Saturday, July 21, 2012

Remove Windows Security System as a remote clone of Contraviro malware

Windows Security System is the same user’s interface (GUI) as that discovered in the wild back in 2009. The first program in which the GUI occurred was Contraviro. In its turn, Contraviro was the same program code as Uvirex, but the appearance of those two was completely different.
All the programs above are classified as fake security solutions. They run showcase called system scan without taking care about detecting a single parasite.
Removal of Windows Security System requires unique method to be applied, even as compared to its closest forerunners, as the program’s signatures and codes are unique.
To get rid of Windows Security System malware and other threats as disclosed by free scanner, click here.


Windows Security System activation code (helps removal):

0W000-000B0-00T00-E0020
NOTE: "Activating" Windows Security System is not enough. You need to remove related trojans \ rootkits using reliable malware removal solution.
It is important to fix Windows registry after malware removal using safe registry cleaner software.
 
Windows Security System manual removal guide:
Delete infected files:
%AppData%\Windows Security System\
%AppData%\Windows Security System\Windows Security System.exe
%AppData%\Windows Security System\IcoActivate.ico
%AppData%\Windows Security System\IcoHelp.ico
%AppData%\Windows Security System\IcoUninstall.ico
%AppData%\Windows Security Systemsecurityhelper.exe
%AppData%\Windows Security System\securitymanager.exe
%AppData%\Microsoft\Internet Explorer\Quick Launch\Windows Security System.lnk
%StartMenu%\Programs\Windows Security System.lnk
%StartMenu%\Programs\Windows Security System\
%StartMenu%\Programs\Windows Security System\Activate Windows Security System.lnk
%StartMenu%\Programs\Windows Security System\Windows Security System.lnk
%StartMenu%\Programs\Windows Security System\Help Windows Security System.lnk
%StartMenu%\Programs\Windows Security System\How to Activate Windows Security System.lnk
Delete Windows Security System registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows Security System
HKEY_CURRENT_USER\Software\Windows Security System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows Security System”

No comments: