Feb 23

Remove Av-Super.com hijacker (Removal Instructions)

Hijackers Add comments

Threat Description:

Av-Super.com is a home site of the new rogue malware removal program denominated Antivirus Live 2010. It’s curious that Av-Super.com is visited by most people not because they enter its URL in the browser address field. The common way to hit that site is through browser hijack implemented by a bunch of trojan viruses as they penetrate into your computer. Av-Super.com is positioned as an information website describing the characteristics of Antivirus Live 2010 and encouraging people to purchase that scam software. The site contains a number of tabs such as ‘Features’, ‘Purchase’, ‘Screenshots’ etc. An interesting thing is the ‘Top Testimonials’ section which is identical with all rogue anti-spywares representing this family. The only thing that is a variable there is the scareware’s name. That doesn’t seem like testimonials one could trust, does it? Just like the rest of Av-Super.com content. It’s filled up with fake statements, untrue description and even wrong screenshots of the junkware being advertised. Do not trust Av-Super.com and any information it tells you about. The site is just as big scam as the application it promotes. So please avoid visiting Av-Super.com and in case you get directed there without your consent, get your system cleaned up from trojan(-s) that called forth this mess.

Determine if your system is infected with Av-Super.com hijacker and related threats:

Download Av-Super.com Infection Free Scanner with Remover

Av-Super.com screenshot:

Av-Super.com

How to remove this threat manually:

Av-Super.com manual uninstall procedure:

Get rid of the related corrupt files:

  • %UserProfile%\Local Settings\Application Data\[random]
  • %UserProfile%\Local Settings\Application Data\[random]\[random]sysguard.exe

Delete the associated registry entries:

  • HKEY_CURRENT_USER\Software\AvScan
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]“
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random]“

Please note that Av-Super.com manual removal is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may cause irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download Av-Super.com Removal Tool

Leave a Reply