Windows Protection

Malware Analysis:

Antivirback.com can be a harmless site if you just visit having pasted its URL in your browser location bar; or it can be a real problem if it comes into your computer system as a browser hijacker. If it’s the worse case, you are by all means recommended to perform some basic computer cleaning operations or else the malware will take over your machine completely. By the way, this hijacker does not exist just to act on one’s nerves. It is a helper element with respect to AV Security Suite – a piece of dangerous software that tries to make its developers rich. As a matter of fact, AV Security Suite attempts to persuade you that you got a complicated security situation with your PC and urgently need to do something about it. For more intense persuasiveness, this rogue security product will be redirecting you once in a while to Antivirback.com or Antivirback.com/block.php domains. Both are tricky and in no way trustworthy. It’s curious though that Antivirback.com/block.php mimics a legitimate Internet Explorer warning that notifies you about unsafe web activity allegedly threatening your workstation. Naturally, some people would fall for these intricacies and eventually do what the hijacker tells them to. It means you may end up wasting your money for buying AV Security Suite, i.e. software you don’t need and which may hurt your system on the whole and deteriorate its performance. Here’s a couple of tips to help you cope with Antivirback.com redirect problem.

Determine if your PC is infected with Antivirback.com hijacker and affiliated malware (AV Security Suite scareware):

Download Antivirback.com Hijacker Free Scanner with Remover

Antivirback.com Screenshot:

AV Security Suite Counterfeit Warning Page Screenshot:

How to remove Antivirback.com hijacker manually:

To perform manual removal of Antivirback.com hijacker and related rogue trialware, you should do the following:

Delete the following corrupt files:

• %UserProfile%\Local Settings\Application Data\[random string]\
• %UserProfile%\Local Settings\Application Data\\[random string]tssd.exe

Remove Antivirback.com related registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]“
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random]“
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″

Please, note that manual removal of Antivirback.com hijacker is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download Antivirback.com Hijacker Removal Tool