Windows Web Commander is a rogue program that pretends to be a legal security program. It displays various fake security alerts and security pop-ups that scare the users so that they will purchase the fake security program. It displays continuous security alerts and threatens you with the presence of various harmful malwares. Many people, who do not know about such malicious programs, believe the tool, and thus, they end up buying the full version hoping that it will clear their computer system from the viruses and malwares. The Windows Web Commander, after installing itself, makes many changes in your computer system to make itself a legal program. It also changes the browser’s settings, and whenever you try to access a website, it will redirect you to its own website. Such kind of viruses spread through the spam emails and Trojans, so remove the Windows Web Commander before it does more loss.

Remove Windows Web Commander Processes

  1. Select the button start.
  2. Click on the option from the menu.
  3. Type the taskmgr in the Run program and click on Ok.
  4. When the Windows task manager opens, look for the tab named ‘processes’ and click on it.
  5. You will need to find the process which is named Protector-[rnd].exe to stop the Windows Web Commander Processes from working.
  6. The required process will be under the column name ‘image name’.
  7. Right click on the process. Then click on the option ‘End processes’ to remove the process.

Remove Windows Web Commander DLL file

  1. Open the program Run by using the above steps.
  2. Type cmd this time and press enter.
  3. This will open the Command prompt quickly.
  4. Now to remove the Windows Web Commander DLL file name along with the directory name and press enter.
  5. After that type “regsvr32 /u NPSWF32.dll” into the window and press enter key to remove the file.

Remove Windows Web Commander Registry key values

  1. Open Run program by following the above mentioned steps.
  2. Type regedit in the tab and click Ok.
  3. The regedit command will open the registry editor, which is required to remove the Windows Web Commander Registry key values.
  4. Select the left pane of the registry editor and click on Edit.
  5. Select the option ‘Find’ and enter the registry values in the search box.
  6. Now, right click on the required registry values and click on Delete.

The Windows Web Commander Registry key values that you need to delete are:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe

Remove Windows Web Commander other files

  1. Open the Windows task manager using the above mentioned steps to remove the Windows Web Commander other files.
  2. Or you can also delete these files by clicking on ‘Start’ then on ‘Search’.
  3. Enter the Windows Web Commander File name there, and when the file is found, click on Delete.

%AppData%\Protector-[rnd].exe

%Documents and Settings%\All Users\Start Menu\Programs\Windows Web Commander

%AllUsersProfile%\Application Data\.exe

%UserProfile%\Desktop\Windows Web Commander.lnk

%Program Files%\Windows Web Commander

%AppData%\Protector-[rnd].exe

 

How to remove Windows Web Commander?
Tagged on:                     

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>