2014年6月9日星期一

How Can You Remove Windows Antivirus Care? (Rogueware Removal)

“Windows Security Alert: Do you want to keep blocking this program? Name: Windows Explorer. Publisher: Microsoft Corporation” Have you ever experienced the above alert message when try to open Windows Explorer? Whatever program you want to open, such warning messages will pop up on the computer screen. Actually, these security alerts from Windows Antivirus Care application are false. The antivirus software itself is a rogue security program. When you see the software on your PC, please get rid of it as soon as possible.

What is Windows Antivirus Care?

This is a rogue program that displays feigned cyber infections to scare computer users into buying its product to get protection. It pretends to protect your computer and maintain PC performance carefully. However, it does nothing good to your PC. Once the rogue is installed on your computer it will be configured to start automatically when Windows starts. Once started, it performs a fake scan and then states that there are numerous infections found on your PC. If you attempt to use the program to remove these infections, you will be asked first to purchase it before it can do so. This is a money-making scam as the scan results are not true. They do not even exist on your computer.
Screenshot of the rogue security program:
screenshot
The rogue program not only shows fictitious security alerts to cheat users, but also stop some programs installed on the infected PC from running properly. For example, when you try to run an executable program, it will terminate it automatically. And display the warning messages similar to the following picture:
alert
Furthermore, the malware will hijack the Windows Task Manager and Registry editor so that you cannot kill its running process and delete its related information. To protect your computer, you have to remove Windows Antivirus Care instantly.
Generally, the rogue program makes use of hacked web sites that exploit visitor’s vulnerable programs to invade their machines without permission. It also utilizes websites to display fake online anti-malware scanners in order to trick you into downloading and installing it. Thus, you should be cautious when surfing the Internet and keep away from malicious websites.

Solutions:

Once you constantly receive the annoying alert messages, you need to disable it right away. Now, follow the methods below to delete it manually.

Method 1. Uninstall Windows Antivirus Care manually.

Step 1. Click Start menu, and click Control Panel.
contro-l panel
Step 2. Locate and double click “Add or Remove Programs” (click “Programs and Features” and select “Uninstall a program” if you use Windows 7)
add-remove-programs
Step 3. Highlight the rogue program and click “Remove” or “Uninstall” button.
remove-p-xp
Step 4. Click Yes or OK if you are required to confirm.
Step 5. Click Start, go to Control Panel (or go to Appearance and Personalization)and open Folder Options . Click on View tab, select Show hidden files and folders and uncheck Hide protected operating system files (Recommended) and click OK.
f-o
Navigate to delete the associated files when the above steps finish
%AppData%\NPSWF32.dll
%AppData%\Protector-[random].exe
%AppData%\result.db
%Desktop%\[rogue program name].lnk
%StartMenu%\Programs\[rogue program name].lnk
Step 6. Click Winkey+R to open Run.
Win+R
Step 7. Type “regedit” in the run box and click OK.
xp-regedit
Step 8. Navigate to delete the following entries in registry editor:
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 4
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = 2012-2-20_1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\{random}.exe

Method 2. Run a professional removal tool to delete Windows Antivirus Care automatically

Are you not sure that you can correctly delete the registry entries and files of the rogue program? Do you wonder if there is a third-party tool to uninstall Windows Antivirus Care automatically? In fact, you don’t need to clear the rogue program by yourself step by step as the above mentioned. A professional removal program – Mighty Uninstaller can help you effectively delete the malware. It is specially designed to remove all unwanted programs and files easily and totally. The malicious files and registry information created by the rogue security files can be fully deleted by the tool when the malware is erased. Therefore, it is strongly suggested that you use a third-party malware removal tool to deal with the threat.
Download and install Mighty Uninstaller on your computer.
Run the program and search for the fake security software.
Click Delete or Uninstall button to remove the malware completely.
Note: If necessary, you have to download and install the removal tool in Safe Mode with Networking. Then the powerful tool will let your computer become clean again.

没有评论:

发表评论