Search this blog

Thursday, April 7, 2011

Windows Spyware Protection – scam. How to remove Windows Spyware Protection virus

It seems like cyber crooks developing malicious programs never sleep. Day and night they work in order to develop new viruses that are meant to scare users and, to deceive them and to take their money for nothing back in response. Well, this time these frauds have elaborated the next example of malware, bearing the name of Windows Spyware Protection. No doubt, this is a fake anti-malware tool. You should not tolerate it on your PC.

Windows Spyware Protection can also be called as rogue program since it claims of itself as some excellent anti-trojan device. However, it is not what it claims of itself. The reality is that Windows Spyware Protection is good for nothing. It has nothing to do with Windows OS and it is totally incapable of protecting your PC from spyware. Bear in mind that it will regularly show fake error notices claiming that your system in infected with keyloggers and other kinds of junkware. As soon as it is installed, Windows Spyware Protection will ask you to reboot your PC in protected mode in order to make sure that your workstation is “properly protected against all possible threats and malware”. What a pack of lies indeed! In addition, Windows Spyware Protection also tends to take the entire control of the infected computer and prevent all the applications from running that may aid to remove real viruses, including Windows Spyware Protection. This is high security threat and thus is must be removed immediately from your machine system once its presence there is identified.

Manual elimination of Windows Spyware Protection virus is not always effective and requires high-level of IT skills, we advise you to use the program recommended by us for removal of Windows Spyware Protection virus in order to get rid of Windows Spyware Protection malicious consequences. Good luck to you and stay safe with us!

Delete Windows Spyware Protection files:

%UserProfile%\Application Data\Windows Spyware Protection\Instructions.ini %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Spyware Protection.lnk %UserProfile%\Start Menu\Programs\Windows Spyware Protection.lnk %UserProfile%\Desktop\Windows Spyware Protection.lnk %UserProfile%\Start Menu\Windows Spyware Protection.lnk %UserProfile%\Application Data\Windows Spyware Protection %UserProfile%\Application Data\Windows Spyware Protection\cookies.sqlite C:\Documents and Settings\All Users\Application Data\23077d\CB130_287.exe

Delete Windows Spyware Protection registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "0" = "msseces.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun ""1" = "MSASCui.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Run "Windows Spyware Protection" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "2" = "ekrn.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "3" = "egui.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "4" = "avgnt.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "6" = "avscan.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "7" = "avgfrw.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "8" = "avgui.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "9" = "avgtray.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "10" = "avgscanx.exe"HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "5" = "avcenter.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "11" = "avgcfgex.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "12" = "avgemc.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "13" = "avgchsvx.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "14" = "avgcmgr.exe" HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "15" = "avgwdsvc.exe"

No comments:

Post a Comment

Search this blog