May 03

Av-lookup.com Description:

Av-lookup.com is a browser hijacker sponsored by the infamous rogue spyware remover called System Protector. Av-lookup.com uses associated trojans to redirect their web-surfing to its malicious domain. These trojans bypass system authentication and get on board without user awareness and approval. Then, the browser settings get modified and you will keep hitting Av-lookup.com domain every now and then. On Av-lookup.com, you will see a fabricated online scanner that pretends to check your system online with the aid of System Protector program. This scanner always reports the same infections because it’s pre-determined to. Fake online scanners like Av-lookup.com pursue the goal to brainwash people into installing and purchase the full commercial version of System Protector scareware. It’s important to keep your web-surfing from Av-lookup.com and refrain from installing anything there. If you are getting redirected, remove Av-lookup.com hijacker ASAP and check your PC for more infections that may have come bundled with the trojans that started the whole malicious thing, in the first place.

Find out if your PC is infected with Av-lookup.com hijacker and affiliated malware:

Av-lookup.com Fake Scanner screenshot:

Av-lookup.com

How to remove Av-lookup.com hijacker manually:

To perform manual removal of Av-lookup.com hijacker and related rogue trialware, you should do the following:

Delete Av-lookup.com hijacker corrupt files:

  • %UserProfile%\Application Data\install.exe
  • %UserProfile%\Application Data\lsascs.exe
  • %UserProfile%\Application Data\shellex.dll
  • %UserProfile%\Application Data\Microsoft\windll32.exe
  • %UserProfile%\Application Data\SpyProtectorSC_Base_new.dat
  • %UserProfile%\Application Data\SpyProtectorSC_Config.ini
  • %UserProfile%\Desktop\System Protector.lnk
  • %UserProfile%\Start Menu\Programs\System Protector\Purchase License.url
  • %UserProfile%\Start Menu\Programs\System Protector\Support Page.url
  • %UserProfile%\Start Menu\Programs\System Protector\System Protector.lnk
  • %Program Files%\System Protector
  • %WINDOWS%\system32\spyprotector.cpl

Remove Av-lookup.com hijacker registry entries:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” => 1
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\System Protector
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\System Protector
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\System Protector
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\System Protector
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lsascs.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “System Protector”

Please, note that manual removal of Av-lookup.com hijacker is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic Av-lookup.com hijacker removal tool below:

Download Av-lookup.com Hijacker Removal Tool

Leave a Reply