Av Security Suite Removal

By: Maya Austen

Break Studios Contributing Writer

Trying to carry out an AV Security Suite removal can seem like an arduous task initially. The AV Security Suite virus works, in part, by hijacking the user’s desktop making it nearly impossible to perform normal operations until the virus is removed. The fake Security Suite application pretends to scan the computer for viruses then presents the user with a list of alarming threats the computer is supposedly infected with. The threats listed by the Security Suite are not real. The real threat is the AV Security Suite itself. Do not, under any circumstances, pay for the full license of this sham application. You would be handing over your personal financial information to con artists.

You will need:

  • User Account
  • Antivirus Software
  1. Shut down then restart the computer. As the computer is booting up, continually press the “F8” key until the Advanced Options start up menu appears. Use the arrow keys on the keyboard to highlight “Safe Mode with Networking.” Press “Enter” to launch the computer in Safe Mode. The AV Security Suite process will not launch automatically in safe mode. Only essential computer processes load automatically in Windows safe mode.
  2. Log into the infected user account.
  3. Open the “Start” menu. Go to “All Programs.” Point to “Accessories.” Select “Windows Explorer” to launch Windows Explorer.
  4. Navigate to the appropriate folder for the version of Windows being used. Windows XP: C:\Documents and Settings\[USER_NAME]\Local Settings\Application Data. Windows Vista and 7: “C:\Users\USER_NAME\AppData\Local
  5. Look for a folder with a series of random characters. Double-click on the folder. Go to the “View” menu and select “Details.” Delete the AV Security Suite virus “Application” execution file. It will be titled with a series of random characters, possible named "tssd.exe."
  6. Launch the computer’s antivirus software and conduct a full scan. Hopefully the antivirus software being used has the ability to detect and permanently remove the remaining remnants of the AV Security Suite virus. See the next section if the computer is not equipped with antivirus software.

Follow-up if the Computer is not Equipped with Antivirus Software

  1. Launch “Internet Explorer.” Go to the “Tools” menu. Select “Internet Options” Go to “Connections” tab. Click the“LAN Settings” button. Uncheck the box next to “Use a proxy server for your LAN.”
  2. Download and install one of the following free edition antivirus applications: AVG, Combo, Avira, or Norton.
  3. Launch the computer’s antivirus software and conduct a full scan.

Note: The AV Security Suite virus has been known to make quite a few changes to the computer system’s registry key. Some of the registry keys that are usually either created or modified are:  

  • HKEY_CURRENT_USER\Software\avsoft HKEY_CURRENT_USER\Software\avsuite HKEY_LOCAL_MACHINE\SOFTWARE\avsoft HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "<random>" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "<random>" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyEnable" = "1"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = "" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=…..”
  • If the computer’s antivirus software is unable to effectively detect and clean up the AV Security Suite virus, use the Windows “System Restore” tool to reset the computer’s registry settings to a time before the computer became infected. Once the registry settings have been reset, turn off System Restore to delete the currently saved restore points (to prevent the computer from reverting back to a state when the AV Security Suite virus did infect the computer). Then turn System Restore back on so that the computer may once again begin generating new restore points.
Posted on: Mar. 14, 2011