Antivirus System Pro alert is a spoof security warning from scareware Antivirus System PRO. This Antivirus System PRO alert reads:
“Antivirus System Pro alert. INFILTRATION ALERT: Your computer is being attacked by an internet virus. It could be a password-stealing attack, a trojan-dropper or similar. DETAILS: Attack from 235.157.169.3, port 40771; Attacked port 22363; Threat Win32/Nuqel.E. Do you want to block this attack?”
Click “No” until your mouse breaks. If you click “Yes… you want to block this attack,” you’ll be tricked into wasting money on Antivirus System PRO. Antivirus System PRO is fake security software — it likely can’t even remove the imaginary spyware it placed on your PC.
If I’m blowing money, I’d prefer to do it in the Wynn in Vegas. You dig? So let me show you how block this Antivirus System Pro alert.
GET RID of Antivirus System Pro Alert
- Manually remove Antivirus System Pro Alert with step-by-step instructions
- Download Spyware Doctor to automatically remove Antivirus System Pro Alert
- You can download award-winning, anti-badware software SpywareDoctor to easily remove Antivirus System Pro Alert. Want to know why I dig SpywareDoctor? Read my review.
Do You Have Antivirus System Pro Alert?
When you’re infected with badware — whether it’s Antivirus System Pro Alert, spyware, adware, a Trojan, or a virus — there are a few key symptoms. Have you noticed…
- Slow computer performance: It just takes one parasite like Antivirus System Pro Alert to slow your computer dramatically. If your PC takes longer than usual to reboot, or if your Internet connection is unusually slow, you may be infected with Antivirus System Pro Alert.
- New desktop shortcuts or switched homepage: Badware like Antivirus System Pro Alert may change your Internet settings to redirect your homepage to another site. Badware can even add desktop shortcuts to your PC.
- Annoying popups: Badware can bombard your computer with popup ads, even when you’re not online. Through these popups, you may be tricked into downloading more spyware.
How to Remove Antivirus System Pro Alert Manually
Before we get started, you should backup your system and your registry, so it’ll be easy to restore your computer if anything goes wrong.
To remove Antivirus System Pro Alert manually, you need to delete Antivirus System Pro Alert files. Not sure how to delete Antivirus System Pro Alert files? Click here, and I’ll show you. Otherwise, go ahead and…
Block Antivirus System Pro Alert sites:
Delete Antivirus System Pro Alert files:
%ProgramFiles%\Antivirus System PRO\Antivirussystempro.exe
%ProgramFiles%\Antivirus System PRO\uninstall.exe
c:\WINDOWS\system32\iehelper.dll
%ProgramFiles%\Antivirus System PRO\
%ProgramFiles%\Antivirus System PRO\conf.cfg
%ProgramFiles%\Antivirus System PRO\mbase.vdb
%ProgramFiles%\Antivirus System PRO\quarantine.vdb
%ProgramFiles%\Antivirus System PRO\queue.vdb
Remove Antivirus System Pro Alert registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad “ieModule”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus System PRO”
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”
Note: In any Antivirus System Pro Alert files I mention above, “%UserProfile%” is a variable referring to your current user’s profile folder. If you’re using Windows NT/2000/XP, by default this is “C:\Documents and Settings\[CURRENT USER]” (e.g., “C:\Documents and Settings\JoeSmith”). If you have any questions about manual Antivirus System Pro Alert removal, go ahead and leave a comment.
How Do You Remove Antivirus System Pro Alert Files?
Need help figuring out how to delete Antivirus System Pro Alert files? While there’s some risk involved, and you should only manually remove Antivirus System Pro Alert files if you’re comfortable editing your system, you’ll find it’s fairly easy to delete Antivirus System Pro Alert files in Windows.
How to delete Antivirus System Pro Alert files in Windows XP and Vista:
- Click your Windows Start menu, and then click “Search.”
- A speech bubble will pop up asking you, “What do you want to search for?” Click “All files and folders.”
- Type a Antivirus System Pro Alert file in the search box, and select “Local Hard Drives.”
- Click “Search.” Once the file is found, delete it.
How to stop Antivirus System Pro Alert processes:
- Click the Start menu, select Run.
- Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC.
- Click Processes tab, and find Antivirus System Pro Alert processes.
- Once you’ve found the Antivirus System Pro Alert processes, right-click them and select “End Process” to kill Antivirus System Pro Alert.
How to remove Antivirus System Pro Alert registry keys:
Because your registry is such a key piece of your Windows system, you should always backup your registry before you edit it. Editing your registry can be intimidating if you’re not a computer expert, and when you change or a delete a critical registry key or value, there’s a chance you may need to reinstall your entire system. Make sure your backup your registry before editing it.
- Select your Windows menu “Start,” and click “Run.” An “Open” field will appear. Type “regedit” and click “OK” to open up your Registry Editor.
- Registry Editor will open as a window with two panes. The left side Registry Editor’s window lets you select various registry keys, and the right side displays the registry values of the registry key you select.
- To find a registry key, such as any Antivirus System Pro Alert registry keys, select “Edit,” then select “Find,” and in the search bar type any of Antivirus System Pro Alert’s registry keys.
- As soon as Antivirus System Pro Alert registry key appears, you can delete the Antivirus System Pro Alert registry key by right-clicking it and selecting “Modify,” then clicking “Delete.”
How to delete Antivirus System Pro Alert DLL files:
- First locate Antivirus System Pro Alert DLL files you want to delete. Open your Windows Start menu, then click “Run.” Type “cmd” in Run, and click “OK.”
- To change your current directory, type “cd” in the command box, press your “Space” key, and enter the full directory where the Antivirus System Pro Alert DLL file is located. If you’re not sure if the Antivirus System Pro Alert DLL file is located in a particular directory, enter “dir” in the command box to display a directory’s contents. To go one directory back, enter “cd ..” in the command box and press “Enter.”
- When you’ve located the Antivirus System Pro Alert DLL file you want to remove, type “regsvr32 /u SampleDLLName.dll” (e.g., “regsvr32 /u jl27script.dll”) and press your “Enter” key.
That’s it. If you want to restore any Antivirus System Pro Alert DLL file you removed, type “regsvr32 DLLJustDeleted.dll” (e.g., “regsvr32 jl27script.dll”) into your command box, and press your “Enter” key.
Did Antivirus System Pro Alert change your homepage?
- Click Windows Start menu > Control Panel > Internet Options.
- Under Home Page, select the General > Use Default.
- Type in the URL you want as your home page (e.g., “http://www.homepage.com”).
- Select Apply > OK.
- You’ll want to open a fresh web page and make sure that your new default home page pops up.
Antivirus System Pro Alert Removal Tip
Is your computer acting funny after deleting any Antivirus System Pro Alert files? I recommend using a program like File Recover from PC Tools. File Recover saves deleted files that otherwise can’t be recovered by Windows operating sytem.
Want to save time finding Antivirus System Pro Alert files? Download Spyware Doctor, let it find the Antivirus System Pro Alert files for you, and then manually delete Antivirus System Pro Alert files.
How Did You Get Antivirus System Pro Alert?
Wondering how Antivirus System Pro Alert ended up on your PC? If you’re infected with Antivirus System Pro Alert or other badware, perhaps you were using…
- Freeware or shareware: Did you download and install shareware or freeware? These low-cost or free software applications may come bundled with spyware, adware, or programs like Antivirus System Pro Alert. Sometimes adware is attached to the free software to “pay” developers for the cost of creating the software, and more often spyware is secretly attached to free software to harm your computer and steal your personal and financial information.
- Peer-to-peer software: Do you use a peer-to-peer (P2P) program or other application with a shared network? When you use these applications, you put your system at risk for unknowingly downloading an infected file, including applications like Antivirus System Pro Alert.
- Questionable websites: Did you visit a website that’s of questionable nature? When you visit malicious sites that are fishy and phishy, badware may be automatically downloaded and installed onto your computer, sometimes including applications like Antivirus System Pro Alert. I recommend you use Firefox web browser, if you don’t already.
Understanding Antivirus System Pro Alert
If you’re infected with Antivirus System Pro Alert, you should know what you’re fighting. I’ll explain some definitions related to Antivirus System Pro Alert.
Antivirus System Pro Alert May Be Rogue Anti-Spyware
Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value. Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application. Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes. While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself.
Often when you’re infected with rogue anti-spyware like Antivirus System Pro Alert, you’ll see a false popup security alert like this:

Rogue Anti-Spyware Tactics
Typically, rogue anti-spyware such as Antivirus System Pro Alert has one or more of the qualities listed below, which is why rogue anti-spyware is considered anti-spyware software of questionable value.
- False positives/fake alerts: Rogue anti-spyware may produce a large number of false positives or use fake alerts, noting that your computer is infected with spyware parasites or other threats that do not really exist.
- Copycat looks: Rogue anti-spyware may copy the look and feel of other legitimate or rogue anti-spyware applications. Often, rogue anti-spyware applications may appear as close clones of other rogue anti-spyware software.
- High pressure marketing: Rogue anti-spyware may use scare tactics or other aggressive advertising and marketing tactics to try to trick you into buying the rogue anti-spyware application. Often, rogue anti-spyware may produce false positives and fake alerts about your computer being infected.
- Poor detection/scan reporting: Rogue anti-spyware may produce poor reports when it scans your PC. For example, rogue anti-spyware may say your computer is infected 11 parasites, but not specify which spyware parasites or what type of parasites. Rogue anti-spyware may also report that your PC is infected with SafeAndClean, but not tell you which related files, DLLS, etc. were found on your computer.
- Weak scanning/detection: Rogue anti-spyware may not only poorly report on computer infection, but rogue antispyware may also poorly scan your PC. Rogue anti-spyware may skip over important folders and files of your computer that should be scanned to detect spyware.
Did Antivirus System Pro Alert use these tactics to trick you into buying Antivirus System Pro Alert?

Traduzca al Español
Übersetzen Sie zum Deutsch
Traduisez au Français
Traduca ad Italiano
Vertaal aan het Nederlands
Μεταφράστε στα ελληνικά
Översätta till Svensk
ترجمة الى العربية
中文翻译
한국어에게 번역하십시오
日本語に翻訳しなさい
Traduza ao Português
Переведите к русскому
You could try a system restore, but I would think that the virus would be restored as well, since a restore deletes then rewrites the files. It would re write the virus back on to your hard drive.If you right click the Antivirus System PRO icon in the taskbar, then click properties. It should give you a directory. It will be a rather long directory, so left click it and scroll down to obtain the complete directory. Make sure you write it down, then try to reboot to Safe Mode and delete it. This should kill it, but it will still be on your pc, just not active. Restart your computer and delete the \system32\iehelper.dll file. This should completely remove it. After that, run Malwarebytes to clean up your registry. Problem should be fixed.
hello all. I had that crapware program on my pc, but was able to disable it, then kill it. First thing I did was stopped the process in the Taskmanager. access that by pressing CNTRL+ALT+DEL. Click the processes tab and locate the Antivirus System PRO process. The actual name may vary from pc to pc. After clicking it, click stop. The second step is to run Malwarebytes. Do a complete scan. Once it is complete, quarantine the files or delete them all together. Restart your pc and you should be good to go. Hope this helps.
IMPORTANT: They keep on changing the main file name.
Now the main file name has changed to VBAUSYSGUARD.EXE. Delete this after stopping in the task manger and should be fine.
none of this is working for me, the pc internet address bar is disabled as is the taskmgr and regedit functions. Their are no Antivirus system files using that name but its the same as you show on this page.
Love it, I will help you find the little buggers and I will hold them while you kick the snot out of them…lol!!
so i found it on task manager under the name of CKULSYSGUARD.EXE and it showed up when I searched as well but I cannot delete it! It says Access Denied! and to make sure disk is not full or write-protected and that the file is not currently in use. How do I fix that?
so i have a big problem trying to take this off, i would download stuff to get it off but i cant b/c im not the system says im not the administrator but no one knows what the admin username or password is. so i tried to do it maually but nothing shows up when i search and antivirus isnt in taskmanager and neither is the other one syssguard. someone help me please, my dad is going to be be so mad at me! :(
Don’t download any Spyware DRs Don’t go to a puter shop and be charged 150.00 to get screwed .Go to ..PROGRAMS..then ACCESSORIES….SYSTEMS TOOLS… and SYSTEM RESTORE…then highlight a CALENDER date before this crap came on to your computer and click on that date…it will default back to the way your computer was at that time..
Don’t download any Spyware DRs Don’t go to a puter shop and be charged 150.00 to get screwed .Go to ..PROGRAMS..then ACCESSORIES….SYSTEMS TOOLS… and SYSTEM RESTORE…then highlight a CALENDER date before this crap came on to your computer and click on that date…it will default back to the way your computer was at that time..
This stinkin’ program blocked every attempt I made to delete the sysguard.exe program, even kept closing down my task manager. I finally had a brainstorm and restored the PC to a previous time when I knew we didn’t have this problem, and voila! the program is gone and PC working well.
I’ve got vista but when I click my start menu I have no “search” thing. This thing is driving me crazy. Wouldn’t it be easier and more satisfying to hunt these little brats down and beat them repeatedly?
so where is the antivirus system pro folder that it says we need to go delete things from, when i search it doesnt appear on my search bar :(
The bad Antivirus System Pro file is now called syssguard.exe. I deleted and everything is now running fine.
please help… i cant stop antivirus system pro alert..help me
I can not delete the files per “Access is denied”…..? HELP!!!!!!!!!!!!
Thanks so much for this walk through. So far the annoying virus popups have ceased(knock on wood) and I have only done some of the steps. You are a life and nerve saver. Hugs