Windows ProSecurity Scanner is a rogue rogue anti-spyware program that displays fake security threats and pop-ups to make you think that your computer is infected by malware or has some some other critical security problems that have to be fixed as soon as possible to prevent further damage. It's promoted mostly through the use of Trojans that looks like Windows security alerts. The rogue program is also promoted via fake online scanners and infected websites. It may be also distributed on social networks and via spam. Once installed, Windows ProSecurity Scanner will pretend to scan the computer for malware and after the fake scan it will report numerous critical malware infections and privacy issues to scare you into thinking that your computer is infected. The user is then prompted to pay for a rogue anti-spyware program to remove non-existing infections from the syste. Do not buy it. Instead, please use our removal instructions below to remove Windows ProSecurity Scanner from your computer using legitimate malware removal tools listed below. It displays fake security alerts and notifications too. Fake security alerts read:
Firewall has blocked a program from accessing the Internet.
Windows Media Player Resources
C:\Windows\system32\dllcache\wmploc.dll is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Windows ProSecurity Scanner blocks other programs on the infected computer. It blocks web browsers and Windows utilities stating that they are infected and may cause serious damage to the system. Windows ProSecurity Scanner states that your sensitive data is at risk, privacy is compromised and Internet security disabled. As you can see, it is a scam. It displays fake error messages and security alerts to make you think that your computer in infected with all sorts of malware. Usee the removal guide below to remove Windows ProSecurity Scanner from the system upon detection. We strongly recommend you to use anti-spyware software to remove the rogue program and related malware.
The best way to do it is scanning your system with a legitimate anti-spyware program, for example, Reimage. This way you will also check your system for additional infections which has a better access to your computer when Windows ProSecurity Scanner is running.
The latest parasite names used by FakeVimes:
Windows ProSecurity Scanner manual removal:
Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "ID" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "net" = "2012-2-17_2"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avp32.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avpcc.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsashDisp.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsdivx.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmostat.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsplatin.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstapinstall.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszapsetup3001.exe