Windows Security Suite is fake antispyware application from the same family as Virusdoctor, VirusAlarm rogues. Important thing about this parasite is that it can easily block legitimate anti-virus and antispyware applications such as: Kaspersky Antivirus, Ad-Aware, Avast Antivirus, DrWeb, McAfee, Symantec, and Zone Alarm. In this way Windows Security Suite try to protect itself from being removed. Windows Security Suite is promoted through the use of malware and Trojan horses. Once Windows Security Suite gets in touch with your system it will configure itself to start automatically everytime you start your computer. While running, Windows Security Suite will constantly perform full system scans and list you variety of infections that cannot be removed until you first purchase licensed version. But we must inform you that almost all those threats are imaginary or legitimate files. Moreover, while running Windows Security Suite will flood your system with security alerts informing about infections and security risks or hackers attack. All these activities of Windows Security Suite can dramatically slow your computer performance. We advise you to remove Windows Security Suite immediately manually or using automatic removal tool.
Type: Rogue Anti-SpywareMalware Author: Unknown
Threat Level: Critical
Screenshot:
How to remove Windows Security Suite manually:
It's possible to remove Windows Security Suite manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.
The files to be deleted:
%UserProfile%\Application Data\Windows Security Suite
%UserProfile%\Application Data\Windows Security Suite\cookies.sqlite
%UserProfile%\Application Data\Windows Security Suite\Instructions.ini
%UserProfile%\Desktop\Windows Security Suite.lnk
%UserProfile%\Recent\ANTIGEN.drv
%UserProfile%\Recent\CLSV.exe
%UserProfile%\Recent\DBOLE.drv
%UserProfile%\Recent\dudl.sys
%UserProfile%\Recent\energy.dll
%UserProfile%\Recent\grid.dll
%UserProfile%\Recent\grid.sys
%UserProfile%\Recent\kernel32.dll
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\runddl.dll
%UserProfile%\Recent\SM.dll
%UserProfile%\Recent\snl2w.exe
%UserProfile%\Recent\std.exe
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Start Menu\Windows Security Suite.lnk
%UserProfile%\Start Menu\Programs\Windows Security Suite.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
Remove registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "698909210803"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Security Suite"
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "698909210803"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Security Suite"
Please be careful because manual removal of Windows Security Suite may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.
No comments:
Post a Comment