Mar 05

Threat Description:

Av-crew.net is a malignant Internet creature that jacks up computer systems to drive illegal traffic to a page selling Antivirus Soft scareware. Av-crew.net is actually the official site of Antivirus Soft and is not harmful if visited by you randomly, i.e. from your browser location bar. Nevertheless, Av-crew.net grows into a problem if it hijacks your web browser. And it’s Antivirus Soft junkware to blame for this scattershot web-surfing. This rogue software goes so far in its bad activity that it reaches as far as the HOSTS file of Windows OS. The malware additionally interferes directly with the web browser configuration adjusting it slightly to the malvertising plan. So if your IE gets hijacked by Av-crew.net you will repeatedly visit that web page now and then until you either purchase Antivirus Soft or get rid of the pest. Av-crew.net contains a couple of false testimonials of imaginary people whose lives were allegedly changed for the better thanks to Antivirus Soft. It makes no sense believing all the crap info provided through Av-crew.net. Anything you view on Av-crew.net is nothing but bait for credulous people who are potential clients of Antivirus Soft, Inc. You must treat Av-crew.net with caution and definitely refrain from paying for the scam software it advertises. More detail on this issue is provided for you below, please examine our security information and precautions regarding Av-crew.net.

Determine if your system is infected with Av-crew.net hijacker and related threats:

Av-crew.net Screenshot:

Av-crew.net

How to remove this threat manually:

Av-crew.net manual uninstall procedure:

Get rid of the related corrupt files:

  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sysguard.exe
  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sftav.exe

Delete the associated registry entries:

  • HKEY_CURRENT_USER\Software\AvScan
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random string]“
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random string]“

Please note that Av-crew.net manual removal is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may cause irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download Av-crew.net Removal Tool

Leave a Reply