Dezinstalare WinAntispywareCenter – Ghid pentru Devirusare Completa

WinAntispywareCenter este un program anti-spyware de tip rogue, sau mai bine zis o suita de securitate de tip rogue.
Pretinde ca ofera antivirus, firewall, criptarea datelor si optimizarea sistemului. Este promovat prin intermediul unor Troieni care pretind sa fie codec-uri video sau actualizari flash absolut necesare pentru a urmari continutul online. Programul va afisa numeroase alerte false si va efectua scanari ale PC-ului detectand in mod eronat sute de infectii.

Toate acestea au scopul de a induce in eroare utilizatorul, cu scopul de a achizitiona acest program. Fisierele detectate sunt fie inexistente, fie curate, iar alertele nu trebuie luate in considerare.

WinAntispywareCenter

O parte din alertele generate sunt:

Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.

Severe system damage!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working in the background right now. Perform an in-depth scan and removal now, click here.

Security Breach!
Beware! Spyware infection was found. Your system security is at risk. Private information may get stolen, and your PC activity may get monitored. Click for and anti-spyware scan.

System hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

Privacy alert!
Rogue malware detected in your system. Data leaks and system damage are possible. Click here for a free security scan and spyware deletion.

Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.

Pentru a scapa de acest nepoftit cititi detaliile de mai jos:

Programul creeaza urmatoarele fisiere\foldere:

  • c:\Program Files\WinAntispywareCenter\
  • c:\Program Files\WinAntispywareCenter\av.exe



Ii sunt asociate cheile registry:

HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Win Antispyware Center
HKEY_CLASSES_ROOT\secfile
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “C:\Program Files\WinAntispywareCenter\av.exe” /START “%1” %*
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Win Antispyware Center”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Win Antispyware Center”

In log-ul HijackThis apar urmatoarele intrari:

O4 – HKLM\..\Run: [Win Antispyware Center] C:\Program Files\WinAntispywareCenter\av.exe
O4 – HKCU\..\Run: [Win Antispyware Center] C:\Program Files\WinAntispywareCenter\av.exe

DEVIRUSARE:

1.Descarcati si rulati rkill.com. Acest lucru este ncesar pentru a opri procesul activ folosit de virus. Veti primi probabil o atentionare ca rkill.com este infectat. Ignorati-l, este doar o alarma falsa generata de WinAntispywareCenter.
Rulati rkill.com din nou, pana cand virusul nu mai este activ. Alternativ puteti incerca eXplorer.exe sau iExplore.exe


2. Infectia ascunde Desktop-ul utilizatorului asa ca este necesara activarea lui astfel:
– pentru Windows XP: mergeti la Start >> Run si scrieti %UserProfile%\desktop in casuta respectiva. Apasati Enter.
– pentru Windows Vista\7: deschideti Start si scrieti in casuta de Search: %UserProfile%\desktop si apasati apoi Enter.

3. Descarcati Malwarebytes Anti-Malware. Scanati PC-ul complet si stergeti la final infectiile gasite apasand Remove selected.

Daca ai reusit sa cureti aceasta infectie, iti recomand sa cumperi versiunea PRO a Malwarebytes Anti-Malware pentru a te proteja si pe viitor de astfel de amenintari, avand in vedere ca nu au fost detectate\eliminate de antivirusul tau actual.

Administrator FaraVirusi.com
voluntar al Comodo Malware Research Team, expert Malwarebytes Anti-Malware

Leave a Reply