Home > Rogue Anti-Spyware > AV Security Suite

How to remove AV Security Suite?

What is AV Security Suite?

AV Security Suite is a fake antivirus which was invented by “famous” Antivirus Live family. AVSecuritySuite simply follows its earlier released copies called Antivirus Soft and Antispyware Soft, so you should already know its tactics and targeted goals. Typically, AVSecuritySuite gets on board through dishonest methods and then attempts to gain the purchases of its license. For example, this program will claim that your computer is heavily infected with tons of Trojans and you need to purchase licensed its version if you want to save your machine. Don’t fall into this! Only AV Security Suite must be removed from the system because it is a tricky rogue anti-spyware which has no spywares detection or removal engine.

AV security Suite is known to block various websites. When you try opening website your browser displays information like this:

This website has been reported as unsafe
We recommend that you do not continue to this website. This website has been reported to Microsoft for containing threats to your computer that might reveal personal or financial information.

Network operations can be restored by disabling AV Security Suite processes in safe mode with networking AND fixing networking configuration, (most often disabling Proxy settings, removing browser add-ons).

AV Security Suite popups will look like this:

Windows Security alert
Application cannot be executed. The file mbam.exe is infected.
Do you want to active your antivirus software now?

Spyware Alert
Application infected! The file rundll32.exe is infected. Do you want to ALLOW this application now?

Windows Security alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan your computer. Your system might be at risk now.

Antivirus software alert
Infiltration Alert
Your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan-dropper or similar.

AV Security Suite is propagated through malicious PDF files mostly that exploit some Adobe Reader vulnerabilities and drop trojans or other malware into the user’s system. After that, rogueware starts running as soon as PC is boots up and begins its activity: starts system scanners, displays misleading notifications and popups. Many of the popups claim that regular programs are infected, which is not true. Be sure, that upcoming malware attack is usually announced by AVSecuritySuite for one and only goal which is to make you purchase its useless license. Trying to be successful even more, it will also show continuous pop-up ads about “infected files” detected on the system and also will not allow running any application except itself and “iexplore.exe”.

There are three versions of AV Security Suite that you will be suggested to purchase: AV Security Suite Basic, AV Security Suite Pro and AV Security Suite Platinum. However, all of them are completely useless. You should bear in mind that even though AV Security Suite seems to be a legit antivirus and anti-spyware solution, it’s in fact only a dangerous commercial project.  AV Security Suite is not capable of detecting or eliminating any malware because it has no antivirus engine. All AV Security Suite can do is triggering its continuous ads that try to scare users into thinking their computers are in danger. If you get any of these symptoms mentioned above, run your legit anti-spyware and delete AV Security Suite with its associated files. If you also notice that you cannot browse to any website, make sure that your proxy settings in IE are not changed. It’s is also usually done by AV Security Suite. Use the guide given below to make your computer normally functioning and remove AV Security Suite.

Special notes on how to get rid of AV Security Suite

Temporally stopping AV Security Suite processes to prevent it from blocking removal process.

1. Restart your computer. As your computer restarts but before Windows launches, tap “F8” key constantly. Use the arrow keys to highlight the “Safe Mode with Networking” option as shown in the image below, and then press ENTER.

2. Start task manager by pressing CTRL+SHIFT+ESC at the same time. This should be done after system is starting and processes are still loading.

3. Check for processes with names consisting of random letters, 6-8 letters in name usually. Stop them

Steps for fixing internet connection (full guide here http://www.2-viruses.com/how-to-fix-google-results-hijacker-google-redirect-virus-problem

4. Open Internet Explorer. Click on the Tools menu and then select Internet Options.

5. In the the Internet Options window click on the Connections tab. Then click on the LAN settings button.

6. Now you will see Local Area Network (LAN) settings window. Uncheck the checkbox labeled Use a proxy server for your LAN under the Proxy Server section and press OK.

7. Download and scan PC with PCTools Spyware Doctor or Malwarebytes to identify files and processes, infected with AV Security Suite. Typically, they will be in one of your user subfolders. DELETE these files.

8. Start MSConfig and disable all startup programs that are found with Spyware Doctor or clearly belong to undesired programs.

9. Reboot, and do a full system scan again. You might consider fixing registry entries by running registry cleaner.

Remember, that AV Security Suite infection can be prevented by keeping your OS, Adobe reader and antivirus/antimalware/firewall softwares up to date.


AV Security Suite is Extremely dangerous

arrow AV Security Suite is a corrupt Anti-Spyware program
arrow AV Security Suite may spread via Trojans
arrow AV Security Suite may display fake security messages
arrow AV Security Suite may install additional spyware to your computer
arrow AV Security Suite may repair its files, spread or update by itself
arrow AV Security Suite violates your privacy and compromises your security
for AV Security Suite
detection
Note: Spyware doctor trial provides detection of parasite like AV Security Suite detection and limited protection for free. You can remove detected files, processes and registry entries yourself or purchase a full version. Learn why we have choosen spyware doctor.



AV Security Suite screenshots


Manual AV Security Suite removal


Important Note: Although it is possible to manually remove AV Security Suite, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyware Doctor or other malware and spyware removal applications found on 2-viruses.com. Stop these AV Security Suite processes:
Remove these AV Security Suite Registry Entries:
Remove these AV Security Suite files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other AV Security Suite infected files and get help in AV Security Suite removal by using free Spyware Doctor scanner. It comes with free real-time protection module that helps preventing AV Security Suite and similar threats.

AV Security Suite is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only AV Security Suite can help you to remove it after you download the trial version. As soon as the victim downloads AV Security Suite trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, AV Security Suite offers to buy the full version to fix these false errors. If the user agrees, AV Security Suite does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as AV Security Suite, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install AV Security Suite, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as AV Security Suite, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as AV Security Suite?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware , ,

  1. Edward
    June 4th, 2010 at 00:24 | #1

    I received the AV security Suite virus, my Kaspersky softwear i think caught most of it, did not or could not get to the internet, it appears to be blocking my access. Is there a way to down load it(a repair or fix) to a flash drive and run it on my laptop, so not to infect my network at home? I thought it had gone when I turned my computer off then on again, now I have no internet access, on laptop so I could download the repair for it. At work now and not with the computer that is infected. Any help would be appreciated, if I don’t have to reformate my hard drive.

  2. June 6th, 2010 at 09:25 | #2

    Yes, it is possible to download spyware doctor or malwarebytes on another PC. Howecer, in most cases it is easier to fix internet connection manually: try to disable a proxy server in your pc

  3. Ryan
    June 9th, 2010 at 15:53 | #3

    I can’t load in safemode. Now what? I’ve downloaded spyware doctor, malwarebytes, and every virus remover recommended, including RKill, Superspyware, and many others. Nothing seems to work….help!

  4. Chancucop
    June 14th, 2010 at 10:57 | #4

    I received this virus this afternoon. I preferred to do the manual removal, It works with out problem. Thanks Guys

  5. Kahan
    June 14th, 2010 at 13:08 | #5

    My computer was infected by the AV security Suite, I installed Malwarebytes and now it’s gone, but I still can’t connect to the internet.
    I tried to back-up the host files in C:WINDOWS\system32\drivers\host
    but that didn’t seem to work.
    Is there an other way to fix this problem? How do I disable a proxy server?

  6. marcus
    June 14th, 2010 at 15:52 | #7

    beware you have to pay 30 dollars in order to have it removed. lol

  7. June 14th, 2010 at 16:03 | #8

    Marcus: we offer free manual removal instructions. However, I am 100% convinced that best way to remove such parasites is taking caution and having reliable real-time protection on PC.

  8. Steve
    June 20th, 2010 at 13:49 | #9

    I have got this virus too – I have dowloaded spyware doctor but I can’t get spyware doctor to open, even in safe mode? Any ideas would be greatly appreciated. Cheers

  9. kurt
    June 20th, 2010 at 15:39 | #10

    I bought & installed the Spyware doctor, and did the full scan numerous times in both safe mode and normal, but the virus keeps coming up to block my internet connection.
    Now what??? Is there something I’m missing or do i need to apply for a refund?

  10. June 20th, 2010 at 21:36 | #11

    Steve: Start a task manager, then file->new task and then enter full path to spyware doctor executable.

  11. June 20th, 2010 at 21:41 | #12

    Kurt : YES!
    Read that part of guide about internet connection, or use this guide : http://www.2-viruses.com/how-to-fix-google-results-hijacker-google-redirect-virus-problem . You can be reinfected easily without fixing settings manually.
    Then update spyware doctor, do a FULL scan again. If the problems reaapear, you got something new, and you should talk with PC Tools (spyware doctor creator) support – they should provide custom fix for you and improve Spyware Doctor definitions. Trojans, promoting rogues, change daily!.

  12. Kevin
    June 21st, 2010 at 17:38 | #13

    my internet is already disable the proxy server before i caught this av thing.. what should i do??

  13. Aparna
    June 23rd, 2010 at 14:14 | #14

    Hello. I am extremely grateful to you. I had a hard time with AV security suite. I finally followed your instructions and they worked. Thankyou!!!

  14. carrie
    June 24th, 2010 at 02:27 | #15

    Here’s how I got rid of it:

    1. Boot into Safe Mode
    2. Using System Restore, do a restore to a date BEFORE you got this malware on your system.
    3. That should restore all of your settings and registry back to normal, but after you restart normally; check out your system with one of the recommended programs to be sure.

  15. Marco
    June 24th, 2010 at 17:17 | #16

    Boa tarde, meu micro esta infectado com o AV Security Suite, não consigo acessar nenhum programa, tudo que tento abrir é trancado, como virus.

    O que posso fazer ????

  16. Reggie Reg
    June 28th, 2010 at 23:18 | #17

    I removed it by rebooting my computer and doing a system restore (START, PROGRAMS, ACCESSORIES, SYSTEM TOOLS, SYSTEM RESTORE) before the AV Security can load up. So first put system restore as a short cut on your desktop so you can get to it and start it before AV Secuity load up. Then use a restore date before AV got on your computer.

  17. Nancy
    June 29th, 2010 at 16:31 | #18

    av security suite has messed up my computer bad! it won’t allow me to get on the internet or really any types of programs. this guy came out to fix my computer and he put av security on my computer to protect it from viruses but now i see that av security suite is nothing but a hoax and ps i tried all of that stuff but it still is not working so what should i do

  18. Jordanne
    July 1st, 2010 at 01:44 | #19

    Luckly i got rid of it, its stupid and snnoying what i di is i had to create a new account on my laptop and delete my other one i was on i went to start on my computer click control panel and click user accounr then clicked the one i wanted to delete (the one that had the Av suite) and it got rid of it thanks goodness

  19. Melissa
    July 1st, 2010 at 07:10 | #20

    Afterbooting the computer to safe mood and everything is done, do you stay in that mode or do you go back to regular to download the anti virus program?

  20. July 1st, 2010 at 13:38 | #21

    Melissa: if you are in safe mode with networking, you can download programs. If you are in safe mode, you will have to reboot. However, I would suggest launching MSConfig and disabling all the programs/services you do not need from starting, especially named strangely.

  21. Devin
    July 3rd, 2010 at 18:32 | #22

    I have the AV Security Suite problem as well…I have followed the instructions starting with the safe mode in Networking…I then follow the steps that lead me to uncheck the “use a proxy server” option. Then I download the rkill.com link which afterwards a rkill-notepad comes up giving me a summary of when I used the link. But afterwards Im stuck. I dont know what to do next. Ive tried these steps a few times and after Ive downloading the rkill.com link Ive restarted and turned off my computer and the AV Security Suite is still present….PLEASE HELP. Please advise what I should see once I have downloaded the rkill.com link. Thank you so much in advance…

  22. July 4th, 2010 at 11:53 | #23

    Devin: Rkill just stops AV security suite processes for one time, even then not all. However, I would recommend scanning with automatical remover or removing the files manually.
    It is a good idea to start msconfig (after rkill) and uncheck all the startup entries you do not recognize or find no reference on the web as legitimate.

  23. Alex
    July 5th, 2010 at 22:48 | #24

    I should have read this article first, i had AV Security Suite and it completely spread on my whole computer, not even allowing me open msconfig, i knew i had more viruses on my computer but i completely ignored them, i had to reset and wipe out my entire memory and the funny thing is this has happened before so i did have the recovery disc’s. I know now that only download the essentials.

  24. Brenden
    July 6th, 2010 at 01:41 | #25

    Yea,hello
    I went camping for a weekened then came back with about 5 things open on my comp even though I left with none up.I’m currently on my iPod touch to do this post seeing as AV Security Suite has blocked every website such as http://www.google.com and http://www.runescape.com,and other sites I use a lot without any viruses,wich I know for sure.I already have Symatic AntiVirus.Please help.

  25. Rosabelle Downs
    July 6th, 2010 at 13:46 | #26

    I have downloaded Spyware doctor and the AV security suite still has my internet. I t will not allow me complete the process. What do I do? Please help….

  26. oren
    July 6th, 2010 at 17:53 | #27

    My mother payed for AV security suite last night. She wanted her computer to work faster. Is there anyway to get her money back? She used her credit card for it. I just been reading this site about it.

  27. July 6th, 2010 at 21:38 | #28

    Brenden : The problem is that your PC settings are infected, or, more exactly, configured to malware distributor needs. Disable proxy server and clean up hosts file. Reset DNS settings as well. Read this guide http://www.2-viruses.com/how-to-fix-google-results-hijacker-google-redirect-virus-problem

  28. July 6th, 2010 at 21:40 | #29

    Rosabelle : You havent fixed your internet settings. These things can not be fixed automatically in most of the cases. here a walkthrough : http://www.2-viruses.com/how-to-fix-google-results-hijacker-google-redirect-virus-problem

  29. July 6th, 2010 at 21:41 | #30

    Oren: YES. She should contact the bank and tell them she got scammed. In many cases they revert the charge.

  30. Melanie
    July 10th, 2010 at 05:25 | #31

    I just finished manually deleting this after my boyfriend infected our computer; and I did it without booting to safe mode! It blocked every cleaning & antivirus program I tried to open, so what I did was restarted my computer by using the power button. As soon as my desktop screen opened, I immediately opened task manager and clicked on processes. I looked for an unusual combination of 8 letters (that said NETWORK SERVICE under the user name column) and ENDED PROCESS TREE on two different processes. As soon as the “security” icon disappeared, I immediately ran Norton, while following your instructions above to manually delete files & registry entries. I also went as far to do a search of my hard drive for the “tssd” and the random letters I deleted from the processes. Worked like a charm! I want to thank you for the help! ;-)

  31. Travis Gatling
    July 11th, 2010 at 04:14 | #32

    I have a serious issue! When this hoax came about I purchased what I thought would be a helpful product and it has my information. Will it affect my accounts? WHAT DO I DO!!!!!

  32. Chris
    July 11th, 2010 at 08:37 | #33

    Thought it was a trip to the PC shop.My PC was useless with this virus in it. Used PC Tools Spyware Doctor with Antivirus and it cleaned up a treat. Thanks for the info. :-)

  33. Dave Shannon
    July 12th, 2010 at 15:22 | #34

    I downloaded Spyware Doctor on my other computer, set it up on my wife’s infected laptop and after running the removal program (and paying for it so it would repair) her machine will not boot. Just goes straight to the “sorry” screen with options for safe, last known good etc, none of which work. Any ideas?

  34. July 12th, 2010 at 15:25 | #35

    Dave : contact PC Tools support. They have to solve this issue – in most cases this is caused by rootkits embedded in the system, and it is not typical. It is hard to say something without seeing a screenshot. A possible solution would be using windows install CD and choosing recovery option.

  35. Alexander Mains
    July 12th, 2010 at 20:06 | #36

    AWESOME! :D
    I got this virus constantly whenever I get on after I’m grounded (yes I am a 14 year old Computer Genie…) So at least I know how to get rid of it instead of system restore (which sometimes it follows into your backup and messes still!!)
    Thank You
    I was fortunate Iobits Security 360 worked and that I found this site in the first place (with AVSS still on) Did not change firefox’s Proxies but IEs proxies
    I am clean as far as anything goes

  36. Donna Bunker
    July 14th, 2010 at 01:58 | #37

    I want to know how to get in touch with AV Security and demand my money back?

  37. Donna Bunker
    July 14th, 2010 at 02:00 | #38

    I am trying desperatly to get in touch with AV Security Suite systems , they down loaded it on to my computer, ofcourse I paid for it, it sounded good, until I was told it is bad and looked it up, but now I can’t find them anywhere to try and get my money back. What can I do?

  38. July 14th, 2010 at 09:08 | #39

    Contact your Bank, Donna and ask them to reverse the charges.

  39. marcus
    July 14th, 2010 at 22:56 | #40

    i have killed this fool 10 times in the last two weeks. When it first pops up, Run Rkill.exe, Rkill.com, or Rkill.scr to stop the malware processes temporarily. Run malwarebytes antimalware program to clean the malware out. Reboot, then go to your internet settings and remove the proxy check mark. Close out and everything is right as rain again.

  40. July 15th, 2010 at 08:58 | #41

    Marcus : Install something with real time protection on the infected PC ..

  41. Jennifer
    July 15th, 2010 at 23:44 | #42

    Thank you for the tip! I called my bank and they said I just have to fill out a dispute form and mail it back and then as soon as they receive it they will credit the money back into my account!

  42. will williams
    July 20th, 2010 at 20:27 | #43

    yes big scam my computer runs slow. theres no way of contacting these people. i may have to go get it cleaned thru someone who takes viruses off. this is the worst ever.

  43. Sandy
    July 22nd, 2010 at 02:14 | #44

    Yes, I too got this virus interfering with my computer. I am so sick of it.
    I need someone to tell me how to get rid of it.
    Sandy

  44. Richard Erickson
    July 23rd, 2010 at 19:35 | #45

    I unfortunately ordered this product called “AV Security Suite Pro” Boy did I get ripped off. I have tried to contact their websites and you know the rest.
    I had to cancel my credit card and it appears that I am not going to get any refund. Well, live and learn.

    Regards,

    Richard

  45. Lisa Stanbary
    August 4th, 2010 at 21:31 | #46

    Hi. On July 15, 2010 I went to turn on my laptop and all that would come up was AV Security saying I had a virus and when I tried to get online to find a cheaper anti virus software I couldnt get online. Im a single mom of 3. Im disabled and live only on SSI. I paid 69.95 for this software. I later found out the money went to Ozolsmegi Protect Computer in Liepaja, Lativia. My bank was no help even tho I used my VISA card. I am so angry at myself. Im not too familiar with all the scams that are out there. Can someone PLEASE help me get my money back. This took money for food away from my kids. Thank you!!

  46. Lisa Stanbary
    August 4th, 2010 at 21:32 | #47

    My bank said they could give me my money back but after 90 days they would take it back!!@Jennifer

  47. Trish
    August 12th, 2010 at 17:56 | #48

    Ok, so could not get my computer to do anything without downloading their soft ware, yes put it on a credit card, and yes I’m having trouble with my credit card company! I’m to old to make this mistake and now my computer is just crawlinga and I can’t do anything on the darn thing. I’ll try all of the ideas listed above, I’m also posting something with the attorney general.

  48. Oscar
    August 14th, 2010 at 05:50 | #49

    Thanks for the help my computer works fine now.

  49. Alex
    August 16th, 2010 at 22:16 | #50

    I fell for the virus and bought the soft ware. Should I block my card or should I only ask for a refound?

  50. August 17th, 2010 at 08:04 | #51

    Alex: I would recommend blocking card. The payment systems are owned by their partners, who do not shun of reusing the credit card details.

  51. Ismael
    August 26th, 2010 at 16:51 | #52

    i wanted to know if security suite basic is related to av security suite because while i was reading about it it kind of happen to me n told me to buy and download security suite basic and i did. Please let me know if its related to it and if so what can i do to fix it and get my nmoney back

  52. August 26th, 2010 at 17:00 | #53

    Yes, they are likely to be run and controlled by the same people. You should contact your bank and scan with good anti-spyware tool to remove it. I recommend Spyware Doctor.

  53. Ismael
    August 26th, 2010 at 17:09 | #54

    okay I will do that.Thank you so much

  54. kelly
    August 27th, 2010 at 19:29 | #55

    is there any way to fix this if you cannot remember your administator password?

  1. No trackbacks yet.