Windows AV Software uninstall instruction

Written by Administrator | Saturday, 19 February 2011 10:29

Windows AV Software is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. Windows AV Software a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm telling that there are some malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is this Windows AV Software. Windows AV Software invites you to purchase a license for this bogus program to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Windows AV Software as soon as possible from your system with this removal tool for Windows AV Software.

Windows AV Software

To remove Windows AV Software (Uninstall Windows AV Software)

Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
Choose Start computer in SAFE MODE with network support
Open Internet Explorer
Go to Tools => Internet Options => Connections Tab => LAN Settings
Uncheck "Use a proxy server"
Recheck "Automatically detect settings"
Download this free removal tool for Windows AV Software
Extract it
Launch
Click on the delete button

Windows AV Software will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

[Random].exe

Files :

%AppData%\[random]

Registry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
- Debugger = svchost.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore
- DisableSR = 1

Remove Windows AV Software manually :

Restart your computer in safe mode :
- Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
- Choose Start computer in SAFE MODE
Open the infected account
Open explorer, paste into the address bar %AppData% then press enter, it will open C:\Documents and Settings\Christian\Local Settings\Temp on my computer
Remove all .exe files and all random folders under this path
Click on the start menu button then click on run
Type msconfig and press enter
Go to the Startup tab
Uncheck all values which point to an .exe file under %AppData%
Restart your computer in normal mode

This will solve the problem but you can run the removal tool to remove the other registry keys and values.

To find where your %AppData% path is :

Click on the start menu
Click on run
Enter %AppData% and press OK