Windows Antivirus Care is a rogue anti-spyware program distributed by Trojans and starts on the first reboot of the infected system. It looks like a real antivirus tool and mimics making security scans like an antivirus producing numerous reports about multiple insecurities and infections found on the scanned system. However all of this is a fake. This activity is designed to irritate and scare users and make them willing to pay for the “full licensed version” of this rogue useless software. There is a more serious threat if someone really pays for this scam with a credit card over the internet. After the payment is made, the money from the credit card account might magically disappear because the main purpose of this program is to steal users passwords and credit card accounts data. You need to remove Windows Antivirus Care as soon as possible because it will install more malware on your computer and trace your activities.
DO NOT BY THIS SCAM
The list of problems caused by this malware:
- Showing fake security alerts and warnings about infections.
- Prompts users into paying for the license for full version.
- Slow down the system where resides.
- Redirects browser to rogue sites.
- Blocks Task Manager and replaces it with its own.
- Blocks downloading of legitimate security software.
- Blocks execution of installed anti-viruses.
There is a professional automated malware removal solution designed to remove Windows Antivirus Care and the bunch of similar infections in an automated process of scanning and removal all of the known traces of the malware present on your system.
If you are quite professional Windows system user and sure that you can try to remove Windows Antivirus Care malware manually, then first you have to block Windows Antivirus Care sites, stop and remove all the malware processes, find and remove all Windows Antivirus Care files, and remove the records made by this infection in your system registry.
How to remove Windows Antivirus Care manually list:
Stop these processes to remove Windows Antivirus Care:
Remove these Windows Antivirus Care Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
Remove these Windows Antivirus Care files:
protector-[rnd].exe in %appdate% or Allusers\Appdata
How to restore your internet connection for downloads:
Windows Antivirus Care malware might block your Internet connection to protect itself from removal with normal antivirus
programs from your PC. To get the Internet connection back, follow the instructions below:
- Open Internet Explorer and go to Tools selectInternet Options
- Select Connections
- Select LAN Settings
- Here you need to uncheck the checkbox called Use a proxy server for your LANin the section Proxy Server. Press theOK button twice to close this screen and to close the Internet Options screen.
- Now you can download some automatic problem solution and fresh antivirus base from the Internet.
Note: Experienced PC users with a professional level of skills in the Windows system management might successfully remove Windows Antivirus Care manually. If you not one of them, remember that any mistake made in the process of the infection removal can damage your system and make it inoperable. Moreover, the malware can reinstall itself from hidden files if the process of removal is not complete. The automated and professional Windows Antivirus Care removal by specially designed professional utilities will made this process very quick, easy and successful.