Pin Me

AntiVir Solution Pro Removal Guide

written by: Donna Buenaventura•edited by: Jean Scheid•updated: 8/28/2010

Are you looking for an AntiVir Solution Pro removal guide? We have a detailed removal guide for AntiVir Solution Pro which is a rogue program that exploits the name of the legitimate antivirus program by Avira.

  • slide 1 of 5

    AntiVir Personal Edition and AntiVir Solution Pro

    Fake AntiVir Program Avira AntiVir Personal Edition is a legitimate and free antivirus software for Windows and Linux operating systems. You can use AntiVir Free to scan and remove malware or rogue programs and you don't have to pay to use or update the antivirus protection by Avira. You only need to make sure that you are using the legitimate or non-rogue AntiVir software like AntiVir Solution Pro.

    AntiVir Solution Pro is a fake antivirus program that will not provide protection and correct detections for threats. The program will run a quick scan in Windows and will provide a list of non-existing threats in the system. It will also display a warning message to scare Internet users. AntiVir Solution Pro is distributed via exploits in programs such as Internet Explorer, Java, Flash Player and other widely-used applications. The only purpose of scammers is to steal money and the identity of people by infecting their computer with a rogue program like AntiVir Solution Pro, which can mislead users into thinking that there are viruses or security threats on the PC. The rogue program will prompt the user to register first and then proceed in removing fake threats. If you provide your credit card number and personal information, you're just handing over your money and identity to scammers that will never help you and can't be contacted. AntiVir Solution Pro exploits the good name of Avira AntiVir Free edition, just like other rogue programs. See Free Anti-Spyware Programs: Threats in Disguise.

  • slide 2 of 5

    Removing AntiVir Solution Pro

    Fake Security Warning by AntiVir Solution Pro The process of AntiVir Solution Pro removal is easy as long as you can boot the computer to normal or safe mode. If you try to open a scanner by Malwarebytes, EmsiSoft, Ad-Aware, Spybot, Windows Defender or SUPERAntiSpyware, and you received a security warning that says "Application cannot be executed. The file mbam.exe is infected. Do you want to activate your antivirus now?," don't click Yes and instead click the NO option.

    What you should do is boot the computer to Safe Mode with Networking and login to Windows using the user account with Administrative permission. After booting the computer to safe mode proceed by using the steps below:

    Open your browser to check the Internet Connection settings: Tools > Internet Options > Connections tab > LAN Settings > Uncheck the box before "Use a proxy server for your LAN". Click OK to apply the changes.

    Download and install the anti-malware program or if it's already installed, you can open it to update the detection signature. Start scanning the computer to remove AntiVir Solution Pro, rogue software. If you are prompted to reboot, do it immediately. Let the computer boot normally (not in safe mode). Proceed to scan the computer again while in normal mode to verify that traces of AntiVir Solution Pro have been removed.

    The images below are scanners that succeed in detecting and removing AntiVir Solution Pro in safe mode.

  • slide 3 of 5

    Anti-Malware Programs Detect and Remove AntiVir Solution Pro

    Ad-Aware Safe Mode scanMalwarebytes Safe Mode ScanSUPERAntiSpyware Safe Mode scanSpybot - S&D Safe Mode ScanWindows Defender Safe Mode Scan
  • slide 4 of 5

    Manual AntiVir Solution Pro Removal

    You can also remove AntiVir Solution Pro using a manual removal method. Boot the computer to safe mode and locate the following files, AntiVir Solution Pro file always have tssd.exe as last 4 letters in a filename folder or registry keys in Windows. Note that the processes, files or folders added by AntiVir Solution may vary, but the last 4 letter characters always end with TSSD.EXE.

    • HKEY_CURRENT_USER\Software\SolutionAV
    • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\yukrwqsx
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\yukrwqsx

    Verify the Internet connection setting is not modified by AntiVir Solution Pro by ensuring the proxy server for LAN is not checked.

  • slide 5 of 5

    Web Searches for AntiVir Solution Pro May Infect Your PC

    Please be very careful in using any search engine to find information on how to remove viruses, malware or rogue programs. Scammers will do anything to infect or collect money from unsuspecting users. Below is example of a Google web search for AntiVir Solution Pro:AntiVir Solution Pro Search Results in Google 

    Clicking on a YouTube video clip (see Phishing YouTube) to remove AntiVir Solution Pro will only redirect the browser to a fake antivirus scanner page:Fake YouTube Page 

    Fake AV Scanner Page The fake AV scanner web page will offer downloading software which is a rogue program installer.Rogue installer download At the time of this writing, not many antivirus or anti-malware programs have detected the provided malware or rogue installer by the scammers (see VirusTotal scan result here or Jotti virus scan results)VirusTotal Scan result 

    Image credit: Screenshots provided by the author.