Remove "Firewall Warning" Pop up. Description and removal instructions

 
Title: "Firewall Warning" Pop up

Type: Adware
Severity scale:  (32 / 100)
 
"Firewall Warning" Pop up is a false security warning generated by rogue anti-spyware WinPC Antivirus. This "Firewall Warning" alert states that WinPC Antivirus has detected a hidden file transfer to remote computer. The "Firewall Warning" Pop up reads:

"FIREWALL WARNING. Hidden file transfer to remote host was detected. WinPCAntivirus has detected that somebdoy is trying to transfer your private data via Internet. We strongly recommend you to block the attack immediately. Details of the attack: remote host transfer IP 97.216.34.74; remote user computer name 'FORENSICS'"

Firstly, it is very important to ignore "Firewall Warning" alert, because it promotes fake spyware remover WinPC Antivirus. If you click this fake notification, you will automatically download WinPC Antivirus. Secondly, "Firewall Warning" pop-up must be removed as soon as possible, because as we have mentioned before, it will download ans install rogue application. So, basically system will be flooded with even more fake notifications. Please use manual "Firewall Warning" pop up removal guide stated below.


Related files: Launch WinPC Antivirus.lnk, delwdef2008.bat, [Random Name].tmp, data.dat, WinPC Antivirus.LNK, FwHookDrv.sys, HOSTS.hst, manual.url, options.xml, reserve.dat, Rules.txt, siren.wav, support.url, svo.scf, Web.url

"Firewall Warning" Pop up properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

"Firewall Warning" Pop up snapshot:


Automatic "Firewall Warning" Pop up removal:

remover for "Firewall Warning" Pop up

"Firewall Warning" Pop up manual removal:

Kill processes:
WinPCAntivirus.exe WDefDemo.exe Uninstall_st_st_.exe Uninstall.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinPCAntivirus
HKEY_LOCAL_MACHINE\SOFTWARE\WinPCAntivirus.com
HKEY_CURRENT_USER\Software\WinPC Antivirus
HKEY_CURRENT_USER\Control Panel\don’t load “scui.cpl”
HKEY_CURRENT_USER\Control Panel\don’t load “wscui.cpl”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “sysav”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusDisableNotify” => 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallDisableNotify” => 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “UpdatesDisableNotify” => 1
Delete files:
Launch WinPC Antivirus.lnk delwdef2008.bat [Random Name].tmp data.dat WinPC Antivirus.LNK FwHookDrv.sys HOSTS.hst Manual.url options.xml reserve.dat Rules.txt siren.wav Support.url svo.scf Web.url
Delete directories:
%ProgramFiles%\WinPC Antivirus\
%ProgramFiles%\WinPC Antivirus\rules
%ProgramFiles%\WinPC Antivirus\temp
%ProgramFiles%\WinPC Antivirus\vfile

Other programs to remove "Firewall Warning" Pop up:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 08/04/09
Information updated: 08/04/09

Additional resources related to "Firewall Warning" Pop up:

Attention: If you know or you have a website or page about "Firewall Warning" Pop up removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about "Firewall Warning" Pop up parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: