Jump to content
IObit Forum
Top Free Driver Updater Tools Best 25 PC Optimization Software Best 22 Antimalware Best 22 Uninstaller Software IObit Coupons & Discount Offers PC Optimizer Mac Boost Advice IObit Advanced SystemCare Pro Review IObit Coupons A Good Utility Program From IObit IObit Driver Booster Pro Review IObit Promo Codes IObit Coupon Codes IObit Coupons and Deals FAQs IObit Software Coupons & Promo Code

HELP - Rogue Crapware?


Momofabrood

Recommended Posts

Installed IOBit Advanced Security Pro...

Everytime rebot computer AV Security Suite pops back up.

After scanning receiving this :

Rogue/Crapware.RegistrySmart / Critical

Told that it is fixed, run scan again and there it is!

Eventually brings up porn site after porn site... and appears to attach to everything.

ANY advice on what next?

Link to comment
Share on other sites

Removal instructions for Adware RegistrySmart:

 

To delete this malware infection, please download and install Emsisoft Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.

 

@@@://www.emsisoft.com/en/malware/?Adware.Win32.RegistrySmart

Link to comment
Share on other sites

Hi

 

Run a system restore to a date before you received the Infection.

 

Or if u cant run a system restore.

 

Download this and run it then

 

 

Download malwarebytes

 

and run it

 

To Remove by delete

 

Need to Delete AV Security Suite Files:

 

%Documents and Settings%\[userName]\Local Settings\Application Data\[random characters ]\[random characters]tssd.exe

%Documents and Settings%\[userName]\Local Settings\Application Data\[random characters ]\[random characters].exe

 

Need to Delete AV Security Suite Registry Entries

 

HKEY_CURRENT_USER\Software\AvScan

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random characters]“

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random characters]“

HKEY_CURRENT_USER\Software\avsoft

HKEY_CURRENT_USER\Software\avsuite

HKEY_LOCAL_MACHINE\SOFTWARE\avsoft

HKEY_LOCAL_MACHINE\SOFTWARE\avsuite

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” =”1″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “<local>”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″

Need to Delete AV Security Suite Files:

%Documents and Settings%\[userName]\Local Settings\Application Data\[random characters ]\[random characters]tssd.exe

%Documents and Settings%\[userName]\Local Settings\Application Data\[random characters ]\[random characters].exe

Link to comment
Share on other sites

AV Security removal

 

I downloaded the suggested products and the crud on my computer tells me it is infected so I can not open - IOBit says all is clear but it iw not.

 

Are you saying I can manually delete this stuff? I went to my documents / applications, etc.. i can not find anything that says AV.

 

I am not great on the computer so any specific directions would be great. Thanks.

Link to comment
Share on other sites

Hi Momofabrood,

 

I have copied your posts to Spyware-Malware Removal Help! section, please wait for a Malware Fighter to help in that section.

 

I will leave this thread open if other members would like to help here untill you get a response in Spyware-Malware Removal Help! section.

 

Cheers.

 

EDIT: Since there is a response in Spyware-Malware Removal Help! section, this thread is closed.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...