Free malware removal tool for Secure Warrior

Secure Warrior is another fake Antivirus that install itself on your computer. Once installed, it tries to trick you into buying the full version because the one you have is just a shareware. It shows you fake alert, don’t worry about that; I’m sure the only malware in your system is Secure Warrior.

To remove Secure Warrior

• Download this removal tool
• Extract it
• Launch
• Click on the delete button

This virus will be removed from your system in less than a minute. Restart your computer when it’s finished.

After running the patch, your homepage Internet Explorer becomes search.net-studio.org, done deliberately to erase all traces of then malware, BHOs (Browser Helper Object) are also deleted. You can always restore this setting in Internet Explorer options.

Process

• setup[1].exe
• setup[2].exe
• SecureWarrior.exe
• xxx.exe where x is a random charchter.

Files and folders of the malwar

• %ProgramFiles%\SecureWarrior Software
• %ProgramFiles%\SecureWarrior Software\SecureWarrior
• %Temp%\xxxxx.exe where x is a random charchter.
• %Program Files%\SecureWarrior Software
• %Program Files%\SecureWarrior Software\SecureWarrior
• %Program Files%\SecureWarrior Software\SecureWarrior\license.txt
• %Program Files%\SecureWarrior Software\SecureWarrior\securewarrior.exe
• %Program Files%\SecureWarrior Software\SecureWarrior\uninstall.exe
• %WINDOWS%\[RANDROM CHARACHTER].cpl
• %WINDOWS%\[RANDROM CHARACHTER].dll

• %CommonDesktop%\SecureWarrior.lnk
• %CommonPrograms%\SecureWarrior\1 SecureWarrior.lnk
• %CommonPrograms%\SecureWarrior\2 Homepage.lnk
• %CommonPrograms%\SecureWarrior\3 Uninstall.lnk

Registry keys and values created

• HKEY_CURRENT_USER\Software\SecureWarrior
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecureWarrior
• HKEY_LOCAL_MACHINE\SOFTWARE\SecureWarrior
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECUREWARRIORSVC
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecureWarriorSvc
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACHTER].exe"
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SecureWarrior"