How to Remove AVASoft Antivirus Professional Fake Anti-spyware (Rogueware Removal Guide)

This forum is committed to providing guides to remove spyware, adware, trojans, worms, and other forms of malware.

How to Remove AVASoft Antivirus Professional Fake Anti-spyware (Rogueware Removal Guide)

Postby Sophia » 2013-03-19 22:48

AVASoft Antivirus Professional sneaks into your computer and reports you of many alerts on your computer system issues? Don’t be tricked by this fake antivirus program and learn more in this post to figure it out and follow the detailed removal instructions to get rid of this rogueware infection completely. Read more.

AVASoft Antivirus Professional is a computer virus, categorized as rogueware or fake anti-spyware from the malware family Rogue.WinWebSec, which pretends to be a legitimate security program and claims that malware has been detected on your computer.

If you try to remove these infections, AVASoft Antivirus Professional will state that you need to buy its “full version” before being able to do so.


AVASoft Antivirus Professional targets users browsing Internet websites, and rely on social engineering to deliver its payload.

On infected or hacked websites users are prompted by a pop-up window that has been carefully crafted to resemble a legitimate security warning. These pop-up windows typically alert a user of a computer infection, and then prompt the user to download and install AVASoft Antivirus Professional to resolve the apparent issue.

Some of the infections may have come from users downloading an infected codec file when they were trying to watch a video online, or users who receive a spam email and open an infected email attachment.

Once installed, AVASoft Antivirus Professional will display fake security alerts that are designed to think that your data is at risk or that your computer is severely infected.These messages include:

Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk.
To get rid of unwanted spyware and keep your computer safe your need to update your current security software.
Click Yes to download official intrusion detection system (IDS software).

AVASoft Antivirus Professional Warning
Your PC is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details.

AVASoft Antivirus Professional Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with AVASoft Antivirus Professional.

In reality, none of the reported issues are real, and are only used to scare you into buying AVASoft Antivirus Professional and stealing your personal financial information.

As part of its self-defense mechanism, AVASoft Antivirus Professional has disabled the Windows system utilities, including the Windows Task Manager and Registry Editor, and will block you from running certain programs that could lead to its removal.

This rogue antivirus has also modified your Windows files associations, and now whenever you are trying to open a program, AVASoft Antivirus Professional will block this operation and display a bogus notification in which will report that the file is infected.

Application cannot be executed. The file taskmgr.exe infected.
Please activate your antivirus software.

AVASoft Antivirus Professional will also hijack your web browser so that it displays a security warnings when attempt to visit a site. The text of this warning is:

Warning! The site you are trying visit may harm your computer!
Your security setting level puts your computer at risk!
Activate AVASoft Antivirus Professional, and enable safe web surfing (recommended).
Ignore warnings and visit that site in the current stat (not recommended).

When you see this message you can safely click on the Ignore warnings and visit that site in the current state (not recommended) link so that you can visit the site you are trying to go to.

If your computer is infected with AVASoft Antivirus Professional virus, then you are seeing the following screens:

        AVASoft-Antivirus-Professional (1).jpg



AVASoft Antivirus Professional is a scam, and you should ignore any alerts that this malicious software might generate.

Under no circumstance should you buy this rogue security software as this could lead to identity theft, and if you have, you should contact your bank and dispute the charge stating that the program is a scam and a computer virus.

Be aware of Similar Roguware Infections from the same rogue family: Security Shield, Disk Antivirus Professional, Live Security Platinum, System Progressive Protection, etc.

Registration codes for AVASoft Antivirus Professional

As an optional step,you can use any of the following license keys to register AVASoft Antivirus Professional and stop the fake alerts.
AVASoft Antivirus Professional activation code: AA39754E-715219CE

Please keep in mind that entering the above registration code will NOT remove AVASoft Antivirus Professional from your computer, instead it will just stop the fake alerts so that you’ll be able to complete our removal guide more easily.

How to Remove AVASoft Antivirus Professional Rogue (Removal Instructions)

AVASoft Antivirus Professional Rogue Remover: Anvi Smart Defender antimalware (direct download link:

If you were unable to download the recommended antimalware- Before downloading, enter a retrieved license key in registration window of AVASoft Antivirus Professional. Click "registration" button at the top of the main window of this fake antivirus software and enter this key:


Notice that entering the registration key will not remove the infection, but will make the removal process less complicated - Disk Antivirus Professional will stop generating fake security warning messages and will allow execution of installed software.

AVASoft Antivirus Professional removal using Safe Mode with Networking:

    Step 1. Reboot your computer into Safe Mode with Networking. To do this, turn your computer off and then back on and immediately when you see anything on the screen, start tapping the F8 key on your keyboard. Eventually you will be brought to a menu similar to the one below:


    Using the arrow keys on your keyboard, select Safe Mode with Networking and press Enter on your keyboard. If you are having trouble entering safe mode, then please use the following tutorial: How to start Windows in Safe Mode

    Windows will now boot into safe mode with networking and prompt you to login as a user. Please login as the same user you logged in within the normal Windows mode. Then proceed with the rest of the steps.

    Step 2> Download AVASoft Antivirus Professional rogue killer to remove the infection

    Anvisoft team has developed a special removal tool to kill AVASoft Antivirus Professional. Click here to download for free to help remove this malware.

    Please ignore the possible fake alert ‘Warning! The site you are trying to visit may harm your computer!’ popped up by AVASoft Antivirus Professional during the download. After downloading, please rename the file: avasoft-antivirus-professional-rogue-killer.exe as explorer.exe, in case the malware blocks it from running. Then double click on the file and the core files of this nasty infection will be killed and removed in a second. Below is a screenshot of this Rogue Killer after its killing work got successfully done.


    Step 3> After the killing, please download, install the highly recommended malware remover-Anvi Smart Defender to scan out and remove the left files of the infection as well as other potential related malware infections so as to ensure the computer is clean completely.

    Anvi Smart Defender is powerful to detect and remove malware of all sorts. You can click below download link to download Anvi Smart Defender directly, and then double click on the program file to install this program.

    Anvi Smart Defender download link:

    Network Connection Troubleshooting Tips

    AVASoft Antivirus Professional modifies system hosts file. It is used to resolve some canonical names of websites to ip addresses. When it is changed, the user may be redirected to malicious site still seeing good URL in address bar. It is very hard to find out if the site is genuine or not, when hosts file is modified. To fix this, please go to the folder: C:/WINDOWS/system32/drivers/.Then press Ctrl + F, type the "hosts" to the appearing box, press enter. Click files to open it in the form of notepad and make sure there are no discrepancies in the Hosts file compared that as shown in below.

    An instance for Win 7 64-bit users:

        Win7 hosts file.jpg

    Step 4> After you install Anvi Smart Defender, please start it, on the Scan tab, please perform Full Scan to kill the malicious file. It will show you virus detection as below.


    Step 5> After the scan compete, please Click "Repair" or "Removal" button directly to completely remove the malicious file.


    Step 6> You can click on the Detail button to view the malware infections that Anvi Smart Defender detected and removed.


    Step 7> Restart the computer to normal mode and the computer would be all right now.

AVASoft Antivirus Professional removal using a retrieved licence (registration) key:

1. Wait until AVASoft Antivirus Professional rogue antivirus finish its fake security scan and click on the "Registration" button which is located at the top right corner of the main window.

2. In the opened window enter this retrieved registry key: AA39754E-715219CE. This will trick AVASoft Antivirus Professional into believing that you have already payed for it's full version. This step makes the removal process of this rogue antivirus program less complicated, after entering this registry key Disk Antivirus Professional will allow execution of installed software (including Internet browsers) and you will be able to download anti-spyware software without various interruptions.

3. After entering this licence key AVASoft Antivirus Professional will generate a couple of messages thanking you for registration and will imitate the removal process of previously detected malware and virus infections. Notice that after you enter the correct registration key Disk Antivirus Professional will change it's user's interface color to while instead of red.

4. Notice that entering this registration key doesn't remove AVASoft Antivirus Professional from your computer - it makes the removal process less complicated. To completely remove this rogue antivirus from your computer, you are advised to follow the above steps from step 2 to step 7 included in above removal option.

Recommended step > After the virus removal, we highly recommend you clean up the entire computer OS using a system cleaner/optimizer like Cloud System Booster. Rogueware like Disk Antivirus Professional often invades the computer by entering registry entries and modifying the system files. Even after the malware remover helps get rid of it, chances are some invalid registry files or leftovers are still there to drag down the computer running speed or even worse to cause system errors like blue screen of death.

Clear junk files and registry errors in your computer OS with Cloud System Booster now. Click here to learn more.

Tips to Prevent AVASoft Antivirus Professional Virus and Other Malware Infections

You can keep Anvi Smart Defender onto your computer for an extra layer of online security together with your antivirus program. This cloud-based malware scanner can provide you with positive defending strategies with a daily updated database to keep up with the latest online threats.

Also to better secure your online activities, you are supposed to at least turn on the security features of your web browsers. See detailed steps to turn on security features of IE, Firefox and Google Chrome.

What's more, now you can also take all advantages of Anvi AD Blocker to block annoying pop up ads, malicious URLs, phishing websites and even whatever URL you don't want it reappear to your web browser. This can considerably reduce unexpected risks online which can be multiple pop up ads, good-looking risky phishing and various unwanted redirections, etc. By real-timely filtering and blocking risky websites, pop up ads, and even flash ads, Anvi AD Blockeris created to provide you neat solution on ads-related or online surfing related computer threats prevention. Here to download.


By the way, it is worthy to mention that Anvi AD Blocker is integrated in toolbox of Anvi Smart Defender Pro for free use. You can now purchase Anvi Smart Defender pro for enhanced computer protection as well as nice solutions to annoying pop up ads and unexpected redirections to risky malicious websites. Buy it now.

Good luck and be safe online.

Associated Files of AVASoft Antivirus Professional Infection:

Associated AVASoft Professional Antivirus Files:

Code: Select all
%CommonAppData%\<random numbers and chars>\
%CommonAppData%\<random numbers and chars>\<random numbers and chars>
%CommonAppData%\<random numbers and chars>\<random numbers and chars>.exe
%CommonAppData%\<random numbers and chars>\<random numbers and chars>.ico

File Location Notes:
%CommonAppData% refers to the Application Data folder for the All Users Profile. By default, this is C:\Documents and Settings\All Users\Application Data for Windows 2000/XP and C:\ProgramData\ for Windows Vista/7.

%CommonAppData% refers to the Application Data folder in the All Users profile. For Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\All Users\Application Data\, and for Windows Vista/7 it is C:\ProgramData.

Associated AVASoft Professional Antivirus Windows Registry Information:
Code: Select all
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "<random numbers and chars>"
Imagination is more important than Knowledge!
User avatar
Anvisoft Staff

Anvisoft Staff
Posts: 589
Joined: 2012-04-16 3:32

Re: How to Remove AVASoft Antivirus Professional Fake Anti-spyware (Rogueware Removal Guide)

Postby serman007 » 2013-06-17 7:33

I do not say if there are difference or same to remove a different avasoft antivirus, but i find on site a latest version 3.7.30

Press F8 during restart your computer
Choose Start computer in safe mode with network support
• Open the infected user account
• Open explorer, paste %AppData% into the address bar then press enter, it will open C:Documents and SettingspctipstrucsLocal SettingsApplication Data on my computer
• Remove any exe files in this path especially the one which starts with Protector-
• Press the start menu >> run
• Type msconfig and validate it.
• Go to the Startup tab
• Uncheck the Inspector key and all values which point to an .exe file under %AppData%
• Remove any files that refer to AVASoft Professional Antivirus 3.7.30 on your desktop and from the start menu under Programs
Restart your computer in normal mode
You can find also a related articles from

Posts: 2
Joined: 2013-06-17 7:25

Return to Malware Removal Guide

Random Threads
ThreadThread StarterViews
Discovery App Ads and Deals--How to Remove? (Adware Removal Guide)Frances2000
How to Remove Autocomplete Pro Search and Redirect Virus? (Browser Hijacker Removal Guide)Frances2616
Remove Clip Clip Save AdwareFrances1588
How to Remove Win32/Lyposit.B Trojan? (Removal Guide)Autumn3184
Remove Ads by MediaPlay+vid1.1 (Media Player Enhance Adware Removal Guide)Frances2209

Who is online

Users browsing this forum: No registered users