Thursday, August 9, 2012

Removal guide of Windows Virtual Security virus.

Windows Virtual Security is one more fake antivirus that can easily get into your system and convince you to buy its product. The main aim of the virus is your money. Having got inside your system it claims to be an antivirus. It acts like one. You just do not have to do anything but delete it. Everything Windows Virtual Security shows you or tells you is fake. Just do what you have to do.



Loaris Trojan Remover is a powerful program that can help you (and it will) in removing such viruses like Windows Virtual Security. Download Loaris Trojan Remover here below install it and the virus will be deleted in no time. Be safe and careful in the web!

Windows Virtual Security malware remover:

Windows Virtual Security automatic remover:


Windows Virtual Security automatic remover


Windows Virtual Security manual removal guide:

Delete Windows Virtual Security files:

Protector-[rnd].exe in %AppData% folder

Delete Windows Virtual Security registry files:

HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\Inspector %AppData%\\Protector-[rnd].exe
HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnHTTPSToHTTPRedirect 0
HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Settings\\ID 4
HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Settings\\UID [rnd]
HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Settings\\net [date of installation]
HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\system\\ConsentPromptBehaviorAdmin 0
HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\system\\ConsentPromptBehaviorUser 0
HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\system\\EnableLUA 0
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AAWTray.exe\Debugger svchost.exe
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AVCare.exe
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AVCare.exe\\Debugger svchost.exe
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AVENGINE.EXE
HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\AVENGINE.EXE\\Debugger svchost.exe

No comments:

Post a Comment