trojan win 32 agent azsy Personal antivirus

I had installed the Avast 4.8 version but it did not prevent to catch the Trojan-personal antivirus thing.
I just installed free trojan removers/killers (pctools and spyhunters ( , they scanned and found the malicious files but they ask me for paying registration/purchasing to eliminate these files.
I’d would like to know if there is any free software that would allow me to clean the trojan or in case that there is none free, which one will be the best and less expensive

Welcome escuin

Download Malwarebytes’ Anti-Malware (MBAM) then install it then update it and run a Quick scan:
http://www.malwarebytes.org/mbam.php

Others recommend SUPERAntiSpyware:
http://www.superantispyware.com

Dear YoKenny,
Thanks for your help.
I followed your advice and downloaded malwarebytes. The scan found 156 errors but the freedownload only permitted to fix 15 of them.
Apparently the problem is solved because the malicious icon ’ personal antivirus’ has dissapeared as well as the continuous alarming popups
The only thing is that now each time I reboot or switch on I got an automatic scanning from Registry booster that keeps telling me that I still have the remaining 141 errors , Should I desinstall the Registry? How?
In any case thanks again
Escuin :slight_smile: :slight_smile: :slight_smile:

I wasn’t aware of any restriction in the number of fixes permitted in the free version of MBAM.

What is this registry booster and where did you get it ?
That may well be rogue malware also as I can’t see how this figure it quotes 141 errors (which would be what remains after the MBAM scan) can be correct unless the two applications are connected.

So are you really sure you downloaded MBAM, and not something associated ?

His dns probably got hi-jacked and when he clicked on one of those link,he got redirected to a rogue site

Perhaps, but I guess we will have to wait for some feedback.

@ escuin
Try this link a direct download MalwareBytes Anti-Malware, On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. It might be worthwhile when you save as to change the file name to escuin-mbam-setup.exe.

@ DavidR

Your were right.
I downloaded now from your recommended link and the scan found the trojans still in my system. I hope I eliminated them now.
But … I still have what I was thinking it was the good cleaning programme got from ‘’ Malwarebytes’’ the first time. It is called ‘’ Uniblue Registy booster’’ and keeps poping up each time I start the PC with the 141 errors
I tried to delete it from the list of programmes but it does not have a desinstall tool. How can I get rid of it?

the add/remove in control panel can uninstall it. else try using revo unistaller (portable version)

use moderate option while uninstalling.

If Malwarebytes detects ‘‘Uniblue Registy booster’’ then it is not a good application to have.

I believe the proper term is “lureware” in that the application finds infections that are non-threatening then you need to purchase the full version to remove the detected threats.

The term “lureware” is used in the FTC case against Zango Inc, 180Solutions:
http://www.ftc.gov/os/caselist/0523130/0523130cmp061103.pdf

There are some that consider Uniblue has a poor rep and it is stuff like this which doesn’t help it, because in my mind it is not short of some scumware that finds lots of problems but will only remove on payment. This is only a short step removed by allowing the free removal of only 10 items.

If both MBAM and SAS find no registry entry issues, then I would have to doubt what registry booster found. There for the most part is little point in these so called registry boosters.

If the Revo uninstaller ‘nmb’ mentioned isn’t able to remove this then there are other tools that could help, but try that first.

Uniblue registry booster removed succesfully
Everything looks OK now

Thanks for the feedback.


Welcome to the forums, escuin. :slight_smile:

We are happy that your problem has been resolved.

Please come back often and learn more.


may we know how you removed it, please.