Windows Web Commander is another fake antivirus that can easily penetrate into your system through the web and do some dirty work around there. That is why we suggest you to be as much careful when you surf the web as you can. This is the program which will do everything it takes to get what it wants from you.
When you notice Windows Web Commander inside your system you should keep in mind that it will do anything to get what it wants. There can be a lot of messages and pop-ups during the virus' running. All you have to do is to eliminate the rogue as soon as possible from your system.
We recommend you to delete the rogue with the help of our anti-spyware program GridinSoft Trojan Killer. Download it here below, watch the vide removal guide and just follow every step. The virus will be eliminated in several minutes.
Windows Web Commander automatic remover:
Upon detection of viruses click Remove Selected. Reboot your computer if prompted.
Similar video guide at our Youtube channel:
Windows Web Commander manual remover:
Delete Windows Web Commander files:
Protector-[rnd].exe in %AppData% folder
Delete Windows Web Commander registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe
No comments:
Post a Comment