Windows Virtual Firewall scam. Tips for removal.

Windows Virtual Firewall is another fake antivirus program. It penetrates into your system and tries to convince you that its product is totally safe and you do not have to worry about it. But we warn you again about the dangerous aims of such rogues like Windows Virtual Firewall. It wants you to believe that your system is infected with malwares. That is why it shows you the process of scanning and provides you with the list of threats it supposedly finds in side your machine. But each of them is totally fake and you do not have of them inside your system.

Windows Virtual Firewall
Windows Virtual Firewall

All you have to do is to eliminate Windows Virtual Firewall virus from your system. Do not pay any attention to the information it gives you. Just ignore everything. The sooner you remove Windows Virtual Firewall virus the sooner you will get your computer’s stable state back. Until then you will receive a lot of different messages about your system being infected. We recommend you to use our anti-malware program GridinSoft Trojan Killer. This is the program you can really count on. You can download Trojan Killer here below.

Windows Virtual Firewall automatic remover:

Windows Virtual Firewall manual remover:

Delete Windows Virtual Firewall files:
%AppData%\Protector-[rnd].exe
Delete Windows Virtual Firewall registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe

Leave a Comment

*