AntiSpyware Soft
AntiSpyware Soft Description
AntiSpyware Soft is a counterfeit security program that uses several illicit tactics to get unsuspecting computer users to download, install and purchase the full AntiSpyware Soft application. AntiSpyware Soft is able to perform these actions through many deceiving tactics such as displaying of misleading popup alerts and flooding bogus scan results with fake parasites.
AntiSpyware Soft is not a program that can detect or remove spyware or any other type of parasite. It is highly advisable to detect and remove AntiSpyware Soft with a good spyware detection tool so as to not cause any damage to essential system files.
AntiSpyware Soft belongs to the FakeSpyPro family, which includes members such as Anit-Virus Scanner, Antimalware Go, Antivir Solution Pro, AntiVira Av, Antivirus .NET, Antivirus Action, Antivirus Monitor, Antivirus Scan, Antivirus Soft, Antivirus Suite, Antivirus System PRO, Malware Destructor 2011, PC Security 2011, Security Central, Security Suite and Spyware Protect 2009.
Aliases
TROJ_MALWARE.VTG [TrendMicro-HouseCall]Trojan.Win32.Fraudpack [Sunbelt]Troj/FakeAV-BKA [Sophos]High Risk Cloaked Malware [Prevx]Trj/CI.A [Panda]Artemis!E0180F34E3B5 [McAfee-GW-Edition]Trojan.Win32.FraudPack.axnx [Kaspersky]Trojan.Generic.KD.15337 [BitDefender]TR/FakeAV.299008.A [AntiVir]Trojan.Win32.Generic!BT [Sunbelt]
More aliases (36)
AntiSpyware Soft Automatic Detection Tool (Recommended)
Is your PC infected with AntiSpyware Soft? To safely & quickly detect AntiSpyware Soft, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect AntiSpyware Soft
What happens if AntiSpyware Soft does not let you open SpyHunter or blocks the Internet?
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 mnharsvtssd.exe 658 2 ucqvgbwtssd.exe 468 3 ljoujugtssd.exe 461 4 lgdgvqetssd.exe 454 5 gviccmctssd.exe 447 6 rxltseftssd.exe 438 7 vhxsmibtssd.exe 365 8 fpvdombtssd.exe 307 9 %UserProfile%\Local Settings\Application Data\[9 RANDOM CHARACTERS]\[RANDOM CHARACTERS]tssd.exe 300 10 fevbjhatssd.exe 262
More files
Additional Information
- The following URL's were detected:
antispy-tool.net - The following messages's were detected:
# Message 1 Antivirus software alert
Infiltration Alert
Your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan - dropper or similar.
Details
Attack from: IP Address, port 39096
Attacked Port: 30516
Threat: Win32/Nuqel.E2 Windows Security Alert
Application cannot be executed. The file cmd.exe is infected. Do you want to active your antivirus software now?3 Windows Security alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan you computer. Your system might be at risk now.
Posted: April 14, 2010 | By SpywareRemove
MoreThreat Level: 10/10
(1 votes, average: 1.00 out of 5)
Loading ...Rate this article:
Detection Count: 47
Thanks for all your help!
It won’t let me open anything to follow these steps either
Reply to HELP: When it pops up those messages, say NO to the ‘do you want to scan this file’ message. And, you should download a SpyHunter trial, it will remove any malware it finds for 1 full week.
These are my instructions.
1) Find where it is, [APP data]
To fix the issue with opening web pages, you have to system restore.
2) Rename the folder to somthing else like LOL go into the folder rename the EXE to LOL
3) as its a bast-ard it wont let you turn off your computer soo unplug your pc and plug it back in
4) and turn it on. just in case open up task manager as quick as possible
5) find the lol folder and delete it.
6) There is damage after but you do have internet still. but cant open anypages.
7) run spybot search and destroy. google it. on another pc and transfer it over some how.
[reply to HELP "i try to do the things you do to help me remove this spyware but as soon as it opens, it closes and antispyware soft claims that it is infected. how do i stop that?????"]
1. right click on the desktop, select new > shortcut
2. in the box, type taskmgr
3. click next, then click finished
4. now right click the taskmgr icon on your desktop, and select run as
5. type username and password of another user on the computer
6. in taskmgr:
A. find the process(es) netsqp32.exe and/or {RANDOM STRING OF LETTERS} most likely ending with ssd. end this/these processes.
B. more effective method (will affect other running applications/processes, if any): select the processes tab, and end ALL processes, except for taskmgr.exe, explorer.exe, and processes run by SYSTEM or NETWORK SERVICE.
7. you should be able to use applications normally. but remember Antispyware Soft has only been stopped, not removed from your system. now you can follow the very effective instructions given on how to remove it. (by the way, you cannot block Antispyware Soft from entering from the internet again,, it always comes as a random string of letters that is different evry time,, no way to stop it without a powerful anti-virus/anti-spyware)
Top advice. Used the manual instructions to clean a friends PC. Worked. Only comment was my Registry entries differed ever so slightly. I had two Keys \”avsuite\” and avsoft. I checked against another machine and they seemed to be not needed. The key: avsuite had lots of random values and one that pointed to AVSoft.
Thank you very much – will give you a mention on my blog site.
Awesome. If this works I will be stoked. That spyware popped up and i was like WTF?
Wouldnt let me access anything without a thousand pop ups. Interesting how it would only let me into sites where i would put my password and bank details in. Dodgy f$@$@$@!! Thank you so much. Pretty clever. I could see a lot of people panicking and buying this scareware
HELP: Try using safe mode (with networking). Just reboot and hold F8 while Windows loads.
Also, on another site I found these registry values that should be deleted:
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random characters]“
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random characters]“
HKEY_CURRENT_USER\Software\avsoft
HKEY_CURRENT_USER\Software\avsuite
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” =”1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
This thing infected my PC last night and I just could not get a good sound sleep…. been trying to research it and fix it all day! Those manual instructions worked like a charm! Thanks so much.
Thankyou much. Your site really helped I thought I wouldnt be a victim but this one cut right through my defences and my antivirus/spyware software once I clicked on the sham virus detection alert box. I take some consolation that this one was on top of your list. I’ll be alot more careful next time. GM
I believe my computer was infected with this virus because I\’m an idiot and not nice to my co-workers. Oh well.
Was just infected with Antispyware Soft. it locked me out of everything. i managed to hit ctrl alt del several times and it wasn’t able to shut down the taskmgr fast enough and i was able to end the task. anyone know how to re enable my internet now that i successfully rid my comp of this program?
My computer is infected with antispyware soft.I am using Windows 7.I cannot even open Internet Explorer. Can you help me?
Thank you so much I have been trying to rid my system of this for hours, until I stumbled here. I will remember your greatness.
I\’ve got the same issue as help. I can\’t due anything without it giving me a pop up and blocking the application.
I am having the same problem as help. I’m stuck and this software won’t let me do anything without shutting down the application and saying it is infected.
Same problem as guy above – Antispyware soft prevents any program from executing, incl task manager. I have tried starting in Boot Mode w Networking, but for some reason, Boot Mode only fails and recycles the process, back to the same screen.
I have tried scanning the drive with Malwarebytes using another computer, detected and erased the bad stuff. put it back into computer as boot disk and it’s like nothing changed. same problems.
is it via cmd?or task manager as said above??????
I have the same problem as ‘HELP’
The virus has evolved to the point that any function it deems ‘infected’ (which is everything, IE, run, task manager, install/uninstall, regedit) will not be opened unless you pay them the 60 bucks they want for hacking MY GODDAMN COMPUTER. Assistance please.
Reboot using prompt key F8 start in the Safe Mode with Network Connections. Launch the cleaner in this safe mode. Otherwise the damn spyware will block it.
hey, this is a SHOCKING malware! iv followed steps from about 10 websites trying to remove and somehow it comes back a few days later, at least now i can control it and slowly remove each file manually. deleted a good 200 files so far, they keep coming back! lol
Anyway thank you for info and help
my pc is infected with “antispyware soft” and “data protection” spywares. My task Manager is disabled aswell My Virus program(avsat) is not running. I have purshaces Mcafee aswell but it wont allow it to run its setup. I downlaoded Spyware cease But now i cant get it to uninstall. I need some major help on this issue.. Plz anyone! Thanks
The same thing is happening to me. I can’t even open task manager without the supposed Windows Security alert popping up and saying that my computer is infected. Is there any way of wiping out the spyware junk and eliminating the registry issues witout having to reimage?
I think this virus had hidden my local settings folder. After I open [User Name] I cannot figure out where to go. Please help. I take online classes and I have been borrowing computers for a week now and can’t get this virus off mine. Thanks!
i try to do the things you do to help me remove this spyware but as soon as it opens, it closes and antispyware soft claims that it is infected. how do i stop that?????
Thank you,
It’s nice to know you take the interest to fight against malware.
These people are evil… don’t they have anything better to do. They are equal to drug dealers… who live off of hurting others to make a living. My they be cursed… see how they like it. What goes around comes around.
Thanks for the easy to follow instructions. .. And helping many to return to some normality in our lives.
Bless You,
T. D.
Looks I have finally manually got rid of the antispyware soft … its a nasty one. Thanks.
I unwittlying ended up with that piece of crap in my laptop. I cannot thank you enough for these instructions on removing it.Thank You Thank You Thank You