avsystemcare removal
 

Seems I have this annoying adware, it seems very difficult to get rid of. I have tried - windows defender, spybot, adaware, XoftSpySE, Superantispyware, Rogueremover, McaFee, probably a few others.

Anybody know of anything that will get rid of it in a single hit, some of the above claim to but haven't.

I have deleted what I believe to be the offending item that gave me it, I have also turned off system restore, so I guess it's not hiding in there.

I am away for a few days before I can get back on the infected pc, should give you plenty of time to solve this!:eek:

Maybe 'hijack this' will help?

Ye olde nanoseconde of Google search brings up http://www.symantec.com/security_res...222-99&tabid=3

Thanks but don't have Norton's, and have tried manual deletion, but the files it ilsts and registry entries it lists aren't there.:{

Did you try downloading and running the tool from the Symantec page linked above?
I had a google around and this looks a bit stubborn to fix using normal means, here's one result I found where the fix worked, detailing the actions required (for that user).http://www.atribune.org/forums/index.php?showtopic=3198

From today's Sunday Times:

Q Every time I use my computer I get a pop-up for AVSystemcare that tries to get me to buy software. Is there a fix you can recommend? Dr B Terry, via e-mail

A Adware is becoming common and this one probably leapfrogged onto your PC when you clicked on a pop-up. You can use an uninstaller to remove this software (tinyurl.com/28tvjn ) but some other programs of this sort are not as simple to erase, so beware.

http://technology.timesonline.co.uk/...cle2320653.ece

Any help?

Spywareinfo is a very helpful site.
http://forums.spywareinfo.com/index....pic=101207&hl=

My problem was:

In MS Internet Explorer, Google search result websites navigate to a different website from that selected.
Happens twice, then navigates to correct website. Homepage not affected.

Initially had Avant browser getting uncommanded start and filling up with pages showing URL referring to 'bestmanage': with little Ferrari logo on tab. Got rid of the Avant problem by running Superantispyware in safe mode.

Attempted to resolve IE problem as follows:
Ran AVG, Adaware, Spybot, Superantispyware & AVG Antispyware,
Also compared msconfig with Pacman's list (had RunDLL32 - now unchecked) and looked at run in regedit.
Ran Hijack this, checked against BHO list and fixed an unknown BHO. Tried the analyser at: http://www.hijackthis.de/ and fixed some further suggestions.
There are transient references in MS IE to maxifiles and fresh-weather.

IE redirection still occurring.

Downloaded FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/file...Fixwareout.exe

After FixWare my problem seemed to be resolved.
I then:
dbl clicked dnsbak.reg
Ran Kapersky which found about 14 viruses, over 300 infected items and about 60 suspicious items. I presume these were already quarantined.
Ran CCleaner


Really thought I was in for a reformat but it was still a bit of a kerfuffle getting rid of the adware.

Tried everything on here that people have suggested, just d/l and running AVG. Failing that might have to buy Nortons (god I had that) and try that as a last resort.:ouch:

Try visiting this site, they have some extremely advanced techniques for removal of nasties.

http://forums.majorgeeks.com/archive/index.php/

Tried everything and more suggested on here.
I think I have finally gotten rid of it. Been 3 days now since popping up. Had to go out and buy Norton Internet security, seems to be the only thing at the moment that will get rid of it.
I'd been reluctant to have Norton on my pc as in the past it has slowed things and taken over the pc, now (fingers crossed) it seems to be ok.
Hope nobody else gets this as it is a real pain in the rear to get rid of.