Step by step procedure to remove Antivirfox.com hijacker

[EricTheRed]

Antivirfox.com is the "official" website of Antivir Solution Pro, one of the bogus security application targeted for money making scheme. Antivirfox.com disguises itself from the user and ask them to perform some activity in order to spread infection. It does so with its Antivir Solution Pro program. It produces a lot of alerts and fake security scanners with one purpose to trick you into buying the software.

The major infections starts onto your computer when you click on its scan result in order to remove the malware from your computer. But the truth is that its all scam and there is no infections on your computer. Obviously, you should not trust neither the antivirfox.com website nor its affiliate Antivir Solution Pro program.

If by chance your computer is infected with Antivirfox.com and you want to remove this fake program from your computer then perform the following:

1. Delete "%Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe" file.

2. Delete the below registries:

• HKEY_CURRENT_USER\Software\AvSuite
  
• HKEY_CURRENT_USER\Software\AVSolution
  
• HKEY_LOCAL_MACHINE\Software\AvSuite
  
• HKEY_LOCAL_MACHINE\SOFTWARE\AVSolution
  
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
  
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” =”1″
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “{local}”
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5643″
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = “1″
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random string]“
  
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random string]“

[EricTheRed]

If you are not sure about what you are doing, then it is recommended to take the back of your Windows Registry. The above steps to remove Antivirfox.com program should be done at your own risk.

How to Backup Windows Registry

1. Click Start, click Run, type "%SystemRoot%\system32\restore\rstrui.exe", and then click OK.
2. On the "Welcome to System Restore" page, click "Create a restore point", and then click Next .
3. On the "Create a Restore Point page", type a name for the restore point and then click Create
4. After the restore point has been created, click Close.

How to Restore Windows Registry

1. Click Start, click Run, type "%SystemRoot%\System32\Restore\Rstrui.exe", and then click OK.
2. On the "Welcome to System Restore" page, click "Restore my computer to an earlier time (if it is not already selected)", and then click Next .
3. On the "Select a Restore Point" page, click the system checkpoint. In the "On this list select the restore point area", click an entry that is named "Guided Help (Registry Backup)," and then click Next. If a System Restore message appears that lists configuration changes that System Restore will make, click OK.
4. On the "Confirm Restore Point Selection" page, click Next. System Restore restores the previous Windows XP configuration and then restarts the computer.
5. Log on to the computer. When the "System Restore confirmation" page appears, click OK.