Windows Pro Rescuer is a fake anti-spyware program that tries to make you think that your computer is infected with viruses, spyware and trojans. It uses a fake scanner and displays various security notifications for this purpose. Windows Pro Rescuer prompts you to pay for a full version of the program to remove the supposedly found infections. What you need to know is that the only real infection is the rogue program itself. Don't buy it because this program is a scam. Remove Windows Pro Rescuer from your computer as soon as possible using legitimate malware removal software like Spyhunter, STOPzilla or MalwareBytes anti-malware.
Once installed, Windows Pro Rescuer may block legitimate anti-virus and anti-spyware programs installed on your computer. Usually, it states that particular program is infected and you should uninstall it in order to protect your computer. Then it simulates fake system scan and display a list of false system security issues and malware infections to trick you into thinking that your computer is infected. As a typical rogue anti-spyware program, Windows Pro Rescuer will also display many fake security alerts and notifications about dangerous infections and possible identity theft attempts.
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Finally, Windows Pro Rescuer may block certain system components and options, such as Task Manager, Registry Editor and others. The rogue program uses browser hijacking and redirects users to various dangerous and even infected websites that promote rogue security products or display false online advertisements that may also lead to malware infiltration. As you can see, this fake program is a typical scam that uses various malicious methods to trick users into purchasing the program. If you find that your computer is infected with this virus, please follow the removal instructions below to remove Windows Pro Rescuer from your computer upon detection.
To stop infinite security alerts and notifications, use this code: 0W000-000B0-00T00-E0020 to register Windows Pro Rescuer. Registration may stop the alers, but will not remove the infection. Use the reputable antispyware tools to remove this parasite. You can find several programs to remove Windows Pro Rescuer below.
The latest parasite names used by FakeVimes:
Windows Pro Rescuer manual removal:
Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "ID" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "net" = "2012-2-17_2"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avp32.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avpcc.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsashDisp.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsdivx.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmostat.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsplatin.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstapinstall.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszapsetup3001.exe
Windows Pro Rescuer