1 of 4
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
  • Block exe files from running
  • Blocks internet connection
  • Installs itself without permissions
  • Normal system programs crash immediatelly
Infection Video Windows Care Taker

Windows Care Taker

Windows Care Taker is nothing but a scam so you should not get hooked on this fraudulent program which seeks to steal your money. You can claim that this fake application protects your system very carefully; however, Windows Care Taker only makes you believe that it does it that way.

Windows Care Taker might get on your computer via Trojans which might be caught when opening a suspicious email attachment, running simulated online scan or performing other action on the Internet. Once the rogue is in the system, it will modify the registry so that the malware starts running when you log on to Windows. Moreover, Windows Care Taker will continually pop up fake messages claiming that your system is infected with simulated viruses, which might be harmless files after all. The simulated scan results might leave you in a state of uncertainty about further actions. In such a case, the only possible action is to remove this obnoxious and fabricated malware from the system.

It is up to you how you choose to delete Windows Care Taker. The fact is that it must be removed from the system if you do not want to expose your financial data while paying the criminals for this fake application. Let a legitimate application scan your system, which is strongly recommended, and get rid of Windows Care Taker. You could also refer to the manual removal guidance to get rid of this malware.

UDPATE

If you are dealing with Windows Care Taker, you might want to jot this code down:

0W000-000B0-00T00-E0020

This activation key is there to help you with the Windows Care Taker's removal. Click the "Activate Ultimate Protection" button on the rogue's interface and enter the key into the rogue's registration box. It will only be in effect for a few minutes, but even these few minutes are gold when you are dealing with Windows Care Taker.

The reason why it is the best to register Windows Care Taker before removing it, is that this rogue shares its capabilities with other versions of the same infection - Windows Custodian Utility, Windows Shielding Utility, Windows Warding System and others. Just like its predecessors Windows Care Taker blocks your Registry Editor and Windows Task Manager to prevent you from removing the rogue on your own. Then it denies you the Internet access, thus successfully cutting you off from the means of automatic rogue removal as well.

Naturally, Windows Care Taker makes it seem as though all of this erratic behavior is caused other "viruses" and so it lets you know about them in the form of false security notices:

Error
System data security is at risk.
To prevent potential PC errors, run a full system scan.

Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.

Warning! Identity theft attempt Detected
Hidden connection IP: 58.82.12.124
Target: Your passwords for sites

All of that is absolute rubbish, and you need to ignore these messages point blank. Once you register Windows Care Taker with the code provided above, do not waste any second and find a computer safety application that will help you to remove Windows Care Taker for good. Keep in mind, that the longer you allow this rogue to remain your computer, the more damage your system receives.

Download Spyware Removal Tool to Remove* Windows Care Taker
  • Quick & tested solution for Windows Care Taker removal.
  • 100% Free Scan for Windows

How to renew your internet connection:

This rogue antispyware blocks your Internet connection to prevent you from removing the rogue application. To enable the Internet connection, please follow these instructions:
  1. Open Internet Explorer and go to >Tools< select >Internet Options<

  2. Select >Connections<

  3. Select >LAN Settings<

  4. Now you need to uncheck the checkbox labeled >Use a proxy server for your LAN< in Proxy Server section. Then press the >OK< button to close this screen and press the >OK< button to close the Internet Options screen.

  5. Now you can download the SpyHunter scanner and remove the infection.

Download Spyware Removal Tool to Remove* Windows Care Taker
  • Quick & tested solution for Windows Care Taker removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Care Taker

Files associated with Windows Care Taker infection:

Windows Care Taker.lnk
Protector-bjsv.exe
%AppData%\NPSWF32.dll
%AppData%\Protector-[Random].exe
%AppData%\result.db
%CommonStartMenu%\Programs\Windows Care Taker.lnk
%Desktop%\Windows Care Taker.lnk

Windows Care Taker DLL's to remove:

%AppData%\NPSWF32.dll

Windows Care Taker processes to kill:

Protector-bjsv.exe
%AppData%\Protector-[Random].exe

Remove Windows Care Taker registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "okanrqfdwk"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\atro55en.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\esafe.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install[4].exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mssmmc32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pcip10117_0.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\scrscan.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utpost.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.