Thursday, June 24, 2010

Green AV Security Suite Removal GuideGreen AV Security Suite Removal Guide

Green AV Security Suite Removal Guide
Green AV Security Suite is a fake antivirus program that use fake scan result to trick the user to buy the full version of Green AV Security Suite. It infect the computers by using trojans, spam emails or affiliated websites. Green AV Security Suite install into the computer without confirmation of the user unless the user set the UAC level to the highest level.

Green AV Security Suite make the system slow down. It may hijack web browser and block regular antispyware and antivirus applications. Green AV Security Suite always demand the users to pay for the “licensed version”.

Green AV Security Suite should be removed immediately!


Green AV Security Suite Removal Guide
Kill Process
(How to kill a process effectively?)
[random characters].exe
[random characters]tssd.exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" ="1"
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft
HKEY_CURRENT_USER\Software\avsuite
HKEY_CURRENT_USER\Software\avsoft
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random characters]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random characters]"
HKEY_CURRENT_USER\Software\AvScan

Remove Folders and Files
%Documents and Settings%\[UserName]\Local Settings\Application Data\[random characters ]\[random characters].exe
%Documents and Settings%\[UserName]\Local Settings\Application Data\[random characters ]\[random characters]tssd.exe

No comments:

Post a Comment