WinPC Antivirus - How to remove April 3, 2009 By Giedrius Majauskas WinPC Antivirus is a rogue anti-spyware application. This parasite is obviously a clone of another rogue called WinPC Defender. It seems that creators of WinPC Defender have changed only the user-interface and have released WinPC Antivirus as a new product. However, WinPC Defender still remains useless and even dangerous application. In other words WinPC Antivirus is a scam. WinPC Antivirus is usually promoted through the use of trojan viruses that display fake security alerts and pop-ups with various infections. Once installed and active, Win PC Antivirus proceeds to perform malicious tactics, such as fake system scan and floods the system with security alerts about malware, spyware and other infections. Here’s one of the security notifications you may receive: FIREWALL WARNING Hidden file transfer to remote host was detected WinPC Anrivirus has detected that somebody is trying to transfer your private data via Internet. We strongly recommend you to block the attack immediately. Details of the attack Remote host transfer IP: 97.216.34.74 Remote user computer name: FORENSICS User E-mail: IP-adress: Blocking is recommended [Block attack] [Allow] The main goal however is to scare the user and convince him to buy a full version of WinPC Antivirus. Unfortunately, WinPCAntivirus won’t help you to remove those infections, simply because it is an infection itself. It is highly recommneded to remove WinPC Antivirus upon detection. Automatic Malware removal tools Download Spyhunter for Malware detection(Win) Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Download Combo Cleaner for Malware detection(Mac) Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy , Manual removal Processes: winav.exe Files: winav.exe WinPC Antivirus.LNK Registers: HKEY_CURRENT_USER\\Software\\WinPC Antivirus HKEY_CURRENT_USER\\Control Panel\\don\'t load \"scui.cpl\" HKEY_CURRENT_USER\\Control Panel\\don\'t load \"wscui.cpl\" HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run \"sysav\" HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Security Center \"AntiVirusDisableNotify\" => 1 HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Security Center \"FirewallDisableNotify\" => 1 HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Security Center \"UpdatesDisableNotify\" => 1 WinPC Antivirus facts Type: Rogue Anti-Spyware Download Spyhunter for Malware detection(Win) Note: Spyhunter trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Download Combo Cleaner for Malware detection(Mac) Note: Combo Cleaner trial provides detection of parasites and assists in their removal for free. limited trial available, Terms of use, Privacy Policy, Uninstall Instructions, Refund Policy , TOC 2 responses to “WinPC Antivirus” My home computer has this. My husband opened an email from someone he knows and its been just like you described and we’ve spent the last couple of evenings trying to get this taken care of. We have Adaware Program and the Norton Anitvirus and this will not take care of it. I chose to manually remove it, and it worked with no problems. I didn’t have 2 of the keys that it suggested to remove, but I removed the others. Thanks! Leave a ReplyYour email address will not be published. Required fields are marked *Comment * Name * Email * Website
My home computer has this. My husband opened an email from someone he knows and its been just like you described and we’ve spent the last couple of evenings trying to get this taken care of. We have Adaware Program and the Norton Anitvirus and this will not take care of it.
I chose to manually remove it, and it worked with no problems. I didn’t have 2 of the keys that it suggested to remove, but I removed the others. Thanks!