Friday, December 14, 2012

Remove Microsoft Antivirus 2013Remove Microsoft Antivirus 2013

Remove Microsoft Antivirus 2013
Microsoft Antivirus 2013 is a fake antivirus program that produce fake alert that there are several vulnerabilities are detected in the computer which Microsoft Antivirus 2013 is installed. Microsoft Antivirus 2013 installs into the computer and will configure itself to start automatically (in registry) when Windows boot. Microsoft Antivirus 2013 will scan the computer and WILL SURELY detect many malwares in the computer. In fact, it is just a fake alert. The intention of Microsoft Antivirus 2013 is to urge the user to register Microsoft Antivirus 2013 by purchasing the full version of Microsoft Antivirus 2013 so that to earn some money from the user. Microsoft Antivirus 2013 cannot detect and remove any malware / virus / trojan.


Microsoft Antivirus 2013 can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Microsoft Antivirus 2013 shown in the removal guide below. All files related to Microsoft Antivirus 2013 must be deleted. 

Microsoft Antivirus 2013 should be removed immediately!

Microsoft Antivirus 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[various-file-names].exe

Delete Registry

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "[Download Path]\[various-file-names].exe" -a "%1" %*
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = "[Download Path]\[various-file-names].exe" -a "%1" %*
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "WindowsSecurity" = "[Download Path]\[various-file-names].exe" -a "%1" %*.exe
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "[Download Path]\[various-file-names].exe" -a "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WindowsSecurity" = "[Download Path]\[various-file-names].exe" -a "%1" %*.exe


Remove Folders and Files
[Download Path]\[various-file-names].exe

No comments:

Post a Comment