Monday, August 13, 2012

Removal guide of Windows Secure Workstation virus.

Windows Secure Workstation is another fake antivirus inside the web that infects computers all over the world nowadays. There is almost no difference between Windows Secure Workstation and the viruses I was writing you about. It has the same old aim of getting your money for its malicious product by fooling you. It can actually fool you into the purchasing.



Be very careful with this rogue because it will try to do everything to achieve its goal. Just ignore everything Windows Secure Workstation virus shows you and provides you with. Loaris Trojan Remvoer can eliminate the virus from your system in several minutes. Download the program here below, install and run it. Be safe and careful in the web!

Windows Secure Workstation malware remover:

Windows Secure Workstation automatic remover:


Windows Secure Workstation automatic remover


Windows Secure Workstation manual removal guide:

Delete Windows Secure Workstation files:

Protector-[rnd].exe in %AppData% folder

Delete Windows Secure Workstation registry files:

HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\Inspector %AppData%\\Protector-[rnd].exe
HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnHTTPSToHTTPRedirect 0
HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Settings\\ID 4
HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Settings\\UID [rnd]
HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Settings\\net [date of installation]
HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\system\\ConsentPromptBehaviorAdmin 0
HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\system\\ConsentPromptBehaviorUser 0
HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\system\\EnableLUA 0
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AAWTray.exe\Debugger svchost.exe
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AVCare.exe
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AVCare.exe\\Debugger svchost.exe
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AVENGINE.EXE
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AVENGINE.EXE\\Debugger svchost.exe

1 comment: