Welcome to remove-malware.net

How to remove Winonlinescanner.com hijacker

Malware Description:
In addition to being a web domain, Winonlinescanner.com is also what we call a browser hijacker of Personal Antivirus (PAV) scareware, i.e. a malicious online entity that employs trojans to play tricks on people’s browsers. In reality, it looks like this: your internet session may get suddenly interrupted and taken to Winonlinescanner.com website without a slightest hint of your consent. When you hit Winonlinescanner.com, it appears to be a scanner that roams through your PC’s hard drives in search of potential risks. It’s no wonder Winonlinescanner.com scanner does detect a whole bunch of such issues that, according to the deceptive popup ads, need to be immediately removed. And beyond doubt, Winonlinescanner.com will then prompt installing Personal Antivirus to terminate all malicious processes in a drumbeat. The trick is that Winonlinescanner.com scanner is framed-up to make you think your computer needs new antivirus protection software – Personal Antivirus. However, you should ignore all Winonlinescanner.com recommendations regarding Personal Antivirus installation, otherwise you will put your computer and your privacy at risk since PAV is malware. Remove Winonlinescanner.com hijacker by following the instructions below.

Malware Type: Browser Hijackers

Malware Author: Innovagest2000 SL

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Winonlinescanner.com Hijacker Free Scanner and Remover: Download Now

Winonlinescanner.com Screenshot:

Winonlinescanner.com Fake Scanner Screenshot:

How to remove Winonlinescanner.com hijacker manually:
Manual removal of Winonlinescanner.com hijacker and attendant malware is feasible if you have sufficient expertise in dealing with program files, system processes, .dll files and registry entries.

The associated files to be deleted are listed below:

• %Documents and Settings%\All Users\Desktop\Personal Antivirus.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
• %UserProfile%\Application Data\Personal Antivirus
• %UserProfile%\Application Data\Personal Antivirus\settings.ini
• %UserProfile%\Application Data\Personal Antivirus\uill.ini
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
• %UserProfile%\Application Data\Personal Antivirus\db
• %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
• %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
• %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• %Program Files%\Personal Antivirus
• %Program Files%\Personal Antivirus\activate.ico
• %Program Files%\Personal Antivirus\Explorer.ico
• %Program Files%\Personal Antivirus\PerAvir.exe
• %Program Files%\Personal Antivirus\unins000.dat
• %Program Files%\Personal Antivirus\uninstall.ico
• %Program Files%\Personal Antivirus\working.log
• %Program Files%\Personal Antivirus\db
• %Program Files%\Personal Antivirus\db\DBInfo.ver
• %Program Files%\Personal Antivirus\db\ia080614.db
• %Program Files%\Personal Antivirus\db\ia080618x.db
• %Program Files%\Personal Antivirus\Languages
• %Program Files%\Personal Antivirus\Languages\IAEs.lng
• %Program Files%\Personal Antivirus\Languages\IAFr.lng
• %Program Files%\Personal Antivirus\Languages\IAGer.lng
• %Program Files%\Personal Antivirus\Languages\IAIt.lng
• %WINDOWS%\system32\log.txt
• %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

The related registry entries to be removed are as follows:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”

Please, be aware that manual removal of Winonlinescanner.com hijacker is a cumbersome procedure and does not ensure complete deletion of the malware, due to the fact that some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Winonlinescanner.com hijacker, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.