Wednesday, April 25, 2012

Remove Windows Efficiency Accelerator adware and hijacker – comprehensive cleanup for the counterfeit related infection

Windows Efficiency Accelerator needs no viruses present in your computer system to arrive at a conclusion that your PC is badly, if not deadly, infected with a number of worms, trojans, viruses, rootkits etc. It generates a single threat related notifications and fake scan screen containing hundreds of virus names. The names of threats reflected there are retrieved from the stocks of genuine security tools. That is, the program is a fake one.
It might be loaded by victim manually as the hackers seduce users to infecting their computer by redirecting web-surfers to phony online scanners. Needles to say, such scanners are quick as lightning to register a number of threats remotely, of which none is detected for real. Thereon a free scanner would prompt its visitor to get a copy of the above adware describing it as a an award-winning protection tool.
If you have been redirected to the adware’s fake online scanner repeatedly, you need to get rid of Windows Efficiency Accelerator related redirect virus. Whether you are concerned with online or resident scanner related to the tricky application, clicking here will produce the same effect as it supplies free scanner that serves as a comprehensive Windows Efficiency Accelerator removal tool.


Windows Efficiency Accelerator snapshot:



Windows Efficiency Accelerator manual removal guide:
Delete infected files:
%AppData%\Inspector-[rnd].exe
 %AppData%\Protector-[rnd].exe
Delete Windows Efficiency Accelerator registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "ID" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-2-17_2"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe



No comments: