Complete AntiVir Solution Pro Removal Guide

Complete AntiVir Solution Pro Removal Guide
Page content

AntiVir Personal Edition and AntiVir Solution Pro

**

Avira AntiVir Personal Edition is a legitimate and free antivirus software for Windows and Linux operating systems. You can use AntiVir Free to scan and remove malware or rogue programs and you don’t have to pay to use or update the antivirus protection by Avira. You only need to make sure that you are using the legitimate or non-rogue AntiVir software like AntiVir Solution Pro.

AntiVir Solution Pro is a fake antivirus program that will not provide protection and correct detections for threats. The program will run a quick scan in Windows and will provide a list of non-existing threats in the system. It will also display a warning message to scare Internet users. AntiVir Solution Pro is distributed via exploits in programs such as Internet Explorer, Java, Flash Player and other widely-used applications. The only purpose of scammers is to steal money and the identity of people by infecting their computer with a rogue program like AntiVir Solution Pro, which can mislead users into thinking that there are viruses or security threats on the PC. The rogue program will prompt the user to register first and then proceed in removing fake threats. If you provide your credit card number and personal information, you’re just handing over your money and identity to scammers that will never help you and can’t be contacted. AntiVir Solution Pro exploits the good name of Avira AntiVir Free edition, just like other rogue programs. See Free Anti-Spyware Programs: Threats in Disguise.

Removing AntiVir Solution Pro

Fake Security Warning by AntiVir Solution Pro

The process of AntiVir Solution Pro removal is easy as long as you can boot the computer to normal or safe mode. If you try to open a scanner by Malwarebytes, EmsiSoft, Ad-Aware, Spybot, Windows Defender or SUPERAntiSpyware, and you received a security warning that says “Application cannot be executed. The file mbam.exe is infected. Do you want to activate your antivirus now?,” don’t click Yes and instead click the NO option.

What you should do is boot the computer to Safe Mode with Networking and login to Windows using the user account with Administrative permission. After booting the computer to safe mode proceed by using the steps below:

Open your browser to check the Internet Connection settings: Tools > Internet Options > Connections tab > LAN Settings > Uncheck the box before “Use a proxy server for your LAN”. Click OK to apply the changes.

Download and install the anti-malware program or if it’s already installed, you can open it to update the detection signature. Start scanning the computer to remove AntiVir Solution Pro, rogue software. If you are prompted to reboot, do it immediately. Let the computer boot normally (not in safe mode). Proceed to scan the computer again while in normal mode to verify that traces of AntiVir Solution Pro have been removed.

The images below are scanners that succeed in detecting and removing AntiVir Solution Pro in safe mode.

Anti-Malware Programs Detect and Remove AntiVir Solution Pro

Ad-Aware Safe Mode scan

Malwarebytes Safe Mode Scan

SUPERAntiSpyware Safe Mode scan

Spybot - S&D Safe Mode Scan

Windows Defender Safe Mode Scan

Manual AntiVir Solution Pro Removal

You can also remove AntiVir Solution Pro using a manual removal method. Boot the computer to safe mode and locate the following files,

AntiVir Solution Pro file always have tssd.exe as last 4 letters in a filename

folder or registry keys in Windows. Note that the processes, files or folders added by AntiVir Solution may vary, but the last 4 letter characters always end with TSSD.EXE.

  • C:\DOCUMENTS AND SETTINGS\{YOUR USERNAME}\LOCAL SETTINGS\APPLICATION DATA\{RANDOM FOLDER NAME e.g. XKSKEYKSW}\**{RANDOM CHARACTERS HERE}**TSSD.EXE
  • HKEY_CURRENT_USER\Software\SolutionAV
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\yukrwqsx
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\yukrwqsx

Verify the Internet connection setting is not modified by AntiVir Solution Pro by ensuring the proxy server for LAN is not checked.

Web Searches for AntiVir Solution Pro May Infect Your PC

Please be very careful in using any search engine to find information on how to remove viruses, malware or rogue programs. Scammers will do anything to infect or collect money from unsuspecting users. Below is example of a Google web search for AntiVir Solution Pro:

AntiVir Solution Pro Search Results in Google

Clicking on a YouTube video clip (see Phishing YouTube) to remove AntiVir Solution Pro will only redirect the browser to a fake antivirus scanner page:

Fake YouTube Page

Fake AV Scanner Page

The fake AV scanner web page will offer downloading software which is a rogue program installer.

Rogue installer download

At the time of this writing, not many antivirus or anti-malware programs have detected the provided malware or rogue installer by the scammers (see VirusTotal scan result here or Jotti virus scan results)

VirusTotal Scan result

Image credit: Screenshots provided by the author.