Thursday, April 8, 2010

AV Armor


AV armor fake security site
The av-armor virus is actually a browser hijacker which promotes the fake antivirus suite software. Antivirus suite is a non working security software. Another examples of a fake antivirus protection program is the Armor defender and the save armor virus.

Remove AV Armor
The av-armor com website may look like a legitimate antivirus protection site but Av-armor.com is actually a rogue security domain. Removing av armor must be considered since this browser hijacker can make it difficult for you to work online.

AV armor scam
Make sure that you do not download or buy anything that the av armor malware promotes to you.

AV-armor removal
To remove remove av armor, you must delete the following AV armor files and registry entries

* %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sysguard.exe
* %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]ftav.exe
* %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe

* HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
* HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1?
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555?
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1?
* HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1?
* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”[random string].exe”
* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”[random string].exe”

You may also want to read this post on how to uninstall av- armor antivirus suite infection.

0 comments:

 
design by suckmylolly.com