Windows Antivirus Patrol scam (removal tool)

Windows Antivirus Patrol is a new scareware. This program might look as a legitimate one, whereas there’s nothing fair in it. It has the only goal – to make you waste your hard earned funds for this totally useless software that pretends to be some powerful anti-spyware program. In reality, it is a typical hoax, an absolute scam, a virus enrobed in the garments of some antivirus. Following this guide will eventually help you to get rid of Windows Antivirus Patrol virus from your system.

Windows Antivirus Patrol malware

The problem with this rogue antivirus is that you can’t remove it easily. You can’t just find its uninstaller in the first place. The hoax simply doesn’t furnish you with an uninstaller, and you obviously have to struggle finding the working remedy to delete this nasty malware from your system. Furthermore, this Windows Antivirus Patrol malware is able to block your system completely, without actually letting you use your PC freely.

Windows Anti Virus Patrol fake antivirus gets into PCs through so-called fake Microsoft Security Essentials Alerts. They’re not legitimate ones, even though outwardly them seem pretty much alike to those real MSE warnings. They tell you about the horrible condition in which your PC supposedly is. They also tell you to download some tool that will be able to remove these fake infections. In reality, if you give your permission to download it, you are actually downloading and installing Windows Antivirus Patrol automatically.

The hoax, after successful entry into your PC without any approval on your part, begins imitation of some system cleanup. So, it runs the fake scanning of your system and reports the large number of fake infections on your PC, telling you to buy is so-called license, which is absolutely good for nothing. In other words, if you decide to invest your money into this program called Windows Antivirus Patrol already installed on your PC, then this is the total waste of your funds. This application will never protect you from serious computer infections. What it does is simply inventing fake threats, reporting them through fake system scans and asking you to buy its license (so-called “ultimate protection”). Please don’t allow this hoax to deceive you. Instead, go ahead and follow this guide below that will help you to remove this malware from your system.


Software necessary for Windows Antivirus Patrol virus removal:

Windows Antivirus Patrol removal steps:

  • In Windows Antivirus Patrol click “?” Menu button anc click “Register”:
  • Register FakeVimes virus

  • Paste this product key – 0W000-000B0-00T00-E0022 exactly as shown at the image below, then click “Register“:
  • FakeVimes reg key

    Note! If this product key has been found to be invalid, try one of these keys as well:

    1. 0W000-000B0-00T00-E0001
    2. 0W000-000B0-00T00-E0002
    3. 0W000-000B0-00T00-E0003
    4. 0W000-000B0-00T00-E0021
  • Afer registration download Plumbytes Anti-Malware without any restrictions on the part of the rogue, scan your PC with Plumbytes Anti-Malware and remove all infections detected by clicking “Apply” button at the end of scan.
  • Restart your computer and repeat scan.

Windows Antivirus Patrol similar removal video at YouTube:

Beware of ways how Windows Antivirus Patrol is spread today:

Windows Antivirus Patrol uses various vulnerabilities of browsers like Internet Explorer, Google Chrome, Mozilla Firefox, Opera and many others for the interference into your computer. For example, you might get the following scary alert, supposedly coming from Microsoft Antivirus:

Microsoft Antivirus fake alert
Microsoft Antivirus has found critical process activity on your PC

Microsoft Antivirus has found critical process activity on your PC. You will need to clean your computer to prevent the system breakage.

If you actually click the “OK” button as shown at the image you will have another fake alert, not associated at all to Microsoft Security Essential Alert, but yet claiming to be such:

Microsoft Security Essentials fake alert
Fake MSE Alert

Microsoft Security Essentials Alert
Potential threat details
Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. You need to clean your computer immediately to prevent the system crash.
Detected items:
– Trojan-PSW.Win32.launch
– HackTool:Win32/Welevate.A
– Adware.Win32.Fraud

Associated files and registry entries:

Related files:

%AppData%\svc-[rnd].exe
%CommonAppData%\connector.swf
%Programs%\Windows Antivirus Patrol.lnk
%Desktop%\Windows Antivirus Patrol.lnk

Related registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PrSft %AppData%\svc-[rnd].exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe\Debugger svchost.exe

Fake security alerts, notifications and warnings of Windows Antivirus Patrol scam:

Firewall has blocked a program from accessing the Internet
C:\Program Files\Internet Explorer\iexplore.exe
is suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.

Error
Trojan activity detected. System integrity at risk.
Full system scan is highly recommended.

Error
System data security is at risk!
To prevent potential PC errors, run a full system scan.

Leave a Comment

Your email address will not be published. Required fields are marked *