Windows Trojans Sleuth. How to remove? (Uninstall guide)

removal by Julie Splinters - -   Also known as WindowsTrojansSleuth | Type: Rogue Antispyware
12

Windows Trojans Sleuth is a rogue anti-spyware program that enters the system via Trojans, malware and software vulnerabilities. This rogue program starts a fake system scan and then states that your computer in infected with viruses and has numerous criticaol system errors. It claims the if you want to fix those errors and remove viruses your computer will crash so you have to pay for a full version of Windows Trojans Sleuth to prevent this. Of course, you shouldn't do that because this program is a scam and wants to steal your money. It won't remove any viruses simply because they are all fake. Fake scan results is a method to scare you into purchasing this rogue security program. Remove Windows Trojans Sleuth from your computer as soon as possible; otherwise it may cause even more problems. You can try to remove it manually or use spyware removal tool given below.

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

Windows Trojans Sleuth will display fake security warnings stating that your computer in infected with spyware, Trojans and other malware. The rogue program will also block other programs including antivirus on your computer randomly and states that they are infected or potentially harmful. Windows Trojans Sleuth is nothing more but a scam. It displays fake infections and security alerts to make you think that your computer in infected. Then it prompts to pay for a full version of the program to clean up the computer. Do not buy it. Instead, use our removal instructions below to remove Windows Trojans Sleuth using an automatic removal tool. If you can't run it in normal mode, try rebooting in safe mode with networking.

The latest parasite names used by FakeVimes:
[newest]

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Trojans Sleuth you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Windows Trojans Sleuth. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Trojans Sleuth (2012-03-05)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Trojans Sleuth (2012-03-05)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Trojans Sleuth (2012-03-05)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Trojans Sleuth (2012-03-05)
Windows Trojans Sleuth snapshot
Windows Trojans Sleuth

Windows Trojans Sleuth manual removal:

Kill processes:
Inspector-[rnd].exe

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainFeatureControlFEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Inspector"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "ID" = 0

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "net" = "2012-2-17_2"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "UID" = "rudbxijemb"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avp32.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avpcc.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsashDisp.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsdivx.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmostat.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsplatin.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstapinstall.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszapsetup3001.exe

Unregister DLLs:
npswf32.dll

Delete files:
%appdata%npswf32.dll

%appdata%Inspector-[3 random characters].exe

%desktopdir%Windows Trojans Sleuth.lnk

%appdata%result.db

%StartMenu%ProgramsWindows Trojans Sleuth.lnk

About the author

Julie Splinters
Julie Splinters - Malware removal specialist

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author