Monday, April 16, 2012

How to remove Windows Antivirus Patch malware (rogue)

Windows Antivirus Patch notification should not be trusted, but it is somewhat helpful, though annoying, as it points out trojan threat in the computer memory. The point is that that there is no legitimate software under such title. It is a trojan infection that addresses users pretending to contain severe threat of viral type.
It is essential for PC use convenience to get rid of Windows Antivirus Patch fraudulent application, but the harm the trojan can do to other programs should not be ignored as well. Hence there is the only one way to efficiently remove Windows Antivirus Patch. It is to find and delete the trojan that installs it.
To fulfill the task, click here to run free computer examination and extermination of the detected parasites, including the above trojan.

Windows Antivirus Patch snapshot:


Windows Antivirus Patch manual removal guide:

Delete infected files:
%appdata%\npswf32.dll
%appdata%\Inspector-[rnd].exe
%desktopdir%\Windows Protection Unit.lnk
%commonprograms%\Windows Protection Unit.lnk

Delete Windows Antivirus Patch registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 4
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = 2012-2-20_1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\{random}.exe

No comments: