Antivirus System Pro/Magic Software Inc. Magic Software, Inc. Scam software hijacks computer to randsom/sell software London, Other

As per the other reports on this company, their software attempted to take over my computer - effectively preventing me from running programs (like task manager to attempt to kill it, but also just about anything else!) and said I had a virus (at least that part was right)

It wasn't anything familiar, so I immediately tried to kill it, but when I couldn't start anything to do that, I hit reset and started up in safe mode. Fortunately I was then able to find where it auto-starts and all that with sysinternals autoruns, and clean it out manually. 

I then checked the net to make sure I got it all, and found some good info (thought it seems that there's a lot, so you can easily get tons of info by Googling it!) at:

http://www.threatexpert.com/report.aspx?md5=8dda187ddafb12af24ebf88cea649a08 

The only difference I found with the info listed on that page was my %System%\drivers\etc\hosts (C:\Windows\System32\drivers\etc\hosts) file contained some full www.blahblah.com type addresses instead of just the "www." that they list. However, fixing your hosts file is easy if you just leave the "127.0.0.1 localhost" line in and delete the rest - that's basically the default state.

Given the large number of Google hits on a search, though - you  can probably find either simple instructions or even a utility that will clean it all up for you, if you're not into the manual method.

This is really, really low-life sofware "sales" (blackmail!) Hopefully someone will close them down ASAP!

The phone number as listed on their (current) page on their website at "/company" is listed as +1(800)220.72.09 - but the phone number field on this (ripoffreport.com) site only allowed 10 characters(!) so there you have it. Anyway, unless they take down that page (http://91.212.127.227/company) - you should be able to see all the info still there. 

THAT, BTW (91.212.127.227) was the IP that their virus/scam software had put into my hosts files to resolve any of the names they'd put into my hosts file as. (so any of the names they'd put in, that I tried to open a page to, would just go to their site, instead of the real site)