. The fake system scan will also spam the user with the following call to action, which should be completely ignored:

Update your malware database now to be sure that maximal protection is applied.

Users are warned against responding to any call to action which AntivirusSoft may issue, as doing so will only make it that much easier for the rogue to rip the user off. Some of the fake threats the false system scan will report on include Autorun.AOL and Sysoc.PNF. When all is said and done, users should never believe any correspondence received from AntivirusSoft.

Other symptoms reportedly associated with this infection is extremely poor system performance due to AntivirusSoft’s high consumption of crucial system resources, increased erratic system behavior as well as the inability to launch any type of application on the system. Users have also complained about the inability to establish an Internet connection. AntivirusSoft will also spam the user with various falsely generated security alerts in the form of pop up messages, in a further attempt to panic him into paying for its worthless software. One of the most popular fake alerts to be on the lookout for includes the following:

Windows Security alert
Windows reports that computer is infected. Antivirus software
helps to protect your computer against viruses and other
security threats. Click here for the scan your computer. Your
system might be at risk now.

You will only be able to regain full control of your PC if you destroy AntivirusSoft immediately. This can safest and best be achieved by making use of a genuine security tool which will also offer adequate protection against similar future attacks.

Download Spyware Removal Tool to Remove* Antivirus Soft
  • Quick & tested solution for Antivirus Soft removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Antivirus Soft

Files associated with Antivirus Soft infection:

yjiusftav.exe
yhygsftav.exe
xwnysftav.exe
wjfmsftav.exe
uwpxsftav.exe
uclqsftav.exe
spsesftav.exe
rdvfsftav.exe
qtflsftav.exe
qhrgsftav.exe
phicsftav.exe
pdrlsftav.exe
pbtmsftav.exe
owawsftav.exe
nakusftav.exe
mrccsftav.exe
moobsftav.exe
mitbsftav.exe
lxrlsftav.exe
ksrjsftav.exe
kcxksftav.exe
jmaesftav.exe
ixwdsftav.exe
igkesftav.exe
hyxbsftav.exe
hwbcsftav.exe
hkxesftav.exe
fwyhsftav.exe
fugksftav.exe
fmcysftav.exe
ehqrsftav.exe
eeissftav.exe
duvrsftav.exe
dtkksftav.exe
dcirsftav.exe
cvxbsysguard.exe
cskksftav.exe
cihqsftav.exe
cgohsftav.exe
cahbsftav.exe
bhacsftav.exe
awvrsysguard.exe
autfsftav.exe
ngbrluytssd.exe
kllhvdq.exe
kcarspk.exe
txdgkogtssd.exe
avsoft.exe
fnxbsftav.exe
lhbusftav.exe
yjhksftav.exe
yymusftav.exe
tljwsftav.exe
enfwsftav.exe
ycxbsftav.exe
hxtfsftav.exe
bvwcsftav.exe
olvbsftav.exe
gckesftav.exe
gfwfsftav.exe
gguasftav.exe
bmalsftav.exe
dtaisftav.exe

Antivirus Soft processes to kill:

yjiusftav.exe
yhygsftav.exe
xwnysftav.exe
wjfmsftav.exe
uwpxsftav.exe
uclqsftav.exe
spsesftav.exe
rdvfsftav.exe
qtflsftav.exe
qhrgsftav.exe
phicsftav.exe
pdrlsftav.exe
pbtmsftav.exe
owawsftav.exe
nakusftav.exe
mrccsftav.exe
moobsftav.exe
mitbsftav.exe
lxrlsftav.exe
ksrjsftav.exe
kcxksftav.exe
jmaesftav.exe
ixwdsftav.exe
igkesftav.exe
hyxbsftav.exe
hwbcsftav.exe
hkxesftav.exe
fwyhsftav.exe
fugksftav.exe
fmcysftav.exe
ehqrsftav.exe
eeissftav.exe
duvrsftav.exe
dtkksftav.exe
dcirsftav.exe
cvxbsysguard.exe
cskksftav.exe
cihqsftav.exe
cgohsftav.exe
cahbsftav.exe
bhacsftav.exe
awvrsysguard.exe
autfsftav.exe
ngbrluytssd.exe
kllhvdq.exe
kcarspk.exe
txdgkogtssd.exe
avsoft.exe
fnxbsftav.exe
lhbusftav.exe
yjhksftav.exe
yymusftav.exe
tljwsftav.exe
enfwsftav.exe
ycxbsftav.exe
hxtfsftav.exe
bvwcsftav.exe
olvbsftav.exe
gckesftav.exe
gfwfsftav.exe
gguasftav.exe
bmalsftav.exe
dtaisftav.exe

Remove Antivirus Soft registry entries:

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ avsoft
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN dejqdvai
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN dhspfotn
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN ldvtpyxb
HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN onlgrfiu
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ dotrwlog
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ dsxthrnh
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ evdfxhrh
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ fvtkudvjpojcus
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ htcrroyp
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ jwgjdesf
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ksqoukqm
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lgdylwlltiym
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ mhwrhaug
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ mwbbsjqn
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ nlopynrw
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ rjrecrtw
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ wfbljlai
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ xkqdfkoc
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ yiqexeri
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ zcvojghy
Disclaimer

Comments

  1. Randy Feb 11, 2010

    Every time i try to open this program, it says (Filename.exe) is Infected and It prompts me to activate the protection now (Yes/No) Please Help me!

  2. Kris Feb 19, 2010

    I recommend to log-out then log back in and as soon as your are able to open the task manager the better. I was able to open it before this program started and disabled the task manager, then I could close it down and take steps to remove it manually.

  3. ake Feb 20, 2010

    so i don't understand, do we have to buy the program to erase this thing or it can be done for free?

  4. Mike Feb 21, 2010

    Why are there so many peopelt sending all these viruses.. Do they
    not have someting productive to do, say drowning themselves..

  5. Athena Feb 23, 2010

    This thing is super nasty! I was lucky enough to have someone at work who had already dealt with the thing. We did the restart with task manager asap. Then we downloaded a new browser (not internet explorer) and deleted the old one. Seems to be working for the moment.

  6. Sandra Van Asch Feb 23, 2010

    my computer was effected also yesterday. When ever I try turn it on, I get a dialogue box that asks me if I want to run the Antivirus Software,yes or no. What do I do now?
    How do I get rid of it?

  7. Lorri Feb 23, 2010

    I was a sucker and paid $70.00 for this antivirus software - it is real software - or should I be concerned with my credit card?

  8. Julie FIeldsteel Feb 23, 2010

    I also paid $70 for this antivirus software, now it has ruined my computer - I now have a blank desktop, Windows says it cannot authenticate my license. Now what?

  9. Erma Feb 23, 2010

    Hi, I logged in from my work laptop last night and I was also affected by the attack. I lost my days of work today because of the malicious attack. The IT department from my job told me today around 2:30pm that they have to rebuild my laptop because of the virus. It was not a good day at work. I may not be able to log into your website again with my PC or laptop again. Thanks for announcing about the attack on your website.

  10. Lisa Feb 23, 2010

    I had a virus on my computer a couple days ago, could it have been picked up here? I managed to remove it, but boy was it nasty. Whenever I tried to run a scan, it would shut the computer down. Finally after deleting some items in the registry I was able to get a full scan and removal. Was about six hours worth of time to remove it.

  11. j Feb 23, 2010

    i have a mac but with fusion so windows is in suspended in the background...while i cant put my finger on it strange things are happening like i'm logged into a site and for no reason i am logged out or it says internet server down huh? keepiing an eye on this behavior

  12. wanda Feb 23, 2010

    wanda feb 23 2010 i went on paperback swap and right away my security system said it had blocked a threat and today i check to see if i had any security alerts. every thing seems to be ok. i hope it is.

  13. Barb Feb 24, 2010

    It affected my computer also but I called my Antivirus company through my probicer and it took them about 4 hours to clean it out. I was lucky I did not run it and my company did not cost me enything. Everything is wirking fine tonight.

  14. Teena Feb 24, 2010

    I too got hit. Mu partner called me at work in a m*****ive panic stating the entire desktop icons had red x's. pop-ups constantly appeared stating our computer had been
    infected. The antivirus soft platinum icon kept appearing until we bought it on my credit card for 69.95. I am now filing a claim with my credit card company and have deleted this anti soft thing from add/remove programs then deleted my trash bin.

  15. justin Feb 27, 2010

    is there anyway i can sue these people who made these program?

  16. Kate Feb 28, 2010

    I found the exe file on my computer with name pgidsftav.exe.

  17. Dolker Mar 1, 2010

    I got the virus from caloriecount.about.com

  18. Mo Mar 3, 2010

    I got it too, damn it!! UGH...!!!! Don't let me see those evil people, I will rip them apart.

  19. Joe Mar 3, 2010

    I got the virus yesterday. Could not log onto the computer until I paid $70 for the anti-virus soft platinum - then I could log on - did not know this was a scam. E-mail the company to state I wanted my charges reversed - called credit card company to state the same - now waiting to see what will happen. OMG 1st time this has happened to me!

  20. Joe Mar 4, 2010

    Just got an email back from the company - because of 30 day back refund - they are going to remove the charge from my credit card - will wait and see what happens. Did mail a letter off to my credit card company concerning this before I received their email.

  21. Matt Mar 6, 2010

    My computer got hit today by this thing..The process that came up was natesftav.exe...That was not on the list. I ended that process and was able to do things on the computer again..Thanks for having this site up, it helped a ton!

  22. holden Mar 8, 2010

    where is this rogue????

  23. hye Mar 8, 2010

    A rogue for someone who like to destroy his pc XOXO

  24. luis Mar 12, 2010

    remober el anti virus

  25. LOOK!ITSCONNOR! Mar 16, 2010

    Thank you for your help. I started up task manager and ended the process that looked funky. I also deleted the two registry strings in the RUN\ path. Only problem is that its still their... I can leave my computer on and just keep doing running the task manager as fast as I can but its kind of a h*****le. Any other suggestions?

  26. Laura Mar 18, 2010

    Yep, i got this virus today, that's why i'm here, and nothing i do seems to work at all. i managed to get task manager going by getting there really fast after restarting my computer. i cannot download the antisoft checker program from this site. i cannot do anything except access the internet. i cannot access solitaire or ms word. the world has ended, basically. i need help.

  27. Laura Mar 18, 2010

    YAY! i got rid of antisoft and xp security by deleting ave.exe and rjrusftav.exe It is gone now and i can get on with my work. i hope this helps someone else and this site really helped me a lot!

  28. BeanerECMO Mar 24, 2010

    I have tried to find several of the files to no avail. What I find interest though is that in the safe mode and logged in as administrator, all is well with the world. However, when in the safe (or normal) mode and logged in as a user the computer is taken over by the AV software.

  29. Antulabi "seek & destroy" Mar 25, 2010

    this rouge is very hight infections and continuous changed cheksum and md5
    syaysftav.exe

  30. carms Apr 27, 2010

    damn it just paid for it

  31. Dave May 11, 2010

    if it helps anyone out there with this, i had it happen to me today while I was at work with my gf. i am going to my bank tomorrow and getting the charge reversed as well since i tried the lifetime protection bit, which once d/l the software it wouldn't even fully install or download everything like it said. All I did to fix the problem was go back a few days with System Restore once i entered Safe mode.

  32. stephanie May 27, 2010

    this website helped me.

  33. lkhoyaali May 30, 2010

    au café

  34. Ryan Jun 1, 2010

    That is becuase Antivirus Soft is stopping it from opening. Log in to another user or start your computer in safe mode.

  35. See Jun 8, 2010

    This happened to me too, I payed 69.95 on my credit card BUT luckily I didn't install it into my computer. I was about to download and install, but decided to look up the name and found all these websites saying that Antispyware Soft Platinum was a SCAM, so I didn't install it into my laptop thank god! Now I just have to work this out w/my credit card company to take the charge off!

  36. T-Reks Jun 13, 2010

    i hate this scam):

  37. sam Jul 8, 2010

    i cant even open anything on my desktop. internet doesnot work either. how do i download tihs?

  38. NORTON Jul 22, 2010

    POR QUE NO ME FUNCIONA

  39. Eric Roman Jul 24, 2010

    I bought it in March 2010, updated it every week,and it had worked fine until July 14th. My whole system got a virus, SO MUCH FOR PROTECTION. Had to pay to get it repaired. I've been trying to contact the website/company to no avail. Does anyone have the correct website.

  40. dan gaits Jul 26, 2010

    i purchased this and can't remember if i had to give my social security # or not- anybody who purchased it remember if they ask for it?

  41. Mary Zimmer Sep 3, 2010

    They do not ask for your social security number. PLEASE WRITE TO YOUR CREDIT CARD COMPANY AND DEMAND THAT THEY GIVE YOU YOUR MONEY BACK AND THAT THEY CLOSE THIS COMPANY'S MERCHANT ACCOUNT. A well-known, well-documented fraud such as this should not be allowed to accept credit cards.

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.