Windows Antivirus Machine is another fake antivirus inside the web. It infects a lot of computers all over the world at present time. As always we advice our users to be very careful when they surf the web. The hackers have figured out the way how their malicious programs like Windows Antivirus Machine can overcome our antiviruses. So, when such viruses penetrate inside our systems they are not visible for antiviruses. That is why you should keep in mind that Windows Antivirus Machine is a virus and it will do everything to fool you into the purchasing of its product.
We recommend you to eliminate Windows Antivirus Machine virus with our program Loaris Trojan Remover. You can download the program here below. Plus, there is a video removal guide you should watch. Just follow all the steps and the virus will be removed in several minutes. Be safe and careful in the web!
Windows Antivirus Machine malware remover:
Windows Antivirus Machine automatic remover:
Windows Antivirus Machine manual removal guide:
Delete Windows Antivirus Machine files:
Protector-[rnd].exe in %AppData% folderDelete Windows Antivirus Machine registry files:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exeHKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exeDebugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe
No comments:
Post a Comment