Thursday, July 7, 2011

Remove Windows Search Supervisor that disables popular apps

Windows Easy Supervisor tracks back user’s activities to find out which programs are used most frequently. Then it attempts to block them. Whether it succeeds to accomplish its design or not, here comes a message explaining that the program is corrupted or that something is  going wrong, and due to that reason running the application of your choice is not possible.
Remove Windows Search Supervisor that plots system malfunctioning to make its alerts sound credible. According to the assessment by the fake security tool in question which does not vary from PC to PC, any computer system is infected with at least several dozens of viruses. The assessment is not based on any scan performed and merely a list of names retrieved from databases of genuine security tools.
If you scan your computer system infected with the counterfeit by true scanner and it finds one or more viruses detected by the fake scanner, this is merely a coincidence. As a matter of fact, there are many virus names, but many of them are variations of a single generic name. So do not get confused if the free scanner available here will find one or few threats, which are the same or similar to fake detections by the adware.
Among the findings reported by reliable security tool there will be the fake antivirus too, under appropriate detection name. The scanner available here will invite you to get rid of Windows Search Supervisor once the scan is completed and scan report generated.

Windows Search Supervisor snapshot:

 
 

Manual removal guide:
Delete Windows Search Supervisor infected files:
%UserProfile%\Application Data\Microsoft\.exe
Deelete infected registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR " = '1'

No comments: