Is your computer currently suffering from lots of annoying pop-up security alerts stating there are numerous troubles with your computer? Have you struggled and tried to get them off by every possible way but even your antivirus software doesn’t work? Don’t be panic and believe what is going on. You will be taught to manually remove this virus out of your computer.
Windows Advanced Security Center is a pretend-to-be-legitimate antivirus software coming from Rogue.FakeVimes family. It is known as the latest version of Windows Pro Safety or Windows Private Shield. Creators try to boast to computer users that their computers have been severely infected by using this serial Windows virus and collect as much money as possible. It is called an online financial fraud.
You may feel granted for your purchased virus protector to take care of the risks when you are visiting some illegal websites or opening unknown emails. But as a matter of fact, Windows Advanced Security Center or other Windows serial fake programs are able to avoid the detection and removal from antivirus software. When it has finished installing itself without your permission, this malware will change your settings and imitate the system structure at first. Then it will pop up an auto scan to run through your computer. Scanning results are always critical to make you become nervous. And then lots of security messages will keep showing up. Through this forcible warning, this scam program is trying to deceive you. But none of the alerts are real, so as the detected viruses, bugs and other errors. What would happen if you do believe what it tells you? You will have to buy its full version so that it can complete the removal job. It is without any question that you don’t make the payment or if you do, try to contact with the bank and cancel it immediately. Then an immediate action is needed to get it out from your computer.
Following are some examples of fake warnings and errors that you may come across on your infected computer:
Warning
Firewall has blocked a program from accessing the Internet
C:\programs files\Internet Explorer\iexplore.exe
is suspected to have infected your computer. This type of virus intercepts entered data and transmits them to a remote server.
Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Error
Attempt to modify Registry key entries detected.
Registry entry analysis recommended.
1. It will slow down your computer till it’s stuck;
2. It will bring more viruses and bugs into your computer without permission;
3. It will hide the icons from the desktop as well as your files;
4. It will capture your personal information and send to remote hosts with the help of Trojans.
As mentioned before that legitimate antivirus programs cannot 100% remove this virus, you will need to do the removal manually. That will require lots of knowledge of computer. Following are some steps for your consideration when you are doing this on your own:
1. Reboot your infected computer and keep pressing F8 key on your keyboard and next use the arrow keys to select “Safe Mode with Networking” and press E/Enter;
2. Press Ctrl+Alt+Del at the same time or right click on the Task Bar to open the Windows Task Manager;
3. End the process {random}.exe;
4. Find out and delete all these associating files as below:
%AppData%\Protector-.exe
%AppData%\Protector-.exe
%CommonStartMenu%\Programs\random.lnk
%Desktop%\random.lnk
5. Find out and remove all these associating registry entries:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\{random}
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Regedit32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
Tips: It is strongly recommended to remove Windows Advanced Security Center with expertise, so please contact YooCare for a fast and professional help if you have failed to do the removal by yourself.
Published by on May 22, 2012 8:53 pm, last updated on November 13, 2012 6:23 pm
Leave a Reply
You must be logged in to post a comment.