6/22/2012

Windows Advanced Toolkit virus removal

Windows Advanced Toolkit is a phony application which has nothing to do with the decent antispyware programs. The virus roves through Internet and looks for potential victims. Millions of computers worldwide have already been infected. If anyone has faced this parasite he/she describes it in three words: annoying, aggressive, and unwanted.



The IT criminals who have released Windows Advanced Toolkit malware aim to enrich themselves in unfair way. They steal money from innocent PC users. The infection counts on non-advanced computer users. The parasite attempts to distort the real picture of your computer system. In order to implement its evil plan it arranges fake system checkup and finally generates horrible scan results (numerous virus infections are detected). It is made specifically to trick people into purchasing the fake tool. The user may get infection while watching films or downloading music. Do not trust websites that claim they have just scanned your PC. Unfortunately, the infection may also spread with help of trojans. Once installed, Windows Advanced Toolkit brings tons of pop-ups trying to intimidate its victims into paying for the fake tool. Do not trust a single alert displayed by this rogue and remove this deceptive app as soon as possible. We would recommend you to use GridinSoft Trojan Killer. It will deal with your problems quickly and successfully.

Windows Advanced Toolkit malware remover:

malware removal tool

Delete Windows Advanced Toolkit files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[rnd].exe
%AppData%\result.db
Delete Windows Advanced Toolkit registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe

No comments:

Post a Comment