Windows AntiVirus Booster uninstall guide

If you would like to remove Windows AntiVirus Booster from your PC, then surely it is a right decision. This program is a fake antivirus, in fact. It cannot do any single good thing for your PC as far as rendering real security services is concerned. However, due to the fact that Windows AntiVirus Booster is a malware in its entire nature, it is not as easy to get rid of it as you want. The rogue creates all kinds of barriers for users when he/she tries to uninstall it regularly.

Windows AntiVirus Booster scam

The truth is that you simply cannot find the uninstaller of Windows AntiVirus Booster. It is simply not available. This hoax gets into PCs by means of fake Microsoft Security Essentials Alerts. Typically this alert comes up in vulnerable browsers and says that the PC is infected with some horrible virus. As a solution to fix the issue, this fake MSE warning indicates that you need to download some tool that will perform the cleanup of your system. When clicking the download button of such fake MSE alert user is actually downloading the Windows AntiVirus Booster rogue into the system.

Windows Anti Virus Booster, after successful installation, makes your PC reboot. You will be really surprised that after the reboot your PC will be completely locked by this scam. Any of your attempts to do something important on the PC will be vain. You will not be able to run any of your programs installed on the PC, or do any other important work.

The hoax has in mind to scare you into buying its license, or so-called ultimate protection. For this purpose it reports the large list of fake (invented) threats, displays a large number of fake security alerts, pop-ups and warnings, and tries to make you think your system is in a horrible condition, full of viruses and trojan horses. Of course, this is not so, but the rogue tells that you need to immediately buy the full version of it to have all these malicious items removed. Once again, these are absolutely fake alerts which have nothing to do with the real condition of your PC.

On the other hand, if real viruses do attack your PC, Windows AntiVirus Booster will not help you remove them or prevent the attack. This program is absolutely helpless to assist you in malware removal or prevention. To bypass the blockage of your PC with this rogue we recommend you to immediately scan your PC with the security software as instructed below. To make it possible please follow the introductory steps which are necessary to make this reliable security software run and remove Windows AntiVirus Booster infection.


Software necessary for Windows Anti Virus Booster virus removal:

Windows AntiVirus Booster removal steps:

  • In Windows AntiVirus Booster click “?” Menu button anc click “Register”:
  • Register FakeVimes virus

  • Paste this product key – 0W000-000B0-00T00-E0022 exactly as shown at the image below, then click “Register“:
  • FakeVimes reg key

    Note! If this product key has been found to be invalid, try one of these keys as well:

    1. 0W000-000B0-00T00-E0001
    2. 0W000-000B0-00T00-E0002
    3. 0W000-000B0-00T00-E0003
    4. 0W000-000B0-00T00-E0021
  • Afer registration download Plumbytes Anti-Malware without any restrictions on the part of the rogue, scan your PC with Plumbytes Anti-Malware and remove all infections detected by clicking “Apply” button at the end of scan.
  • Restart your computer and repeat scan.

Windows AntiVirus Booster similar removal video at YouTube:

Beware of ways how Windows AntiVirus Booster is spread today:

Windows AntiVirus Booster uses various vulnerabilities of browsers like Internet Explorer, Google Chrome, Mozilla Firefox, Opera and many others for the interference into your computer. For example, you might get the following scary alert, supposedly coming from Microsoft Antivirus:

Microsoft Antivirus fake alert
Microsoft Antivirus has found critical process activity on your PC

Microsoft Antivirus has found critical process activity on your PC. You will need to clean your computer to prevent the system breakage.

If you actually click the “OK” button as shown at the image you will have another fake alert, not associated at all to Microsoft Security Essential Alert, but yet claiming to be such:

Microsoft Security Essentials fake alert
Fake MSE Alert

Microsoft Security Essentials Alert
Potential threat details
Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. You need to clean your computer immediately to prevent the system crash.
Detected items:
– Trojan-PSW.Win32.launch
– HackTool:Win32/Welevate.A
– Adware.Win32.Fraud

Associated files and registry entries:

Related files:

%AppData%\svc-[rnd].exe
%CommonAppData%\connector.swf
%Programs%\Windows AntiVirus Booster.lnk
%Desktop%\Windows AntiVirus Booster.lnk

Related registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PrSft %AppData%\svc-[rnd].exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe\Debugger svchost.exe

Fake security alerts, notifications and warnings of Windows AntiVirus Booster scam:

Firewall has blocked a program from accessing the Internet
C:\Program Files\Internet Explorer\iexplore.exe
is suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.

Error
Trojan activity detected. System integrity at risk.
Full system scan is highly recommended.

Error
System data security is at risk!
To prevent potential PC errors, run a full system scan.

Leave a Comment

Your email address will not be published. Required fields are marked *