Antivirus System Interface



Antivirus System is another rogue anti-spyware application that constantly displays false security alerts and scan results. Once the false security scans are complete, the rogue program prompts the computer user to register it before any of the detected threats can be removed. Antivirus System is spread through compromised websites that display deceptive security related pop ups. It is also spread through the use of trojans that masquerade as video players that are essential for viewing online content. Possible registration code for this scareware: 1O2Z3L4W5I6T7F8Q9C1N2Y3K4V5H6S7E


How To Remove Antivirus System From Your Computer


  1. The removal procedure for this particular scareware isn’t complicated. You will need to download a couple of malicious software removal tools to complete the task. You should be able to download the removal tools on the infected computer by restarting the computer into “Safe Mode with Networking”. And then after logging in, download the needed software by utilizing the links below. The removal tools that you need to download include:













  1. Once you have the two listed  removal tools listed above, execute the copy of “Rkill’ to terminate any hidden malicious processes that are running on your computer.
  2. After “Rkill’ completes, decompress the copy of the Emsisoft Emergency Kit by clicking on it’s executable. Make sure that you extract the kit to an easily accessible location on your computer.
  3. Next, after the kit has been extracted, start it by double clicking on “Start.exe” in it’s newly created folder.
  4. Once the emergency kit starts, click on the “Emergency Kit Scanner”.














Once the security status screen appears, click on “Update Now” to download updated definitions for the emergency kit.

















After you have updated the kit’s definition files perform a deep scan of your computer.

















  1. Once the deep scan is complete, quarantine any malicious files and registry entries that it finds on your computer.
  2. Afterwards restart your computer normally.

At this point your computer should be clear of the Antivirus System infection. If there are still indications of the infection though, you’ll need to utilize one of our more aggressive virus removal guides to resolve your situation, such as our Ice Cyber Crime Center Ransomware removal guide.


Associated Antivirus System files that need to be removed:

%AllUsersProfile%\Desktop\Antivirus System.lnk

%CommonAppData%\pavsdata\

%CommonAppData%\pavsdata\<number>.1.exe

%CommonAppData%\pavsdata\app.ico

%CommonAppData%\pavsdata\cache.bin

%CommonAppData%\pavsdata\support.ico

%CommonAppData%\pavsdata\uninst.ico

%CommonAppData%\pavsdata\vl.bin

%CommonStartMenu%\Programs\Antivirus System\

%CommonStartMenu%\Programs\Antivirus System\Antivirus System Help and Support.lnk

%CommonStartMenu%\Programs\Antivirus System\Antivirus System.lnk

%CommonStartMenu%\Programs\Antivirus System\Remove Antivirus System.lnk


Associated Antivirus System registry entries that should be removed:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\pavsdata

HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = "<random>"

HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = "application/x-m"

HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = "%1"

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = ""%CommonAppData%\pavsdata\<number>.1.exe" /ex "%1" %*"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "avsdsvc" = "%CommonAppData%\pavsdata\<number>.1.exe /min"

HKEY_CLASSES_ROOT\.exe "(Default)" = "<random>"

HKEY_CLASSES_ROOT\.exe "Content Type" = "application/x-m"



Smith Technical Resources makes no guarantees or claims that the information contained in this article will help you completely remove the above listed malicious program(s) from your computer.  There are several variations of each particular virus in the wild . And the procedure listed above may not be adequate for the specific version of the virus that your computer has been compromised by.

If you feel uncomfortable performing any of the procedures that we've listed on this page, please contact a professional computer repair company in your area and have them complete the needed repairs on your computer. Smith Technical Resources takes no responsibility for any possible damage that could result from your use of the above instructions.


Windows XP Advanced Options Menu

©Smithtechres.com 2013 All Rights Reserved. Website Privacy Policy. Site Map

Emsisoft Emergency Kit Interface Emsisoft emergency kit screen Emisoft emergency kit scan pc options screen.
Share on Twitter Share on Stumble Upon Share on Digg Share on Delicious


Providing cost-effective local computer repair and network support in the middle Tennessee area

Phone (615)596-2592

Remote Access Portal

Remote Access Icon
Home About Us Onsite Services Online Services Self Help Pricing Blog Inquiries


You may also be interested in the following tutorials: