Windows Advanced Security Center is a fake system security program which associated with Home Security Essentials. You can get infected with Windows Advanced Security Center virus through the freeware or shareware downloads, peer-to-peer software, malicious or hacked websites. This infection pretends to be legitimate Windows product and imitates all the features which real windows product provides. Windows Advanced Security Center imitates Firewall, Automatic Updates, Antivirus Protection, Anti-phishing, Advanced Process Control, Autorun Manager, Service Manager, All-in-one Suite, Quick Scan, Deep Scan, Custom Scan and etc. All these features from the Fake product are fake too.
As all rogue anti-spyware products this virus will show you numerous fake popups, alerts and notifications which will state that you infected will lots of parasites. It may start fake scan of the system, find fake threats. When you click on the alerts Windows Advanced Security Center asks to purchase its Paid version to remove all threats.
Windows Advanced Security Center imitated the real one Security center and its very hard to see the difference. When infected it can replace the legal Windows product with the fake one. Graphic user interfaces are the same. Fake Virus will state that your Firewall is off and your Virus protection is Off. Trojan installer is so smart that before installing it detects you current system and installs the fake one according to your system. Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7.
How to tell the difference? How to recognize if you have a fake security center or valid one?
- You should know, that legal product does not open by itself, without any user interaction.
- Legal product never asks you to purchase, upgrade, subscribe or renew from its own interface. Fake one asks you to purchase Paid licence for the specific rogue security software that installed it in the first place.
- Recent versions are almost perfect replica, but they still have some grammar errors and some bugs in graphics.
Removal process of Windows Advanced Security Center is a hard task. Even with automated tools its hard to remove this virus. It kills all anti-spyware and anti-virus software. Here are some steps you need to take before running reputable anti-spyware program:
- First you need to reboot the computer in Safe Mode with Networking to avoid "Windows Advanced Security Center" from loading at start-up.
- "Windows Advanced Security Center" can prevent any .exe file from downloading. Download the software from another computer. Renaming it to 'nothing.exe' can help.
It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
and Agreement of Use
Windows Advanced Security Center manual removal:
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = 2012-3-1_2
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "fneqtdmtpi"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashCnsnt.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avxmonitor9x.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fnrb32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmod.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oasrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\symtray.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\windows Police Pro.exe
%desktopdir%\Advanced Security Center.lnk
%commonprograms%\Advanced Security Center.lnk
%CommonStartMenu%\Programs\Fake Advanced Security Center.lnk