Wednesday, August 1, 2012

Removal of Windows Antivirus Machine the predictable detector of intentional false positives

Windows Antivirus Machine is a predictable detector of viruses. It follows several scenarios on computer system tolerating its installation, but always assesses PC undergoing the scan as announced in its popups as infected with a good deal of malware.
The program is predictable in its reports as it is but another fake antivirus. All the infections it refers to are meant to scare user for the purpose of marketing the useless and harmful for your PC program as a security suite.
What is unpredictable is how long your PC can perform its basic tasks with the rogue installed on it. Remove Windows Antivirus Machine at the earliest opportunity to ensure your operating system functions at due speed at accuracy.
Needless to say, one should merely pay no attention to the fake detections by the fake antivirus – click here to run free scan with genuine virus detector and get rid of Windows Antivirus Machine cleaning all the threats reported by the tool suggested.



Windows Antivirus Machine activation code (helps removal):

0W000-000B0-00T00-E0020
NOTE: "Activating" Windows Antivirus Machine is not enough. You need to remove related trojans \ rootkits using reliable malware removal solution.
It is important to fix Windows registry after malware removal using safe registry cleaner software.
 
Windows Antivirus Machine manual removal guide:
Delete infected files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[random 3 characters].exe
%AppData%\Protector-[random 4 characters].exe
%AppData%\W34r34mt5h21ef.dat
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Antivirus Machine.lnk
%Desktop%\Windows Antivirus Machine.lnk
Delete Windows Antivirus Machine registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorAdmin” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “ConsentPromptBehaviorUser” = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-4-27_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “tovvhgxtud”
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\[random].exe

No comments: