FrEn

E-mail Print

Free malware removal tool to remove Win Antispyware Center
Written by Administrator  |  Saturday, 22 May 2010 18:49
AddThis Social Bookmark Button
Win Antispyware Center is another rogue Antispyware, another malware that pretends to be an Antivirus. Win Antispyware Center conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Win Antispyware Center. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Win Antispyware Center immediatly from your system.

Win Antispyware Center

To remove Win Antispyware Center (Uninstall Win Antispyware Center)

  • Download this free removal tool for Win Antispyware Center
  • Extract it
  • Launch
  • Click on the delete button

Win Antispyware Center will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

  • av.exe

Files :

  • %ProgramFiles%\WinAntispywareCenter\av.exe
  • %ProgramFiles%\WinAntispywareCenter

Registry

Registry keys created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\shell
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\shell\open
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\shell\open\command
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\DefaultIcon
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\open
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\open\command
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\runas
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\runas\command
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\start
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\start\command
  • HKEY_CURRENT_USER\Software\Microsoft\Multimedia\DrawDib
  • HKEY_CURRENT_USER\Software\Classes\.exe
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\secfile
  • HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
  • HKEY_CURRENT_USER\Software\Win Antispyware Center

Registry values created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.exe\shell\open\command
    • (Default) = ""%ProgramFiles%\WinAntispywareCenter\av.exe" /START "%1" %*"
    • IsolatedCommand = ""%1" %*"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\open\command
    • (Default) = ""%ProgramFiles%\WinAntispywareCenter\av.exe" /START "%1" %*"
    • IsolatedCommand = ""%1" %*"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\runas\command
    • (Default) = ""%1" %*"
    • IsolatedCommand = ""%1" %*"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\shell\start\command
    • (Default) = ""%1" %*"
    • IsolatedCommand = ""%1" %*"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile\DefaultIcon
    • (Default) = "%1"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\secfile
    • (Default) = "Application"
    • Content Type = "application/x-msdownload"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    • Win Antispyware Center = "%ProgramFiles%\WinAntispywareCenter\av.exe"
  • HKEY_CURRENT_USER\Software\Microsoft\Multimedia\DrawDib
    • vga.drv 640x480x32(BGR 0) = "31,31,31,31"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • Win Antispyware Center = "%ProgramFiles%\WinAntispywareCenter\av.exe"
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
    • (Default) = ""%ProgramFiles%\WinAntispywareCenter\av.exe" /START "%1" %*"
    • IsolatedCommand = ""%1" %*"
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
    • (Default) = ""%ProgramFiles%\WinAntispywareCenter\av.exe" /START "%1" %*"
    • IsolatedCommand = ""%1" %*"
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
    • (Default) = ""%1" %*"
    • IsolatedCommand = ""%1" %*"
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
    • (Default) = ""%1" %*"
    • IsolatedCommand = ""%1" %*"
  • HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
    • (Default) = "%1"
  • HKEY_CURRENT_USER\Software\Classes\secfile
    • (Default) = "Application"
    • Content Type = "application/x-msdownload"
  • HKEY_CURRENT_USER\Software\Win Antispyware Center
    • defaultCfg = "%Windir%\inf\McVfUydyG.CA;5001;%Windir%\Microsoft.NET\Framework\v2.0.50727\CONFIG\Browsers\AWGbToyq.exe;2;%Windir%\pchealth\helpctr\System\images\Expando\ugcxjMxZUmY.JT;7;%System%\HlswUFlkgJq.R;4;%System%\KEnIyXsDnjW.Vhu;
    • first = "1"

 

Download

 
 

Add comment


Security code
Refresh

Related articles
Latest posts

  • Free malware removal tool for Guard Online

    Written by %s admin 10/10/2011
    Guard Online is a another rogue Antispyware from the OpenCloud and AV Guard Online familly, it's a malware that pretends to be an Antivirus. Guard Online conducts a fake scan of your system; you are…
    Read more...

  • Free malware removal tool to remove AV Guard Online

    Written by %s admin 05/10/2011
    AV Guard Online is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. AV Guard Online conducts a fake scan of your system; you are warned by a…
    Read more...

  • Free removal tool to remove Security Guard 2012

    Written by %s admin 05/10/2011
    Security Guard 2012 is a another rogue Antispyware from the OpenCloud familly, it's a malware that pretends to be an Antivirus. Security Guard 2012 conducts a fake scan of your system; you are warned…
    Read more...

  • Free removal tool for Advanced PC Shield 2012

    Written by %s admin 01/10/2011
    Advanced PC Shield 2012 is a another rogue Antispyware, it's a malware that pretends to be an Antivirus. Advanced PC Shield 2012 conducts a fake scan of your system; you are warned by a fake alarm…
    Read more...

  • Security Sphere 2012 Free Removal Tool

    Written by %s admin 01/10/2011
    Security Sphere 2012 is another spyware from the Security Tool family. Security Sphere 2012 is not a legit program; it's a fake, a counterfeit. Security Sphere 2012 claims to fix your system, but…
    Read more...
.
Information | Contact

© All Rights Reserved. net-studio.org 2009