Windows Instant Scanner rogue uninstall

The virus detection and removal capabilities of Windows Instant Scanner are under question, and that’s a real mild statement outlining the whole essence of this program. If you don’t mind, we’ll assume you found this particular article via a Search Engine when looking for some way to solve the problem of being constantly bombarded by obnoxious ads, scanners, whatnot. If that hypothesis of ours is true, you are dealing with a piece of the Internet evil which is a sample of scareware.

Windows Instant Scanner can attack users in a most unexpected way. It can make its way into your computer system through a backdoor or an exploit, i.e. some security vulnerability found by a downloader trojan associated with the badware distribution. What happens next is you start getting alerts – a lot of them. These by all means counterfeit popup messages reflect the purported state of your PC being badly contaminated with some unwanted stuff, such as trojans, keyloggers, rootkits, spyware etc. According to the hackers’ intent and anticipation, this should become an unambiguous stimulus for your immediate action. This action implied under the misinforming routine is for you to get yourself a licensed copy of Windows Instant Scanner in order to get the bad items off your workstation. That’s not going to work though – at least, in the genuine way. Having been paid for, the application will show you that all the supposed infections were deleted, but that is such an illusion because none of those had been on your system in the first place.

Still feel like sponsoring the international hacktivism?

Hopefully not – in that case, do yourself a favour and uninstall Windows Instant Scanner fraud now. If you give preferences to Gridinsoft Trojan Killer, it is always at your disposal. Just hit the download button below.

Windows Instant Scanner malware remover:

Delete Windows Instant Scanner files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[rnd].exe
%AppData%\result.db
Delete Windows Instant Scanner registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe