Saturday, February 26, 2011

Windows Tool Removal Guide

Windows Tool Removal Guide
Windows Tool is a rogue anti-spyware program created to deceive computer users and steal their money. Windows Tool gets onto your system and it starts constantly scanning your PC. Then it starts detecting files which are created in advance and recognized as malicious. Windows Tool has no functions except to attack your computer . All of the tactics leads to urging the computer user purchase Windows Tool. Do not fall for this trickery and terminate Windows Tool immediately.

Windows Tool can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Windows Tool shown in the removal guide below. All files related to Windows Tool must be deleted.

Windows Tool should be removed immediately!

Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = '%UserProfile%\Application Data\[RANDOM].exe'

Remove Folders and Files
%UserProfile%\Application Data\[RANDOM].exe

No comments:

Post a Comment