Antivirus System PRO is another scam antivirus application. Antivirus System PRO creeps into your system through a Trojan — like Zlob — or rogue websites. Like other scareware, Antivirus System PRO pops out loads of Antivirus System PRO alerts. These Antivirus System PRO popups are false security warnings — Antivirus System PRO just wants to scare you into buying the “full” version of Antivirus System PRO.
Antivirus System PRO? More like Antiworking System SCAM. The only thing Antivirus System PRO removes is money from your wallet.
So I’ll show you how to remove Antivirus System PRO, for free.
GET RID of Antivirus System PRO
- Manually remove Antivirus System PRO with step-by-step instructions
- Download Spyware Doctor to automatically remove Antivirus System PRO
- You can download award-winning, anti-badware software SpywareDoctor to easily remove Antivirus System PRO. Want to know why I dig SpywareDoctor? Read my review.
Do You Have Antivirus System PRO?
When you’re infected with badware — whether it’s Antivirus System PRO, spyware, adware, a Trojan, or a virus — there are a few key symptoms. Have you noticed…
- Slow computer performance: It just takes one parasite like Antivirus System PRO to slow your computer dramatically. If your PC takes longer than usual to reboot, or if your Internet connection is unusually slow, you may be infected with Antivirus System PRO.
- New desktop shortcuts or switched homepage: Badware like Antivirus System PRO may change your Internet settings to redirect your homepage to another site. Badware can even add desktop shortcuts to your PC.
- Annoying popups: Badware can bombard your computer with popup ads, even when you’re not online. Through these popups, you may be tricked into downloading more spyware.
How to Remove Antivirus System PRO Manually
Before we get started, you should backup your system and your registry, so it’ll be easy to restore your computer if anything goes wrong.
To remove Antivirus System PRO manually, you need to delete Antivirus System PRO files. Not sure how to delete Antivirus System PRO files? Click here, and I’ll show you. Otherwise, go ahead and…
Block Antivirus System PRO sites:
http://www.inetavirus.com
Stop Antivirus System PRO processes:
%ProgramFiles%\Antivirus System PRO\uninstall.exe
c:\WINDOWS\sysguard.exe
Get rid of Antivirus System PRO files:
c:\WINDOWS\system32\iehelper.dll
%ProgramFiles%\Antivirus System PRO\conf.cfg
%ProgramFiles%\Antivirus System PRO\mbase.vdb
%ProgramFiles%\Antivirus System PRO\quarantine.vdb
%ProgramFiles%\Antivirus System PRO\queue.vdb
Delete Antivirus System PRO folders:
Remove Antivirus System PRO registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus System PRO”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad “ieModule”
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”
HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
Note: In any Antivirus System PRO files I mention above, “%UserProfile%” is a variable referring to your current user’s profile folder. If you’re using Windows NT/2000/XP, by default this is “C:\Documents and Settings\[CURRENT USER]” (e.g., “C:\Documents and Settings\JoeSmith”). If you have any questions about manual Antivirus System PRO removal, go ahead and leave a comment.
How Do You Remove Antivirus System PRO Files?
Need help figuring out how to delete Antivirus System PRO files? While there’s some risk involved, and you should only manually remove Antivirus System PRO files if you’re comfortable editing your system, you’ll find it’s fairly easy to delete Antivirus System PRO files in Windows.
How to delete Antivirus System PRO files in Windows XP and Vista:
- Click your Windows Start menu, and then click “Search.”
- A speech bubble will pop up asking you, “What do you want to search for?” Click “All files and folders.”
- Type a Antivirus System PRO file in the search box, and select “Local Hard Drives.”
- Click “Search.” Once the file is found, delete it.
How to stop Antivirus System PRO processes:
- Click the Start menu, select Run.
- Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC.
- Click Processes tab, and find Antivirus System PRO processes.
- Once you’ve found the Antivirus System PRO processes, right-click them and select “End Process” to kill Antivirus System PRO.
How to remove Antivirus System PRO registry keys:
Because your registry is such a key piece of your Windows system, you should always backup your registry before you edit it. Editing your registry can be intimidating if you’re not a computer expert, and when you change or a delete a critical registry key or value, there’s a chance you may need to reinstall your entire system. Make sure your backup your registry before editing it.
- Select your Windows menu “Start,” and click “Run.” An “Open” field will appear. Type “regedit” and click “OK” to open up your Registry Editor.
- Registry Editor will open as a window with two panes. The left side Registry Editor’s window lets you select various registry keys, and the right side displays the registry values of the registry key you select.
- To find a registry key, such as any Antivirus System PRO registry keys, select “Edit,” then select “Find,” and in the search bar type any of Antivirus System PRO’s registry keys.
- As soon as Antivirus System PRO registry key appears, you can delete the Antivirus System PRO registry key by right-clicking it and selecting “Modify,” then clicking “Delete.”
How to delete Antivirus System PRO DLL files:
- First locate Antivirus System PRO DLL files you want to delete. Open your Windows Start menu, then click “Run.” Type “cmd” in Run, and click “OK.”
- To change your current directory, type “cd” in the command box, press your “Space” key, and enter the full directory where the Antivirus System PRO DLL file is located. If you’re not sure if the Antivirus System PRO DLL file is located in a particular directory, enter “dir” in the command box to display a directory’s contents. To go one directory back, enter “cd ..” in the command box and press “Enter.”
- When you’ve located the Antivirus System PRO DLL file you want to remove, type “regsvr32 /u SampleDLLName.dll” (e.g., “regsvr32 /u jl27script.dll”) and press your “Enter” key.
That’s it. If you want to restore any Antivirus System PRO DLL file you removed, type “regsvr32 DLLJustDeleted.dll” (e.g., “regsvr32 jl27script.dll”) into your command box, and press your “Enter” key.
Did Antivirus System PRO change your homepage?
- Click Windows Start menu > Control Panel > Internet Options.
- Under Home Page, select the General > Use Default.
- Type in the URL you want as your home page (e.g., “http://www.homepage.com”).
- Select Apply > OK.
- You’ll want to open a fresh web page and make sure that your new default home page pops up.
Antivirus System PRO Removal Tip
Is your computer acting funny after deleting any Antivirus System PRO files? I recommend using a program like File Recover from PC Tools. File Recover saves deleted files that otherwise can’t be recovered by Windows operating sytem.
Want to save time finding Antivirus System PRO files? Download Spyware Doctor, let it find the Antivirus System PRO files for you, and then manually delete Antivirus System PRO files.
How Did You Get Antivirus System PRO?
Wondering how Antivirus System PRO ended up on your PC? If you’re infected with Antivirus System PRO or other badware, perhaps you were using…
- Freeware or shareware: Did you download and install shareware or freeware? These low-cost or free software applications may come bundled with spyware, adware, or programs like Antivirus System PRO. Sometimes adware is attached to the free software to “pay” developers for the cost of creating the software, and more often spyware is secretly attached to free software to harm your computer and steal your personal and financial information.
- Peer-to-peer software: Do you use a peer-to-peer (P2P) program or other application with a shared network? When you use these applications, you put your system at risk for unknowingly downloading an infected file, including applications like Antivirus System PRO.
- Questionable websites: Did you visit a website that’s of questionable nature? When you visit malicious sites that are fishy and phishy, badware may be automatically downloaded and installed onto your computer, sometimes including applications like Antivirus System PRO. I recommend you use Firefox web browser, if you don’t already.
Understanding Antivirus System PRO
If you’re infected with Antivirus System PRO, you should know what you’re fighting. I’ll explain some definitions related to Antivirus System PRO.
Antivirus System PRO May Be Rogue Anti-Spyware
Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value. Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application. Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes. While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself.
Often when you’re infected with rogue anti-spyware like Antivirus System PRO, you’ll see a false popup security alert like this:

Rogue Anti-Spyware Tactics
Typically, rogue anti-spyware such as Antivirus System PRO has one or more of the qualities listed below, which is why rogue anti-spyware is considered anti-spyware software of questionable value.
- False positives/fake alerts: Rogue anti-spyware may produce a large number of false positives or use fake alerts, noting that your computer is infected with spyware parasites or other threats that do not really exist.
- Copycat looks: Rogue anti-spyware may copy the look and feel of other legitimate or rogue anti-spyware applications. Often, rogue anti-spyware applications may appear as close clones of other rogue anti-spyware software.
- High pressure marketing: Rogue anti-spyware may use scare tactics or other aggressive advertising and marketing tactics to try to trick you into buying the rogue anti-spyware application. Often, rogue anti-spyware may produce false positives and fake alerts about your computer being infected.
- Poor detection/scan reporting: Rogue anti-spyware may produce poor reports when it scans your PC. For example, rogue anti-spyware may say your computer is infected 11 parasites, but not specify which spyware parasites or what type of parasites. Rogue anti-spyware may also report that your PC is infected with SafeAndClean, but not tell you which related files, DLLS, etc. were found on your computer.
- Weak scanning/detection: Rogue anti-spyware may not only poorly report on computer infection, but rogue antispyware may also poorly scan your PC. Rogue anti-spyware may skip over important folders and files of your computer that should be scanned to detect spyware.
Did Antivirus System PRO use these tactics to trick you into buying Antivirus System PRO?
Antivirus System PRO May Be a Trojan
Trojans install themselves secretly onto your computer, most often through your downloading a simple email attachment (often Trojans pose as harmless pictures). Most Trojans are able to gain complete control over your PC after installation. With this control, the Trojan and the hacker behind it may change your system settings, delete important files, steal your passwords, and watch your computer acitivity.
Infection Methods of Antivirus System PRO and Other Trojans
Most Trojans infect your computer by tricking you into launching an infected file. This poisoned file could disguised as a small file, such as a jpeg or other email attachment, or it might be downloaded via a website or FTP.
- Email: Your PC may be infected with a Trojan when you download infected email attachments, or sometimes even when you simply open an email. Many Trojans exploit security holes in Microsoft Outlook. You may be able to reduce your chances of getting infected by a Trojan by using a spam-blocking software.
- Websites: Your PC may be infected with a Trojan when you visit a rogue site. Many Trojans exploit security holes in Internet Explorer web browser so that by simply visiting a website you may unknowingly download a Trojan.
- Open ports: If your computer runs programs that provide file-sharing functions – such as AOL Instant Messenger (AIM), MSN Messenger, and more – you may open your computer up to vulnerabilities. Using file sharing through these applications may create a network that gives attackers the opportunity to remotely access your computer.

Traduzca al Español
Übersetzen Sie zum Deutsch
Traduisez au Français
Traduca ad Italiano
Vertaal aan het Nederlands
Μεταφράστε στα ελληνικά
Översätta till Svensk
ترجمة الى العربية
中文翻译
한국어에게 번역하십시오
日本語に翻訳しなさい
Traduza ao Português
Переведите к русскому
Dear, i couldn’t find the Anti Virus System PRO files in the Program files, also i couldn’t find the registry entries that you have mentioned.
please advice
thanks.
I agree with Rabih, your instructions are not valid. I have a guy here at work who got this Antivirus System Pro Alerts… but none of your instructions helps finding where it is installed.
I tried Search C, Regedit etc.. all of your tips and there is no such files as you describe. Do you know what name this Trojan – like program will hide under? Registry key names or processes?
BR // Yael
I also can’t find any of these files and its driving me nuts…These intructions don’t work
it’s hidden as SYSGUARD.
watch: 1) hit ctrl+alt+del , 2) highlight sysguard.exe and 3) click ‘end process’…
the pop-ups quit
You are right. This stopped the pop-ups. Although the icon still remains at the bottom of my desktop. How do I rid myself of this on my computer?
Nevermind. The pop ups stopped and the icon is gone. This seemed to have worked so far.
Actually, this works for every time you sign on, but the program still exists within your computer. At any rate, I am glad to at least be able to stop the pop ups when I sign on, and my husband will take care of removing the -program later.
I didn’t have any of the files either, but endins sysguard.exe in task manager stopped the popups. I did find a few of the registry entries and deleted HKEY_CURRENT_USER\Software\AvScan and
a couple more. That removed the rest and it seemes normal now. No more virus.
it won’t allow me to delete the “iehelp” from the files and folders. also, once i deleted sysguard.exe from the task manager, it returned the next day! what do i do?
As far as I’m concerned – EVERY website like yours pushing a $30 malware removal tool is just as guilty of scamming consumers as the people who developed the software? What’s your commission on each sale of these bogus tools?
zHotkey.exe is listed in my task manager. Will deleting this help remove AVSystem Pro or will it do more harm than good. Thanks
follow-up to above: I installed Malwarebytes Anti-Malware software (which was free), did a quick scan then removed all infections and rid my computer of the Antivirus System Pro!
No more pop-ups even at start up, no more viruses. It was very easy and took no time at all. I hope this helps some of you. Try it.
hey can u help me, i got that anti virus pro . i want to return my money there was some return policy. helPPPPPPPPPPPPPPP meeeeeeeeeee guys tnks for reading
DEAr ,..
Here’s one way to delete the files that refuse to delete (for example…)
WINDOWS\sysguard.exe
WINDOWS\system32\iehelper.dll
Supposedly they are “in use” or “write-protected” (so says the error message when you try to delete them). Just re-name the files (for example, I re-named sysguard.exe to sysguardHELP.exe). Re-name them both and then RE-START your computer. You will now be able to delete the RE-NAMED files. Re-naming the files prevents the program from starting up after a re-boot, but it won’t stop the program from doing its mischief already in progress.
After you deleted these files you can proceed to delete the registry entries, if they are on your computer. I only found one: HKEY_CURRENT_USER\Software\AvScan
If you don’t know how to find the registry entries hit the START button in the lower left hand corner then click on “Run.” Type “regedit” and then hit enter. Windows explorer will open and you will now see the “HKEY” folders listed. I CAUTION YOU: don’t play around with this stuff unless you are VERY careful and are confident of what you’re doing. Erasing the wrong file in the wrong place could be a disaster. And do NOT erase an entire folder if the instructions say to delete just one file within that folder. Check and double-check to make sure you are in exactly the right path and folder listed in the instructions. There are many folders and files that sound the same but are not exactly the same. Good luck!
To “ggg”
Do NOT ever interact with “Anti Virus System PRO” malware except to shut down the warnings and windows it pops up! You are just asking for more trouble by interacting with it as if it is a legitimate company. Your money is not going to be refunded and the longer you allow these hackers to have control over your computer and credit card information, the worse your security problems will be. Get these files off your computer as you humanly can!!
Dude you are THE MAN thanks for the great inside info and instructions!
You did a good deed!
is it safe to delete HKEY_CURRENT_USER\Software\AvScan
?????
wat do i do if i cannot find all of the files suggested to be deleted in the registry- do i assume the virus is gone? Does anyone know any other registry files that should be deleted?
I tried searching for the antivius pro system files you listed but after over an hour none show up.–Now what??
I stop the virus in taskmanger but i cannt access the internet. everytime i try and get on it just pop ups to “you comp is at harm” and wants me to go to its website only. How to i get rid of this part of the virus? I have Norton and is doesnt take care if it.
I seem to not be able to find all of the reg entries. I notice some are similar, and I wondered if that meant that there would only be one of them, that it could be different per machine. I however can only find 2 of the entire set of reg entries, and I’ve checked over and over. The other issue is that all of the automated removals require me to download and execute a .exe file, which I can’t do because this thing disables that ability. I find it interesting that everyone says to do that when it isn’t possible. Also, I have attempted to reset the .exe reg file, but without being able to restart it does not good. And if I restart without finding all the AVSP files then it reverts back anyway. I did manage to get my task manager back, but again, if I restart it goes back as well. Any suggestions?
Josh,
I am havimg the same exact issue. Did you find an answer? If not does anyone have suggestions. I don’t see any files in Registry and drive c:. I can’t access internet with IE or FireFox. When I go to email it puts me into a browser properties screen.
Thanks in advance for any direction.
JR
Al ALLA — yOU ARE definitely CORRECT… As soon as I deleted that from the processes then the popup stopped plus the icon went away.
THANK YOU SOOOOOOOOOOOOOOO much..
Latoya
I too couldn’t remove it manually. Finally AVG 8.5 got rid of it. Antivirus System Pro Alert is slow to load. I rebooted, logged on and started AVG before anything else. Somehow the scan started and ran to completion. Took almost 2 hours but haven’t seen the virus now for 2 days. Got lucky I guess.
There were two vital pieces of advice here that helped me. One was that the name was hidden as SYSGUARD, and the other was that you had to re-name the files to delete them.
However, the advice on opening your task manager to stop the pop ups did not work because antivirus system pro would not let me open my task manager because it said it was contaminated. So frustrating!
But when I ran a search for SYSGUARD it found the files where this was located. One was in Windows called prefetch and the other was in program files called gbobck. So I renamed prefetch and was able to delete that without a reboot. I did have to re-boot the computer to delete the re-named gbobck file, but was able to do it….no more Antivirus System Pro! Thanks so much for the advice on here!!!
Absolutely marvelous. This process worked, and has saved me alot of trouble, thank you so much.
Just wanted to say I could not find any of the files or registry entries at all. However, I did read the post about free melwarebytes software. It wored. I copied on to my flash drive from another computer and installed from the drive to my infected system. I let the scan run and because I could not get internet work I let it run without the updates. One scan and one reboot later I was up and running. Warning I did a search for melwarebytes and the first one that comes on my google search is not real. It is a red page that looks pro but if you try to download it is itself a trojan. Mcaffee caught this fo me. I went on to the next link and this one was lagite. NIce lite blue page. Thans Shat it wored perfectly
Al Alla, you’re life saver!
I didn’t find the exact name but a similar one. After highlight it in the Process tab of Windows Task Manager, hit the “End Process” then “Yes”
It’s gone!
I bet thousands people out there will appreciate your finding.
“Antivirus System Pro” is a devil. It installed or tricked its program in our PCs without premission!
Those guys have modified the file names
Search thru Task Manager/Properties to disable for:
uomsysguard.exe
Am still searching for the location of the files so I can remove them
Sometimes, you cannot remove the files for antivirus system pro because, in my case, when I delete one file/process, it reinstalls/reactivates.
You are life saver. Thank you very much.
I could not find any of the files mentioned here until i searched for systemguard in safe mode which i found in two locations. I was able to remove them in safe mode without having to rename the files. I since downloaded STOPzilla and ran the scan and discovered 48 other files located in very incospicuos places with totally unrelated names but all are a part of this particular virus. Stop zilla is not free but it is also not expensive so I for one definitely recommend it as now I do not have to reformat my entire hard drive to get rid of AVsystem pro. Good Luck to all.
I had Anti virus System PRO.
It was driving me nuts.
After many hours of messing with it, I re-booted in SAFE MODE and restored all files to the day before the damm thing infected me. thanks Linden
Tried Spyware Dr., found infections and when went to fix, had to buy/register software. Downloaded Malwarebytes, scanned, found and removed ALL infections…for FREE!!!
These sites such as Antivirus Pro. Who intentionally infect your PC. with the intent Of getting you to pay to remove thier infections. Should be noted And Reported To The Internet fraud Department Or FBI.
This is illegal and common Fraudulant use of computer Software. To remove This Software. Download Malwarebytes ( free ) scan your computer. it will automatically detect the changes made in the system registry. would also recommend Spybot-search and destroy. And AVG Free. All the above mentioned Software Is Available free For Download. Search The Web. Another Tip Is that if you get infected By This. press ctrl/alt/del which will open the task Manager. select Processes. Scroll down. To see whats Actually Running. you Can Stop The Running process in question. to allow a full uninterupted scan. Hope This Helps you all out. Mike @ Abracadabra Computers.
Malwarebytes is the only thing that worked that fuckin anti virus system pro put 338 infections on my laptop ,, if i find the persons who created this ill break their fucking head open
The name of the file changed. It is now “ymawsysgaurd.exe”. Stop the process first and then delete the file. The file is not detectable with “search”. Search manually. This does not delete all the crap files, but at least no more stuff popping up on your screen.
so should i delete all the HKEY folders?
for example it shows right now an,
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_CURRENT_CONFIG…..
SHOULD I JUST DELETE THOSE FOLDERS AND ANYTHING IT COMES WITH THEN?
AND THEN IT WILL GO AWAY. I BASICALLY TRIED EVRYTHING ON THIS SITE IT ASKED BUT COULDNT FIND ANYTHING, THEN I STARTED READING THESE COMMENTS AND UNDERSTOOD BETTER. NO MORE POP UPS BUT LIKE SOME1 SAID ITS STILL IN MY COMP, SO SHOULD I DELETE THOSE FOLDERS??? THANKS FOR HELPING BY THE WAY!
the weird thing is im supposed to have this really good anti virus on my computer, called Symantec endpnt protection, i have scanned twice already today and it keeps telling me i dont have anything and that my computer is clean.
I deleted the Sysguard entries (agwxsysguard and agwxsysguard.exe-08469,) and the popo ups went away, but now I can’t access the internet. What now?
Tiens, son «mari» va s’en occuper «plus tard»… lequel, et quand ?
Firsd thing I did was search the users cookies with him standing there. Low and behold there was a cookie to a ‘questionable site’ which he claimed just started poping up.
I scanned for all of the files mentioned above, on the HD as well as the registry. Some I was able to locate and delete. I also found the ASHKJI file folder but could not deletre the EXE file. I finally booted the computer up in a safe mode and was able to delete the file and folder. After deleting the file & folder I rescanned the registry and hard drive and removed the remaining traces of this file.
How amazing is this? I had this antivirus system pro thing annoying me to death, popping up porn sites and blocking me from using other programs. So I tried the seach and destroy routine. I ran my AVG and it didn’t get rid of it. Saw all this info about how Spyware Doctor would do the trick. So, I bought it. And then miraculously, with only downloding the program and scanning, the Antivirus System Pro was gone. It’s a miracle…..or is it?
Hi guys , i have the same problem, and none of these instructions worked for me , after 3 hours of hard work i found dcfkut folder under c:\program files , which has one exe file, i didnt get the exact name of the file , but it starts with flrsys…exe , i renamed the file and the folder , restarted the computer and my pop-ups from Antivirus system pro has stopped. it worked for me so far.
The slimeball is getting sneakier on Sept 2009 the executable is called apbsysguard.exe and lives in ProgramFiles/nuhuhm and the iehelper.dll is still in the system32 subdir.
okay i downloaded and installed Spyware Doctor and I cannot open the program
i really really thank you
first i almost quit cuz i was confuse
and these pop-up thing y are so annoying
i cant focus on the instructions and now i did it…
thank you very much…
Al Alla…
you r such a life saver thx so much…
my mom payed and downloade this crap. i erased all they listed. Is there any more damage or threat still in pc.?
it’s not even letting me open regedit or task manager to try these things? It says that these programs are infected yada yada
I had problems even after I installed the freeware Malwarebytes. I
I was having problems even getting that installed properly due to the FAKED pop ups saying all these different files are corrupted.
I restarted my computer in safe mode.
When Malwarebytes STILL didn’t work. I hit the INSTALL PROGRAM for Malwarebytes again (while still in safe mode).
Malwarebytes installed as if it wasn’t already installed. It ran perfectly. It stopped the pop-ups in safemode.
I started the computer again and the pop-ups had stopped there too.
I ran Malwarebytes again in regular mode to make sure it didn’t miss anything that wasn’t running in safe mode (It hasn’t so far)
Now I can look for some the registry keys etc listed here at my leisure.
Good Luck Deb
Guys, if you’re using Microsoft as an operating system, I suggest you try contacting Microsoft and they would give you free assistance. Their technical support had helped me cleaned up my computer from Antivirus System Pro Alert pop ups, and other malwares today for free. They have excellent technical support and of course you are assured that you’re dealing with a reliable company. Try searching for Microsoft Consumer Security Support Center. Here’s the link.
https://consumersecuritysupport.microsoft.com/default.aspx?mkt=en-us&scrx=1
The new name is tnxesysguard. ctrl>alt>delete>Processes>tnxesysguard>End Process.
And then searched this name and deleted it.
If you cant reach processes through ctrl+alt+delete, try startmeny-run and type taskmgr.exe and hit OK. worked for me.
This happened to me, the file was named “dboesysguard.exe” in the folder Program Files\knshys. I also had a file in my WINDOWS/system32 folder called “~.exe”. Both files had a beach ball icon. Other than those changes, the directions above are spot on.
A bit of advice: when restarting, pull up your task manager right away (ctrl+alt+del), and make sure to stop the AVP scan as soon as it starts. I found this helped keep me from the issues of having this thing kill my tm or cmd window or anything else by saying the file was infected. If it doesn’t run long enough to throw the false positives, you can easily go about your business of killing it.
Good luck all!
Deb’s advice worked for me:
Start your computer in safemode and download and run Malwarebytes.
I couldn’t find any of the files but i did find this ‘AVS4YOU’ is that Antivirus System PRO files?
hello kristopher
This thing (is it a trojan? virus? malware?)
has disabled me from getting online via wifi, from editing the registry, and from doing sytem restore. Please what do I do?
I think it has even disbaled safe mode. Bc when I hit f8 and choose safe mode, the comp (toshiba L25 laptop with windowws xp sp2) restarts. I have to choose ‘ Directory Service Restore Mode’ or ‘Debugging Mode’, and then Safe Mode loads.
How do I kill it /delete it? I cant get online to d/l an AVG or anti malware. Thanks.
Read the above comments, but note that the sysguard file has likely changed. it is now jyhfsysguard (just look for something ending in sysguard in processes). Find it in task manager, note the name, and then stop it. Then run search to find the file location. Once you do, rename and delete the files. Currently prefetch in windows and mieqei in programfiles. Then run regedit.
another new name, toysysguard.exe
Yes I found hmpqsysguard.exe hiding in program files\tlfkua. Thanks!!!
What if I can’t start regedit because it tells me the administrator has blocked access to regedit? Which I know is not true…
Also, I cannot launch taskbar because that’s blocked too…
shut your computer down and before anything gets loaded got to the system restore and reload to an earlier date. it wiped it all out.
okay, when i try to start taskmanager the fake antivirus warnings pop up and say that it is infected and it will not come up. what do i do! i also had installed Malwarebytes to get rid of it because i found a forum where everyone said it had worked but the fake alerts would not let me open this either.. please, please, please help me.
I was not able to find any of the files you listed. My computer can’t find any part of Antivirus System PRO so how do I get rid of it?
I will swear by Malwarebytes‘ Anti-Malware It took me all of about ten mintues to get rid of the annoyance that is Antivirus System Pro..
Just found “jcfsysguard.exe” in the task manager and that DAM Antivirus System PRO went away. Spent four hours on this stupid thing. Just an FYI
I have tried this for the last years and it has worked:
1- Backup your personal files
2- Re-install all your system using the recovery disks that comes with your pc or laptop. (you don’t need to be geek to do this)
3- If you dont’ have the original disks try to invest in an original windows (i prefer XP) and look for the installers on the manufacturer’s site ONLY! or you will get infected again.
4- Keep the new windows disk and backup the drivers you downloaded. You will need those for future recoveries for SURE!
This way I havent spent a single penny by buying any antivirus.
LET’S STOP THE ABUSE!!
Great info thanks for sharing
I got it off but took me a while to find the files but I did it
my computer is not letting me open up the task manager, it is saying the file taskmgr.exe is infected. do you want to activate your antivirus software now?
Mine got hit today as well. Did a google on antivirus system pro and found Malwarebytes‘ anti-malware. Dnlded and ran once then rebooted. Didn’t work, so I restarted in safe mode w/networking, ran anti-malware again after checking for updates. Problem solved…so far.
John,
I had the same problem with Antivirus System Pro hijaking my computer. I tried everything that is listed here and nothing worked because it kept blocking everything I tried. Finally, I finally did a system restore to early this morning and that took care of the problem. Hopefully, you are able to do this.
E
Under Windows Task Manager I don’t even have SYSGUARD, are there any other image names it could be under?
It also shows up as eharsysguard.exe
Minimal registery enteries and 2 entries in the start-up tab under MSCONFIG. 1 process running under an alphabet folder name under docs&sets\user(login name)\local sets\app data\( I.E ) xqsyka.