Windows Recovery Series rogue. Removal guide.

admin | April 30, 2012

Windows Recovery Series is one more malicious program you can easily catch inside the web. Windows Recovery Series wants you to believe that it is a safe program and you have nothing to worry about. When this program penetrates into your system it automatically begins to scan it and provides you with the results. And you will not be asked to install the program or do something else. Windows Recovery Series will do it without your permission. So, Windows Recovery Series shows you the list of threats it supposedly finds in your system and suggests you to eliminate them with the help of its product.

Windows Recovery Series

Windows Recovery Series

But you should keep in mind that Windows Recovery Series is a virus not a good program. Each of those threats is totally fake. You do not have any of them in your system. The virus just wants you to buy its fake product. And it will do everything to achieve its goal. We recommend yopu to eliminate Windows Recovery Series virus from your system as soon as possible. And we have the program which can definitely help you to cope with the virus. GridinSoft Trojan Killer is a program you need for the successful elimination of the virus. Download the program here below and the virus will be deleted in several minutes.

Windows Recovery Series automatic remover:

Windows Recovery Series manual remover:

Delete Windows Recovery Series files:
%AppData%NPSWF32.dll
%AppData%Protector-[rnd].exe
%AppData%result.db
Delete Windows Recovery Series registry entries:
HKCUSoftwareMicrosoftWindowsCurrentVersionRunInspector %AppData%Protector-[rnd].exe
HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsWarnOnHTTPSToHTTPRedirect 0
HKCUSoftwareMicrosoftWindowsCurrentVersionSettingsID 4
HKCUSoftwareMicrosoftWindowsCurrentVersionSettingsUID [rnd]
HKCUSoftwareMicrosoftWindowsCurrentVersionSettingsnet [date of installation]
HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciessystemConsentPromptBehaviorAdmin 0
HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciessystemConsentPromptBehaviorUser 0
HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciessystemEnableLUA 0
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAAWTray.exe
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAAWTray.exeDebugger svchost.exe
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAVCare.exe
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAVCare.exeDebugger svchost.exe
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAVENGINE.EXE
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsAVENGINE.EXEDebugger svchost.exe

Leave a comment

*