1 of 4
Danger level 10
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Can't be uninstalled via Control Panel
  • Blocks system files from running
  • Blocks Internet browsers
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Cant change my homepage
  • Annoying Pop-up's
  • Slow Computer

Windows AntiVirus Tool

Windows AntiVirus Tool is one of the most recent rogue antispywares, and this despicable application is continuing the cunning work of such virtual schemers’ instruments as Windows AntiVirus Suite. All fake security tools from this family have been implemented with a variety of infiltration channels, and now it is nearly impossible to tell how the latent program could attack your personal Windows system. The rogue could use malvertisement, social engineering, black hat SEO scams, popular spam email attachment attacks, or even could enter with the help of already existing malware, like Trojans or browser hijackers. All in all, once the rogue is inside, it is possible that your system’s functionality will be violated until you remove Windows AntiVirus Tool with all of its malignant components. Both manual and automatic removal operations could become hardly practicable, because the infectious application has many obnoxious tricks to stop anyone from having it deleted.

It is a known fact that many people do not even think about having Windows AntiVirus Tool deleted, because this application’s interface is so cunning that most Windows users think this tool is truly detecting malware, and only its fully licensed version could remove it all. Purchasing fake tool’s full version could harm both – your financial integrity and personal privacy, as schemers could potentially use personal information, collected during rogue product’s purchase operations, in additional scams! If you do not want to realize that your name is pinned to similar deception attacks, you need to delete Windows AntiVirus Tool right away. Below you will see more information about infection’s manual removal; however, we strongly recommend using automatic removal tools for this virus’ erasure.

You will find the instructions which will help you to access the internet and download the automatic malware remover, for instance, SpyHunter below. This tool is able to detect all the FakeVimes family infections, including Windows Antivirus Tool and other similar applications like Windows AntiBreach Helper, Windows Antibreach Suite, and Windows Paramount Protection. You should know that the manual removal itself is very difficult and it is only suitable for highly experienced computer users. Furthermore, you can enter one of the following activation keys to stop the symptoms of this rogue application. You just have to click on the blue question mark at the top of this fake program and then select Register. However, we strongly recommend that you erase Windows Antivirus Tool entirely from the system because it might slow down your computer considerably and do other unfair activities behind your back.

Activation keys:

0W000-000B0-00T00-E0001

0W000-000B0-00T00-E0002

0W000-000B0-00T00-E0003

0W000-000B0-00T00-E0011

0W000-000B0-00T00-E0022

0W000-000B0-00T00-E0023

0W000-000B0-00T00-E0031

0W000-000B0-00T00-E0032

0W000-000B0-00T00-E0033

Windows Antivirus Tool removal

  1. Restart your computer and keep tapping F8 until the Advanced Boot Options menu appears.
  2. Select Safe Mode with Command Prompt using arrow keys and press Enter.
  3. Enter cd.. after C:\Windows\system32 and tap Enter.
  4. Type explorer.exe right after C:\Windows and press Enter.
  5. Click Start and then select Search (launch RUN if you are a Windows XP user).
  6. Enter %appdata% and press Enter.
  7. Locate svc-{random letters}.exe and right-click on this file, then select Delete.
  8. Restart your computer in a Normal mode.
  9. Click on the Start button again and then select Search (launch RUN if you are using Windows XP).
  10. Enter regedit.
  11. Move to HKEY_CURRECT_USER\Software\Microsoft\Windows NT\Current Version\Winlogon .
  12. Locate Shell and right-click on it. Select Modify.
  13. Enter %WinDir%\Explorer.exe and press OK.
  14. Go to http://www.pcthreat.com/download-sph and download SpyHunter.
  15. Install it and scan your system.
Download Spyware Removal Tool to Remove* Windows AntiVirus Tool
  • Quick & tested solution for Windows AntiVirus Tool removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows AntiVirus Tool

Files associated with Windows AntiVirus Tool infection:

%AppData%\data.sec
%AppData%\svc-[random file name].exe

Windows AntiVirus Tool processes to kill:

%AppData%\svc-[random file name].exe

Remove Windows AntiVirus Tool registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bckd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bckd "ImagePath" = "123123.sys"
Disclaimer

Comments

  1. Christian Jul 9, 2014

    Uh, one time i just was spamming or clicking it all and it crashed and i managed to get a anti-virus called Emisoft, But yet i do have a slow computer, Pcthreat can i send link to the anti-virus emisoft?

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.