Windows basic antivirus is a very dangerous rogue that should never be trusted and considered. Just like some of the other rogue applications, it is totally different from what it represents. It claims to clean and protect user’s computer system with all kind of viruses and infections; in reality though, it does no such thing. The list of files infected with viruses and all those security alerts shown by the windows basic antivirus are bogus and none of them actually exists. Many people will think what is the purpose of windows basic antivirus and what does it want by showing that the computer system is highly infected? Windows basic antivirus plays its game by scaring the users with the continuously appearing security warnings. The user might trust the tool’s judgment and asks the tool to make his computer system secure. Now the windows basic antivirus asks the users to buy the full version so that it can remove all the viruses from the computer effectively. In fact, what you need to remove is windows basic antivirus and that too immediately. Letting the tool stay in your computer will cause danger to your system as it will give many other malwares a way to enter your computer.

Remove Windows Basic Antivirus processes

  1. Go to start button and select the option run.
  2. Type taskmgr in the given space and press enter.
  3. This command will open window task manger.
  4. Among the different tabs in the windows task manager; find the tab named ‘processes’.
  5. In the tab ‘processes’ look for the processes Inspector[random].exe and Protector-[3 random characters].exe. Right click on the processes and select the option Delete from the menu.

Remove Windows Basic Antivirus DLL files

  1. Go to Start and click on the option Search.
  2. A list of option will appear; choose the option ‘For files and folders’ and press Ok.
  3. Type the file name ‘\NPSWF32.dll’ and select the option Local hard drives to get afst results.
  4. Right click on the obtained file and select Delete.

Remove Windows Basic Antivirus Registry Entries

  1. Click on Start then go with the option Run.
  2. Type ‘regedit’ and press enter.
  3. From the registry editor select the left pane of the editor and click on Edit then go with the option Find. Type the name of registry entries one by one and press Ok.
  4. Now right click on the found result, select Modify and press Delete.

The windows basic antivirus registry entries that you need to find are:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adaware.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\belt.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deputy.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\icload95.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lnetinfo.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mpftray.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\netscanpro.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nssys32.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ozn695m5.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\perswf.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PskSvc.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafetyKeeper.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoler.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vbcons.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winservn.exe “Debugger”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonealarm.exe “Debugger”

Remove Windows Basic Antivirus files

Search the following files as discussed above and press Delete.

%AppData%\Inspector-[random].exe

%AppData%\Protector-[random].exe

%AppData%\NPSWF32.dll

%AppData%\result.db

%UserProfile%\Desktop\Windows Protection Master.lnk

%StartMenu%\Programs\Windows Protection Master.lnk

 

How to remove Windows Basic Antivirus?
Tagged on:         

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>