Search this blog

Friday, March 18, 2011

How to remove Windows Emergency System virus

The screenshot in the left part of this post depicts the new virus that has just been elaborated by the crooks from Russia. Its name is Windows Emergency System. We hope that your computer will never be infected with Windows Emergency System scam. However, if it is inside of your machine, you might be wondering how to get rid of Windows Emergency System virus. Well, the recommendation below will give you the answer to this question - how to uninstall Windows Emergency System virus from one's computer?

Windows Emergency System is a fake system optimization program. It is fake because it claims to be able to perform some excellent improvements in your computer, but the truth is that it only aims to steal your money via its evil tricks. It is not capable of making your PC work better. Therefore, do not believe and do not buy its full version. You will encounter fake error reports originated by Windows Emergency System, but you should not trust them. Such infections do not exist in reality. What you indeed must do is to uninstall Windows Emergency System virus from you system. But you need to carefully follow the below-given recommendations. We hope it will be clear for you. Make sure and watch the video below, describing all steps on how to delete Windows Emergency System.


Before downloading and running GridinSoft Trojan Killer for removal of Windows Emergency System several additional preparatory steps need to be done. This is necesary, because Windows Emergency System blocks your Internet connection, and you will not be able to run GridinSoft Trojan Killer. In order to prevent this blockage make sure that your Operating System is tuned up in such a mode that hidden files and folders of your PC are viewable. Go to the folder %User Profile%\Application Data\Microsoft. Important! Depending on the Operating System of your computer, %UserProfile% stands for C:\Documents and Settings\[Current User] for Windows XP and C:\Users\[Current User] for Windows Vista/7. In other words, the folder that should be opened is as follows, depending on the operating system: %SysDrive%Documents and Settings[Current User]Application Data\Microsoft for Windows XP and %SysDrive%Users[Current User]Application Data\Microsoft for Windows Vista/7. In this folder there will be the main executable file of Windows Emergency System (with the icon of avi file, and there may be several of them), having some random name. Rename the above-mentioned executable file(s) into some other name of your choice and restart your computer. Upon the system restart Windows Emergency System will no longer block your Internet browser. Download the latest version of GridinSoft Trojan Killer to your infected computer, install it and run it.

The removal procedure of Windows Emergency System is similar to removal of Windows Remedy virus as shown on the video below

.
Delete Windows Emergency System virus files:

Delete Windows Emergency System virus registry entries:

2 comments:

Sandor21 said...

The folder locations are wrong for windows 7 and the machine I was working on it was located in the C:\users\[current user]\appdata\roaming\microsoft\[random].exe I renamed it and restarted pc now able to run cleanup tools.

Unknown said...

As Sandor21 says, but I found the executable in:
c:\programdata\[random]\[random].exe
To give an idea, in my case random was called: eDcMfJiLpIn16633
Dont forget if you can't see folder "programdata" you need to enable "view hidden and system folders" in folder options. Good luck!

Post a Comment

Search this blog