Have you got Windows Antivirus Patrol pop-up on your computer that blocks you from do anything? Do you realize that it is not an antivirus program as it markets but a virus? Please be aware that this is a highly dangerous rogue program that uses misleading error messages in order to scam computer users into purchasing fake anti-virus software. If you are the victim of this scam, please follow the manual guide to remove it step by step.
Windows Antivirus Patrol is a special type of virus that is categorized as a rogue program which usually displays itself on a computer screen, pretending to be an anti-virus program, a fake registry cleaner, or a hard drive optimization program. Even though this program claims to provide you helpful features to protect your PC like Quick Scan, Deep Scan, Anti-Publishing and so forth, but the fact is it is a rogue program which uses scare tactics by only showing innocent users fake reports, misleading them to pay for its useless product so as to rip off their money. This program will tell you that you have errors or viruses on the computer and it can fix them if you buy the full version of this program. In fact, it doesn’t help to protect a computer from virus attack, the only purpose of this rogue program is to to lure unsuspecting users into buying their software to fix problems they don’t really have.
Sharing the same purposes with other Windows malware like Windows Pro Defence Kit and Windows Defence Master, this scam is only created and used by online criminals to achieve their hideous intentions. Although the name has changed and the look seems to be a legitimate program, it’s just its way to fool around with you. Windows Antivirus Patrol has no ability to protect your computer and it is not a program from Microsoft. It is a tricky virus that infects your computer with the help of trojan horses when you view some illegal websites or click on a spam email that contains unknown enclosure. Once launched, it takes control of the computer, disables the current anti-virus, Task Manager, and sometimes it can even break the .exe file association, that is to say, whenever your PC is infected, you are not able to run your legitimate virus scanner or get online. As long as you launch any applications installed, a fake alert will pop up saying that：
Firewall has blocked a program from accessing the Internet
Internet Explorer
C:\Windows\system32\iexplore.exeis suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.
Therefore, if your computer is infected with Windows Antivirus Patrol Virus, you have to understand that this program is totally useless and it is just designed to steal your money. Attempts to purchase this scam will only give your financial information into criminal possession. The best way to keep your computer safe is to uninstall it manually.
Although this tricky virus can escape the scan of legitimate antivirus program, it also can be picked up by its symptoms.
1. Your computer will be much slower than before just like crawl which makes you really upset.
2. Some malware you never saw before will be downloaded automatically after you turned your computer on.
3. You can find that your computer resources are highly consumed.
4. You will be kicked off the needed website quickly and then receive its pop up immediately.
5. Sometimes you may find that your keyboard likes dead because you can’t do anything on it.
6. In your system, you can receive some random files with a long name. However, these files don’t belong to you.
1. Check the virus icon on the desktop and then delete it.
This virus may add its own icon on your desktop without your permission, just delete the icon as soon as you detect it.
2. Try to Use Add or Remove Programs in Control Panel.
In some cases, this fake antivirus program can show up in Control Panel, then computer users can use generic removal procedures to uninstall it completely.
For Windows XP:
For Windows Vista, Windows 7 and Windows 8:
3. Remove all the contents related to Windows Antivirus Patrol Virus Manually.
Note: Manual removal requires at least some experience with the system, the registry, and other Windows components. If you make a mistake, your operating system might become unusable. If you need any further help, you can contact a PC expert by clicking the live chat button below.
Since this fake anti-virus software may block many executable programs from running, it’s difficult to proceed the removal processes while being constantly interrupted by the Windows Antivirus Patrol pop-up screen. To temporarily disable this rogue software from popping up, try to restart the infected computer into safe mode with networking first.
1. Reboot your computer to safe mode with networking. As your computer restarts but before Windows launches, tap “F8” key constantly. Then log on to your computer with a user account that has administrator rights.
2. Press CTRL+SHIFT+ESC to quickly bring up Task Manager and check the suspicious processes, and then end them.
If the computer appears sluggish and takes forever to do anything, you may see a high number of running processes and CPU usage of 100%. CPU usage only drops to 0% when the system is idle, at any other time the running figure will be between these limits; the lower the usage the faster and more responsive the system will be. Most of time this virus process is random, users can google the suspicious process before taking action to end it.
3. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries related to Windows Antivirus Patrol malware and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press the “Start” button and then choose the option “Run”. In the “Open” field, type “regedit” and click the “OK” button.
b. All malicious files and registry entries that should be deleted:
%AllUsersProfile%random.exe
%CommonAppData%\[random]\[random].cfg
%Temp%\random.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random characters]”
Windows Antivirus Patrol is a fake virus scanner and it will run a scan automatically whenever you start Windows because it can be able to modify the registry entries. It fully takes control of your computer and declares that a great number of spyware and viruses are found in your computer after its automatic security scan, and then it panics the inexperienced users into believing the computer is at high risk and a ‘license’ is needed for protecting computer system in all aspects. Wasting your hard-earned dollars on a bogus product isn’t the only thing you need to worry about. There have been multiple reports from folks who fell for the scam only to end up with credit card charges much higher than expected – and often a series of fraudulent charges continue to appear on their statements. Hence, as soon as you detect this virus installed on your PC without your permission, the first thing you have to do is to ignore all the false messages and manually remove it from your computer.
Note: Spending a lot of time removing this virus but still with no luck? To avoid system crash or data loss, please Live chat with YooCare experts now to save your computer and remove the virus safely and completely.
Published by on March 21, 2014 8:43 am, last updated on March 21, 2014 8:54 am
Leave a Reply
You must be logged in to post a comment.