What is Windows Web Commander and why it has to be eliminated in the first place from the system? This is a new virus which was detected by our analytics inside the web. Windows Web Commander is very dangerous one; it has almost the same aims and methods of work inside the system as many others do.
When you notice Windows Web Commander inside your system you should keep in mind that it will do anything to get what it wants. There can be a lot of messages and pop-ups during the virus' running. All you have to do is to eliminate the rogue as soon as possible from your system.
We recommend you to delete the rogue with the help of our anti-spyware program GridinSoft Trojan Killer. Download it here below, watch the vide removal guide and just follow every step. The virus will be eliminated in several minutes.
Windows Web Commander automatic remover:
Upon detection of viruses click Remove Selected. Reboot your computer if prompted.
Similar video guide at our Youtube channel:
Windows Web Commander manual remover:
Delete Windows Web Commander files:
Protector-[rnd].exe in %AppData% folder
Delete Windows Web Commander registry entries:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Inspector %AppData%\Protector-[rnd].exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnHTTPSToHTTPRedirect 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\ID 4
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\UID [rnd]
HKCU\Software\Microsoft\Windows\CurrentVersion\Settings\net [date of installation]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorAdmin 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\ConsentPromptBehaviorUser 0
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\EnableLUA 0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe
No comments:
Post a Comment