1 of 5
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
WindowsAccidentsPrevention

Windows Accidents Prevention

Seemingly there is no end to the Fake Microsoft Security Essentials fraud. Windows Accidents Prevention is the newest rogue antispyware application which looks and acts exactly the same as Windows Troubles Solver, Windows Risks Preventions, Windows Necessary Firewall, and many more. This rogue pretends to be a legitimate security program in hopes of swindling unsuspecting computer users out of their money. At the same time Windows Accidents Prevention damages the overall system performance, so allowing this rogue to stay in the computer might have terrible consequences.

Download Spyware Removal Tool to Remove* Windows Accidents Prevention
  • Quick & tested solution for Windows Accidents Prevention removal.
  • 100% Free Scan for Windows

Windows Accidents Prevention is delivered by Trojan infections or fake online malware scanners. If the user clicks on some suspicious link, he might end up being redirected to a website which hosts the malware, and the download of Windows Accidents Prevention can start automatically. Sometimes, when this rogue is distributed with a Trojan, the infection might be lurking in the computer already.

At first Windows Accidents Prevention reveals its presence by sending a fake security message about Unknown Win32/Trojan which is supposedly detected in the target system. A message pops up saying:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

When the user clicks on the "show details" tab, a scan window pops up. After the fake scan, Windows Accidents Prevention states that Trojan.Horse.Win32.PAV.64.a. has infected the computer. It should be noted that all the rogues from this family use the same Trojan name to scare the users with. In order to remove this Trojan, the user is then urged to download and install Windows Accidents Prevention with the following message:

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a serious possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

The users who click on the "OK", might also be taken by surprise when after the download and installation, Windows Accidents Prevention automatically reboot the computer, so that the program would be launched together with the system start-up.

Then Windows Accidents Prevention starts attacking the user relentlessly with random security messages, about various infections which do not exist in the computer. Not to mention that the rogue performs a fake system scan, ranking the overall computer system security by no more than 33%, at the same time prompting the user to acquire the full version of Windows Accidents Prevention, because the unregistered version cannot get rid of all the threats.

Naturally, the user should never trust Windows Accidents Prevention with his money or computer security. The rogue will assist its creators with stealing the money, and will leave the computer system in ruins. Due to such possible consequences the user must remove Windows Accidents Prevention before it meddles with computer processes too much. It can be done either manually or automatically, all the methods are good as long as Windows Accidents Prevention disappears from the computer for good.

Download Spyware Removal Tool to Remove* Windows Accidents Prevention
  • Quick & tested solution for Windows Accidents Prevention removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Accidents Prevention

Files associated with Windows Accidents Prevention infection:

%AppData%\Microsoft\[random].exe

Windows Accidents Prevention processes to kill:

%AppData%\Microsoft\[random].exe

Remove Windows Accidents Prevention registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.