Removing Windows Efficiency Master rogue antivirus

Windows Efficiency Master is not a program designed to help, but rather to steal. It cannot do any single good thing for your PC. What is actually has in mind is to steal your money from you by scaring you into buying its license, so-called “ultimate protection”. This guide will help you get rid of Windows Efficiency Master scam.

Windows Efficiency Master virus
Windows Efficiency Master virus (rogue antispyware)

There is a special family of rogue security programs called FakeVimes, and Windows Efficiency Master virus belongs to them. It has first appeared in the world wide web just a few hours ago. This scam attacks PCs in many world countries where Internet is available.

The ways through which Windows Efficiency Master virus is spread are various, however, most often this scam is distributed by means of fake Microsoft Security Essentials Alerts. Please note this fact again – these are fake MSE alerts, not related to your Windows operating system or Microsoft Corporation.

Windows Efficiency Master upon successful infiltration blocks your PC completely and doesn’t really let you do anything with it. The hoax then arranges fake scan of your PC and reports the multitude of fake (invented) threats, which don’t even reside on your PC. The hoax soon tells you that to have those infections cleared you need to buy its full version, also known as “ultimate protection”. In reality, this isn’t protection at all. If real viruses do attack your PC sooner or later, Windows Efficiency Master will not be able to either detect or remove them.

To sum up, Windows Efficiency Master is a scam that wears the garments of some security software. It has in mind to steal your money by prompting you into buying its fake and helpless license. Use this guide to get rid of this virus from your system.


Software necessary for Windows Efficiency Master virus removal:

Windows Efficiency Master removal steps:

  • In Windows Efficiency Master click “?” Menu button anc click “Register”:
  • Register FakeVimes virus

  • Paste this product key – 0W000-000B0-00T00-E0022 exactly as shown at the image below, then click “Register“:
  • FakeVimes reg key

  • Afer registration download Plumbytes Anti-Malware without any restrictions on the part of the rogue, scan your PC with Plumbytes Anti-Malware and remove all infections detected by clicking “Apply” button at the end of scan.
  • Restart your computer and repeat scan.

Windows Efficiency Master similar removal video at YouTube:

Beware of ways how Windows Efficiency Master is spread today:

Windows Efficiency Master uses various vulnerabilities of browsers like Internet Explorer, Google Chrome, Mozilla Firefox, Opera and many others for the interference into your computer. For example, you might get the following scary alert, supposedly coming from Microsoft Antivirus:

Microsoft Antivirus fake alert
Microsoft Antivirus has found critical process activity on your PC

Microsoft Antivirus has found critical process activity on your PC. You will need to clean your computer to prevent the system breakage.

If you actually click the “OK” button as shown at the image you will have another fake alert, not associated at all to Microsoft Security Essential Alert, but yet claiming to be such:

Microsoft Security Essentials fake alert
Fake MSE Alert

Microsoft Security Essentials Alert
Potential threat details
Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. You need to clean your computer immediately to prevent the system crash.
Detected items:
– Trojan-PSW.Win32.launch
– HackTool:Win32/Welevate.A
– Adware.Win32.Fraud

Associated files and registry entries:

Related files:

%AppData%\svc-[rnd].exe
%CommonAppData%\connector.swf
%Programs%\Windows Efficiency Master.lnk
%Desktop%\Windows Efficiency Master.lnk

Related registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PrSft %AppData%\svc-[rnd].exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe\Debugger svchost.exe

Fake security alerts, notifications and warnings of Windows Efficiency Master scam:

Firewall has blocked a program from accessing the Internet
C:\Program Files\Internet Explorer\iexplore.exe
is suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.

Error
Trojan activity detected. System integrity at risk.
Full system scan is highly recommended.

Error
System data security is at risk!
To prevent potential PC errors, run a full system scan.

Leave a Comment

Your email address will not be published. Required fields are marked *