Wednesday, July 4, 2012

Windows Web Commander virus neutralizing process

Almost everyday we publish news about viruses appear in cyber world. We feel it is our duty to inform the users about such threats in order to prevent the infection of them. This time we would like to tell you about Windows Web Commander pest. It is possible to describe it in two words: ANNOYING and AGGRESSIVE. Continue reading this post to know more about this rogue.

After successful installation it initiates fake system scan of your PC. On the termination of the bogus system scans, phony scan results are generated by Windows Web Commander. Plenty of problems inside of your computer are detected. Keep in mind the fact that this unwanted app is trying to mislead you. This is why its reports are invented and problems it finds do not exist in reality. When the user sees scanning reports with such content it is easy to lose consciousness. But do not panic, because panic is the best thing you can ever do for cyber crooks. At the moment when you are in desperation Windows Web Commander offers to buy the registered version to allegedly eliminate all problems found in your PC. Do not trust all such fictitious promises made by this malware. Neither full version nor trial one is capable of anything good because it is the scam. We hope this post will help you to come to the conclusion that you should not endure the presence this rogue inside of your PC. Hence, uninstall this hoax using all instructions stipulated below. If you have any questions, do not hesitate to contact us. GridinSoft Trojan Killer support team is always at your response.


malware removal tool

Delete Windows Web Commander files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[rnd].exe
%AppData%\result.db
Delete Windows Web Commander registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe

No comments:

Post a Comment