Windows Attacks Preventor. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as WindowsAttacksPreventor | Type: Rogue Antispyware
12

Windows Attacks Preventor is a rogue antispyware program that claims that your computer is infected and displays bogus security threats to make you think you have some serious PC issues. The rogue program then asks you to purchase a full version of the fake malware removal tool to remove supposedly found system security threats. Do not purchase this program and uninstall Windows Attacks Preventor from your computer as soon as possible because it's a scam, not a real antivirus solution.

Usually, Windows Attacks Preventor is promoted through the use of Trojans, fake online anti-malware scanners and browser hijackers. It can come bundled with other malware as well. Trojans display fake security alerts from Windows Security Center or Task bar and suggest you to install Windows Attacks Preventor to remove non-existent viruses from your computer. Ignore such fake security alerts no matter what they tell you. Otherwise, you may infect your machine even more.

Once installed, Windows Attacks Preventor will start a fake system scan and report a variety of infections or security threats that can't be removed unless you purchase the rogue progra, Remember, scan results are false, you may easily ignore them. The only thing you should worry about is Windows Attacks Preventor itself. Furthermore, this parasite will constantly display fake security alerts stating that your computer is under attack. You will see fake security alerts with the following text:

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

However, that's not all. Windows Attacks Preventor will also hijack your web browser and dramatically slow down your computer. It may block some Microsoft Windows tools and programs to protect itself from being deleted.

As you can see, Windows Attacks Preventor is a scam. If you have purchased this rogue program, please contact your credit card company immediately. Then use the removal guide below to remove this infection from the system. You should also scan your PC with reliable anti-spyware application to make sure that there are no other malware installed on your computer.

The latest parasite names used by FakeVimes:
[newest]

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Attacks Preventor you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Windows Attacks Preventor. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Attacks Preventor (2012-03-02)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Attacks Preventor (2012-03-02)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Attacks Preventor (2012-03-02)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Attacks Preventor (2012-03-02)
Windows Attacks Preventor snapshot
Windows Attacks Preventor

Windows Attacks Preventor manual removal:

Kill processes:
Inspector-[rnd].exe

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainFeatureControlFEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Inspector"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "ID" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "net" = "2012-2-17_2"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "UID" = "rudbxijemb"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avp32.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avpcc.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsashDisp.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsdivx.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmostat.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsplatin.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstapinstall.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszapsetup3001.exe

Unregister DLLs:
npswf32.dll

Delete files:
%appdata%npswf32.dll

%appdata%Inspector-[3 random characters].exe

%desktopdir%Windows Attacks Preventor.lnk

%appdata%result.db

%StartMenu%ProgramsWindows Attacks Preventor.lnk

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author