Windows Rescue Center removal tutorial

Malware Description:
Windows Rescue Center is very much like the other malicious applications from its family (e.g. Windows Crashes Deliverer, Windows Saviour Firewall etc.). We mean the same user interface, similar distribution methods and equally fraudulent goals. Actually, we have been discovering new rogues of this kind daily during the past several months. Windows Rescue Center is today’s threat; it won’t live long though, so perhaps as soon as tomorrow we will be analyzing a new one, and this tendency is likely to move on and on. What’s new about this Windows Rescue Center as compared to its precursors? Well, pretty much nothing but the name. Anyway, allow us to provide the basic features of it. This malware is spreading with the help of the notorious tactic involving the fake Microsoft Security Essentials alert. This element of the badware plan is based on trojan activity which results in displaying a misleading notification informing the user about some dangerous infection found on the computer being compromised. The idea of this alert is to make a victim click the ‘right’ button and hence unknowingly let the malicious show begin. The trojans gradually promote the files that help Windows Rescue Center obtain its shape on your machine. After this, the rogue will display a scan that tries to show you not all is well with your PC. Windows Rescue Center reports system errors and some viruses and concurrently offers you buy its license to activate the system fixing and malware removal options. We bet you already figured nothing will happen after you buy Windows Rescue Center. Maybe it will tell you that the errors have been eliminated but hey, there were none of them in the first place, remember? Windows Rescue Center made up those problems to scare you, that’s it. So do the right thing and remove this mendacious app from your computer now.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Windows Rescue Center Free Scanner and Remover: Download Now

Windows Rescue Center GUI Screenshot:

Windows Rescue Center GUI

Windows Rescue Center displays the following fake MSE alert:

Windows Rescue Center displays fake MSE alert

How to remove Windows Rescue Center manually:
Manual removal of Windows Rescue Center is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %UserProfile%\Application Data\Microsoft\[random].exe

The registry entries that need to be removed are as follows:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe “Debugger” = ‘svchost.exe’
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe “Debugger” = ‘svchost.exe’
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ’0′
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = ’0′
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore “DisableSR ” = ’1′

Please be aware that manual removal of Windows Rescue Center is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal Windows Rescue Center, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Windows Rescue Center Automatic Remover

Like This Article? Let Others Know!

Post a Comment: