Windows Antivirus Machine virus removal instructions

Windows Antivirus Machine, in fact, is a machine that collects money without giving it back. Yes, this is sad reality of the online world today when many hackers invent rogue security programs specifically for the purpose of stealing money from unwary users. The rogue industry is very persistent indeed, and it seems to be resurrected after the long-lasting period of some slowdown. Nevertheless, with this information becoming clear in our minds, you should be aware of the fact that no one can actually escape the negative consequences of this malware spread. This is because the world’s many powerful antiviruses sometimes fail to adequately identify the threat and thus aren’t capable of removing it on a timely basis, before it actually strikes its malicious roots into your system.

Windows Antivirus Machine acts typically like many other rogue antispyware programs from the FakeVimes malware family. The only difference is that the latest rogues are more likely to last for several days if not weeks, whereas some months ago they used to appear for a single day only. Nevertheless, this hoax gets installed onto your system in a likewise manner. It comes like a thief at night – without warning or invitation. Immediately it starts acting like some legitimate antivirus software, but this is surely not so.

Windows Antivirus Machine modifies your PC in such a manner that it gets started automatically together with every system startup. Please ignore whatever this hoax tells you when it starts implementing its malicious plots. You will be reported of various threats that aren’t even peculiar for your machine. And, by the way, the only threat, most probably, is Windows Antivirus Machine itself. The reason why this hoax was elaborated and launched by the online fraudsters is because they want to scare users with a lot of fake and misleading information. Their next step is when they try to bring deceived user to the special page where he/she is asked to enter financial information from their bank card as a payment for the fake licensed version of this junkware (so-called ultimate protection). Do not ever let hackers fool or trick you so easily. You must ignore whatever this scam reports to you. Remove this hoax as described below. By the way, the video guide is for your convenience, so make sure to watch it carefully in order to understand the basis removal principles for this malady.

Windows Antivirus Machine automatic remover:

Removal video guide:

Windows Antivirus Machine manual remover:

Delete Windows Antivirus Machine files:
Protector-[rnd].exe in %AppData% folder
Delete Windows Antivirus Machine registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe

Leave a Comment

*