Severity scale:  
  (99/100)

Windows Prime Booster. How to remove? (Uninstall guide)

removal by Linas Kiguolis - -   Also known as WindowsPrimeBooster | Type: Rogue Antispyware
12

Windows Prime Booster is a fake security program, which can initiate various problems on your computer. It can start slowing it down, download additional viruses, record your keystrokes and additionally steal your personal information. However, the most obvious thing, which is caused by Windows Prime Booster, is its fake alerts and system scanners. This malware is set to manipulate people in order to get revenue, so it displays fake alerts that all report about invented viruses and then offer to purchase its license. However, no matter how trustworthy they look, they ‘detect’ the same viruses no matter how hardly computer is infected. If you noticed continuous warnings from this program, you must ignore them. Of course, you should also don’t forget to remove Windows Prime Booster from the system.

How can Windows Prime Booster infiltrate my computer?

Windows Prime Booster is spread by Trojan horse, which typically infiltrates computers via illegal websites, fake advertisements, spam, unlicensed program and similar means of distribution. In order to avoid such viruses, you should always make sure that you have the latest anti-virus and anti-spyware installed on your computer. As soon as Trojan horse infects computer, it downloads Windows Prime Booster’s files. After that, malware starts displaying its fake and other warning messages that mostly look like that:

Error
Trojan activity detected. System integrity at risk. Full system scan is highly recommended.

Error
System data security is at risk!
To prevent potential PC errors, run a full system scan.

Warning! Identity theft attempt detected
Hidden connection IP: xx.xxx.xxx.xxx
Target: Microsoft Corporation keys
Your IP: XXXXXXXXXXXX

Please, stay away from such and similar notifications because they are forged and set for the only thing – scare people into purchasing Windows Prime Booster's license. If you think that your PC has already been infected, follow this guide:

How to remove Windows Prime Booster?

If Windows Prime Booster infected your computer, you should remove this rogue ASAP. Otherwise, it may download more viruses on it. For scanning the system and eliminating malicious files, we recommend using Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware. If you can't launch any of them, use these instructions:

1. Reboot your computer to Safe Mode with Networking. Just reboot your PC and, as soon as it starts booting up, start pressing F8 repeatedly.
2. Loggin as the same user as you were in normal Windows mode.
3. Now click on IE or other browser and select 'Run As' or 'Run As administrator', enter your Administrator account password (if needed).
4. Enter this link to your address bar: http://www.2-spyware.com/download/hunter.exe and download a program on your desktop. Launch it to kill the malicious processes and remove its files.

The latest parasite names used by FakeVimes:
[newest id=”fakevimes”]

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Prime Booster you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Prime Booster. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Prime Booster (2014-01-14)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Prime Booster (2014-01-14)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Prime Booster (2014-01-14)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Prime Booster (2014-01-14)
Windows Prime Booster snapshot
Windows Prime Booster snapshot

Windows Prime Booster manual removal:

Kill processes:
guard-fvtb.exe

[random].exe

Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "GuardSoftware" = "%AppData%guard-toiy.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWinlogon "Shell"="C:\Users\User\AppData\Roaming\guard-fvtb.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes"=".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAttachments "SaveZoneInformation"=1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsseces.exe "Debugger"="svchost.exe"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsmpeng.exe "Debugger"="svchost.exe"

Delete files:
%AppData%guard-fvtb.exe

%AppData%results1.db