Pinterest Stumbleupon Whatsapp
Ads by Google

antivirus system pro removalYou might wonder why we have an entire article on how to remove an antivirus software app. First off, be warned that Antivirus System Pro is not an antivirus software app at all. It is just a cleverly named malware that masquerades as antivirus software, tricking you into installing and then running the malware program. The ultimate goal is to disable certain functionalities on your computer, forcing you to buy Antivirus System Pro in order to restore back all functionality. Cheap!

What’s worse is the fact that you cannot just uninstall Antivirus System Pro. It difficult to know at first how you should go about performing an Antivirus System Pro removal, however there are a few things you can do to make your job easier to remove Antivirus System Pro completely from your computer.


Let’s first look at the easier, automated way (which doesn’t always work). You can try one of the genuine malware removal software. MalwareBytes Stop & Delete Spyware With Malwarebytes for Windows Stop & Delete Spyware With Malwarebytes for Windows Read More is an excellent option. You don’t have to do much except install and run these software. These are potent enough to detect Antivirus System Pro and remove it from the computer.

If on the other hand you don’t have these installed or cannot download them for some reason, then you can still perform an Antivirus System Pro removal manually. In fact most of the time you can remove the virus infections manually as well.  Most viruses and rogue software like these target a particular area of the registry, create processes that run in the background and don’t allow you to install other antivirus software or remove any components of the rogue software. So one of the first steps in removing Antivirus System Pro from your computer is to stop the processes it creates.

It is best if you perform the following steps when your computer is operating in safe mode. You can select safe mode by pressing the F8 or F10 key just before the operating system is about to start. Once in safe mode open up the Task Manager, head over to the processes tab and end any of the following processes if you see them listed:

  • antivirussystempro.exe
  • uninstall.exe
  • antivirsystempro.exe
  • sysguard.exe

antivirus system pro removal

Ads by Google

You can also use rkill, which is a fantastic little utility that can detect and terminate a number of malware processes automatically.

Next up its time to delete files that Antivirus System Pro created when it made a home on your computer. Keep in mind that some of these files may be locked by the application and may not be possible to simply delete them. You can use Unlocker Untangle your computer with Unlocker Untangle your computer with Unlocker Read More to remove such files or folders. Also you might need to run the command “regsvr32 /u iehelper.dll” before you can delete that file.

antivirus system pro removal

  • Program Files\Antivirus System PRO\quarantine.vdb
  • Program files\Antivirus System PRO\queue.vdb
  • Program files\Antivirus System PRO\mbase.vdb
  • Program files\Antivirus System PRO\conf.cfg
  • Program files\Antivirus System PRO\uninstall.exe
  • Program files\Antivirus System PRO\Antivirussystempro.exe
  • Program files\Antivirus System PRO\
  • WINDOWS\sysguard.exe
  • WINDOWS\system32\iehelper.dll
  • Documents and Settings\<User>\<some_characters_here>\XXXXsysguard.exe

Finally, you need to dive in deep and delete some values from the registry. To do so, open up the run dialog box by pressing the key combination Win + R and then type in regedit. This will open the registry editor.

You will see HKEY_CLASSES_ROOT, HKEY_CURRENT_USER, HKEY_LOCAL_MACHINE, HKEY_USERS listed in the left side pane. These are the trees which contain values created by various software and the operating system to run properly. Antivirus System Pro also makes certain entries to the registry, which should be deleted for complete removal. The entries are listed below:

antivirus system pro

  • HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus System PRO”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad “ieModule”
  • HKEY_CURRENT_USER\Software\AvScan
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “system tool”
  • HKEY_CLASSES_ROOT\CLSID\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BAD4551D-9B24-42cb-9BCD-818CA2DA7B63}

This should remove all traces of Antivirus System Pro from your computer and normal working of the computer should resume. You should restart your computer before using it for work again. Keep in mind that these are dangerous waters we have just been through. Always exercise caution and have your installation or recovery disc handy, in case things go bad.

Have you ever fallen victim to such rogue software?  If so, how did you get rid of it?

  1. Cecil
    May 28, 2010 at 9:47 pm

    I was a system analyst for over 20 years, starting with turbo dos and CPM, and finally was seduced by the dark side and went over to the Mac. No such thing as Antivirus System Pro (as Darth Vader would say "The force is strong with this one.), Malware, etc.! Long live Darth Vader.

  2. dave Allen
    May 23, 2010 at 9:45 am

    This has been the most common issue in my store and I have seen that removal is different for each depending on what was already loaded. If you get ir be patient and work through thebexcellent adice here.

  3. Ria Z
    May 23, 2010 at 1:40 am

    Thanks again for making a huge headache an easy fix! My question is about one of the programs referenced- unlocker. I clicked on the link and read the article about it thinking it sounded pretty good, when I went to go over to the actual unlocker site to download it, my computer is telling me the site is not safe.

    Now I know I can't always believe Windows telling me things aren't safe, but the linked article was over 4 years old, so I figured I was safer asking if anyone knows of any dangers lurking out at the unlocker website.

    Thanks in advance for the assistance!

  4. Ria Z
    May 22, 2010 at 11:40 pm

    Thanks again for making a huge headache an easy fix! My question is about one of the programs referenced- unlocker. I clicked on the link and read the article about it thinking it sounded pretty good, when I went to go over to the actual unlocker site to download it, my computer is telling me the site is not safe.

    Now I know I can't always believe Windows telling me things aren't safe, but the linked article was over 4 years old, so I figured I was safer asking if anyone knows of any dangers lurking out at the unlocker website.

    Thanks in advance for the assistance!

    • Bryan
      May 23, 2010 at 5:33 pm

      the official website for Unlocker is: http://ccollomb.free.fr/unlocker/
      It's clean and the program is perfect, I've used it for years.

  5. Reboc43
    May 22, 2010 at 9:45 pm

    Malwarebytes solved this problem for me on several friend's computers.
    Burying these people up to their necks in sand and pouring honey over them would be too kind.

  6. Reboc43
    May 22, 2010 at 7:45 pm

    Malwarebytes solved this problem for me on several friend's computers.
    Burying these people up to their necks in sand and pouring honey over them would be too kind.

  7. Renz M.
    May 21, 2010 at 10:53 pm

    I am in IT support for a very large organization (40,000+ PC's and 135,000+ users) and I have to deal with these little monsters from time to time.

    At home, I run regular backups (hear me, people???) and use quality AV/malware software. Some of the best stuff out there is absolutely FREE. Any of you still using N0rt0n or M@cafee...your day is coming.

    Anyone dealing with this infestation has three choices: format and start over, clean, or restore from a recent backup. I never like to format unless I have to. The price of external drives is very low, so no more excuses for not doing backups. If you're not sure how to setup backups, call the friend or neighbor with the geeky kid and buy him a pizza...they usually work for food. I still do.

    There is hope, don't panic and know that most of the prevalent nasties out there today do not destroy your personal files.

  8. Renz M.
    May 21, 2010 at 8:53 pm

    I am in IT support for a very large organization (40,000+ PC's and 135,000+ users) and I have to deal with these little monsters from time to time.

    At home, I run regular backups (hear me, people???) and use quality AV/malware software. Some of the best stuff out there is absolutely FREE. Any of you still using N0rt0n or M@cafee...your day is coming.

    Anyone dealing with this infestation has three choices: format and start over, clean, or restore from a recent backup. I never like to format unless I have to. The price of external drives is very low, so no more excuses for not doing backups. If you're not sure how to setup backups, call the friend or neighbor with the geeky kid and buy him a pizza...they usually work for food. I still do.

    There is hope, don't panic and know that most of the prevalent nasties out there today do not destroy your personal files.

  9. bobdeloyd
    May 21, 2010 at 8:04 pm

    PS: the system restore has never worked for me to remove this program on XP.

  10. bobdeloyd
    May 21, 2010 at 8:00 pm

    Best way I think is to go into safe mode, remove all your data files, format the hard drive and do a fresh install. That way you make sure it's gone and it's a lot faster than going through all this because Antivirus System Pro changes all the time to bypass these "fixes". Believe me I've done this many many times on other folks computers for many many years.

  11. Anthony
    May 21, 2010 at 9:22 pm

    I've dealt with this malware twice now on different computers.

    I ran Malware Bytes, NOD32 antivirus, Super Antispyware, RKill and HiJackThis. All said they cleaned it but that didn't work and wasted a whole day of my time. It kept coming back after a reboot. The first time I reformatted my computer and did a fresh install.

    The second time, I read a bunch of posts and found out ALL YOU HAVE TO DO IS RESTORE A FEW DAYS BACK.

    It takes 5 min of your time and somehow completely removes it. No need to sit around while all these scan run

  12. Anthony
    May 21, 2010 at 7:22 pm

    I've dealt with this malware twice now on different computers.

    I ran Malware Bytes, NOD32 antivirus, Super Antispyware, RKill and HiJackThis. All said they cleaned it but that didn't work and wasted a whole day of my time. It kept coming back after a reboot. The first time I reformatted my computer and did a fresh install.

    The second time, I read a bunch of posts and found out ALL YOU HAVE TO DO IS RESTORE A FEW DAYS BACK.

    It takes 5 min of your time and somehow completely removes it. No need to sit around while all these scan run

  13. WendyElf
    May 16, 2010 at 1:47 pm

    p.s can you please get your article about monsterpro added as a link onto the Wikipedia info page about it - it might help someone else out there, in the land of the scared and confused....:)

    • Mark O'Neill
      May 16, 2010 at 6:39 pm

      That's a great idea Wendy. We'll definately look into doing that.

  14. WendyElf
    May 16, 2010 at 1:21 pm

    This is a NASTY horriblemeanboooospit malware monster. It got into my computer last week (via my daughter who was on the computer at the time, downloading stuff)...Have never had anything quite so vicious before. My first inkling something was amiss was when she shot off the chair and said 'erhm, let me just go get Taylan' (computer whizz brother).This malware wouldn't let me open anything at all to combat it, like MalwareBytes, or anything else to get rid of it....just spat out warnings that I was infected and trying to force me to buy it. Luckily, my computer savvy son (who runs Linux himself), came to the study to stop me screaming and having a fit, as by this time the systempro monster was also putting up random porn sites on my screen. Eeeeeeeeeee. He went into safe mode, we backed up all my stuff onto external hard drive, and reformatted computer. Took me a day to get the computer back to the way I like it, and all my programmes reinstalled. Thank god for Febe too, which you guys told me about). Unfortunately I also like to change all my icons throughout my system, a lot of them icons I made myself, and that took me forever to change back (tho' I do use Icon Packager for some). He did say he could have spent a long time doing something very much like you described in your article above (too complicated for simple me), but was worried traces of it might be left behind.I HATE this malware item - and even felt vaguely sick just seeing your screenshot of it. If anyone who has anything to do with creating this monster reads this, then, I say to them with a smile on my face and a gentle hand on their shoulder 'may you swallow your own tongue and die'.Hahahah - feel much better now! Thank you makeuseof.com - for a)the therapy session b)for exposing all that is good and wonderful about the land of the geeky, and c)for helping me sometimes sound like I know about computers..... :)

    Updated: just been talking to computer son who told me a story about the days when he worked in PCWorld - a woman came into the shop with this on her laptop. She HAD fallen for the scam, and paid for the antivirus system pro. It still told her she had viruses on her system....(The reason she had brought it in to be fixed). He immediately told her to contact her bank - she did... £800 had been stolen from her account. So not only does monsterpro mess up your computer, if you DO pay, you are risking losing a lot more than just your time sorting it out...... He also told me, after reading your article, that yes, you can do all the clearing steps above you mentioned, but sometimes it actually lays some baby monsters within your system before you irradicate it. (Echoes of Alien here.... )

  15. AHMED
    May 16, 2010 at 12:11 pm

    I NEED TO KNOW HOW TO USED FACE BOOK WEBSITE COMPLIANTLY SIMPLE WAY & EASY PLEASE &HOW TO MAKE SATING WITH OTHER PEOPLE
    THANK YOU VERY MUCH

  16. venkat
    May 16, 2010 at 9:52 am

    MBAM does great job in removing rouge antivirus softwares and spywares and that too it is freeware must have security application for all PC users.

  17. Edward
    May 16, 2010 at 3:08 am

    Even after completing all these steps, it's best to do a full scan with something like MalwareBytes or SuperAntiSpyware. AVPro and it's related programs usually come with other malware items.

Leave a Reply

Your email address will not be published. Required fields are marked *