How to Remove AV Antivirus
- 1). Select the Windows "Start" menu and search from the right-hand side of the list. In the dialog box, select "All Files and Folders" and enter "*tssd.exe" in the search field. Be sure to include the asterisk, as AV Antivirus uses random numbers in its file names. The asterisk allows Windows to ignore these random characters and search for the rest of the name. Click "Search."
- 2). Wait for the search to finish. Confirm that the located files are in the format of "*tssd.exe," with random characters in place of the asterisk. Note the computer location where the files are located. Select all of the files that match these criteria, and press the "Delete" key. Click "Yes" to confirm that you wish to delete the files.
- 3). Open the "Start" menu and click "My Computer." Browse to the AV Antivirus file location that was noted in the previous step. A common location is "C:\Documents and Settings\Local Settings\Application Data," however this may vary depending on the computer. Select the folder labeled "AV Antivirus," and press the "Delete" key to remove it.
- 1). From the "Start" menu, click "Run." In the dialog box, enter "taskmgr.exe" and press "OK." Windows Task Manager will open.
- 2). In Windows Task Manager, click the "Processes" button, listed at the top. Read through the list of processes and select any process that matches the "*tssd.exe" format. Again, random characters will appear instead of the asterisk.
- 3). With every instance of "*tssd.exe" selected, click the "End Process" button. The selected AV Antivirus processes will be cleared from the computer's memory.
- 1). Click "Start" and select "Run." Enter "regedit" and press "OK." The Registry Editor program will open and display different folders or "keys" on the left side, along with details on the right.
- 2). Select "Edit" from the menu and click "Find." In the field, enter one of the AV Antivirus registry keys from this list and press "Find:" Note that two of the keys include random characters. To find these, use the asterisk, as indicated below.
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run*
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run*
HKEY_CURRENT_USER\Software\avsoft
HKEY_CURRENT_USER\Software\avsuite
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" ="1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1" - 3). For each search result, right-click on the registry key on the right-hand side of the window and select "Modify." Click "Delete." Repeat this process to delete each of the registry keys listed in the previous step.
- 1). From the "Start" menu, click "Control Panel." From the list, double-click on "Internet Options." This will load details for the default Internet browser, which AV Antivirus often changes.
- 2). Click the "General" tab. In the section labeled "Home Page," click "Use Default." Enter the desired address for the default home page in the text field and click "OK."
- 3). Launch the default web browser and verify that the desired site loads rather than an AV Antivirus redirection. The shortcut to Internet Explorer is usually found by clicking the "Start" menu, but may vary depending on the computer.
Remove Core Files
End System Processes
Remove Registry Entries
Revert Internet Homepage
Source...