How to remove Windows Antivirus Pro rogue anti-spyware

Malware Description:
Windows Antivirus Pro (aka Win Antivirus Pro) is a new pseudo antivirus tool that pretends to be a useful utility to have on one’s PC, while it’s NOT. As a rule, Windows Antivirus Pro is distributed by trojan viruses that sneak inside a targeted system through security exploits or firewall vulnerabilities. Typically, Windows Antivirus Pro manifests itself through its ads that pop up to alarm you about some malware problems you allegedly have on board. Additionally, Windows Antivirus Pro may trigger its bogus scanners that imitate a PC check for the presence of infections. Windows Antivirus Pro scanners always report malware, even if you actually have none. The entire deceptive loop is supposed to end up getting you to purchase Windows Antivirus Pro commercial version by making you think you badly need it to resist the framed-up malicious activity. It’s essential to keep sober and refrain from following any recommendations prompted by Windows Antivirus Pro and its worthless deceptive ads. What you should do is remove Windows Antivirus Pro unregistered version if it stealthily attacks your system. The longer Windows Antivirus Pro scamware stays inside your PC, the more likely it is to disrupt your Operating System and compromise your privacy.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Windows Antivirus Pro Free Scanner and Remover: Download Now

Windows Antivirus Pro Screenshot:

Windows Antivirus Pro

How to remove Windows Antivirus Pro and affiliated threats manually:
Manual removal of Windows Antivirus Pro is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %UserProfile%\Desktop\Windows Antivirus Pro.lnk
  • %UserProfile%\Start Menu\Programs\Windows Antivirus Pro
  • %UserProfile%\Start Menu\Programs\Windows Antivirus Pro\Windows Antivirus Pro.lnk
  • %Program Files%\Windows Antivirus Pro\
  • %Program Files%\Windows Antivirus Pro\ANTI_files.exe
  • %Program Files%\Windows Antivirus Pro\msvcm80.dll
  • %Program Files%\Windows Antivirus Pro\msvcp80.dll
  • %Program Files%\Windows Antivirus Pro\msvcr80.dll
  • %Program Files%\Windows Antivirus Pro\Windows Antivirus Pro.exe
  • %Program Files%\Windows Antivirus Pro\tmp\
  • %Program Files%\Windows Antivirus Pro\tmp\dbsinit.exe
  • %Program Files%\Windows Antivirus Pro\tmp\wispex.html
  • %Program Files%\Windows Antivirus Pro\tmp\images\
  • %Program Files%\Windows Antivirus Pro\tmp\images\i1.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\i2.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\i3.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\j1.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\j2.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\j3.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\jj1.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\jj2.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\jj3.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\l1.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\l2.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\l3.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\pix.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\t1.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\t2.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\up1.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\up2.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\w1.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\w11.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\w2.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\w3.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\w3.jpg
  • %Program Files%\Windows Antivirus Pro\tmp\images\wt1.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\wt2.gif
  • %Program Files%\Windows Antivirus Pro\tmp\images\wt3.gif
  • %WINDOWS%\ppp3.dat
  • %WINDOWS%\ppp4.dat
  • %WINDOWS%\svchast.exe
  • %WINDOWS%\system32\bennuar.old
  • %WINDOWS%\system32\dddesot.dll
  • %WINDOWS%\system32\desot.exe
  • %WINDOWS%\system32\sysnet.dat

The registry entries that need to be removed are as follows:

  • HKEY_CURRENT_USER\Software\Softimer
  • HKEY_CURRENT_USER\Software\Windows Antivirus Pro
  • HKEY_CLASSES_ROOT\CLSID\{425882B0-B0BF-11CE-B59F-00AA006CB37D}
  • HKEY_CLASSES_ROOT\CLSID\{F54AF7DE-6038-4026-8433-CC30E3F17212}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F54AF7DE-6038-4026-8433-CC30E3F17212}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Win Antivirus Pro
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AntipPro2009_12
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntipPro2009_12

Please, be aware that manual removal of Windows Antivirus Pro is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Windows Antivirus Pro, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Windows Antivirus Pro Remover

Reader's Comments

  1. jamie thomson |

    I have downloaded your remover program but the virus is not allowing me to run it. Any ideas as this is very worrying and annoying.

    Many thanks

    Jamie

  2. admin |

    Jamie,
    Thanks for your question!
    You should try to run the removal tool in Safe Mode with Networking (it’s entered by pressing F8 repeatedly when your computer is starting).
    Good luck with that!
    Regards,
    RM Team

  3. Jesus |

    I would go to your windows directory and rename regedit.exe to regedit.com then go to Navigate to and select the key:

    HKEY_CLASSES_ROOT\exefile\shell\open\command

    7. In the right pane, double-click the (Default) value.

    8. Delete the current value data, and then type:

    “%1″ %*

    Tip: Type the characters: quote-percent-one-quote-space-percent-asterisk.

    9. Close Regedit utility.

Comment