- Block exe files from running
- Installs itself without permissions
- Connects to the internet without permission
- Slow internet connection
- Annoying Pop-up's
- Slow Computer
Windows Accidents Prevention
Seemingly there is no end to the Fake Microsoft Security Essentials fraud. Windows Accidents Prevention is the newest rogue antispyware application which looks and acts exactly the same as Windows Troubles Solver, Windows Risks Preventions, Windows Necessary Firewall, and many more. This rogue pretends to be a legitimate security program in hopes of swindling unsuspecting computer users out of their money. At the same time Windows Accidents Prevention damages the overall system performance, so allowing this rogue to stay in the computer might have terrible consequences.
Windows Accidents Prevention is delivered by Trojan infections or fake online malware scanners. If the user clicks on some suspicious link, he might end up being redirected to a website which hosts the malware, and the download of Windows Accidents Prevention can start automatically. Sometimes, when this rogue is distributed with a Trojan, the infection might be lurking in the computer already.
At first Windows Accidents Prevention reveals its presence by sending a fake security message about Unknown Win32/Trojan which is supposedly detected in the target system. A message pops up saying:
Microsoft Security Essentials Alert
When the user clicks on the "show details" tab, a scan window pops up. After the fake scan, Windows Accidents Prevention states that Trojan.Horse.Win32.PAV.64.a. has infected the computer. It should be noted that all the rogues from this family use the same Trojan name to scare the users with. In order to remove this Trojan, the user is then urged to download and install Windows Accidents Prevention with the following message:
Threat prevention solution found
The users who click on the "OK", might also be taken by surprise when after the download and installation, Windows Accidents Prevention automatically reboot the computer, so that the program would be launched together with the system start-up.
Then Windows Accidents Prevention starts attacking the user relentlessly with random security messages, about various infections which do not exist in the computer. Not to mention that the rogue performs a fake system scan, ranking the overall computer system security by no more than 33%, at the same time prompting the user to acquire the full version of Windows Accidents Prevention, because the unregistered version cannot get rid of all the threats.
Naturally, the user should never trust Windows Accidents Prevention with his money or computer security. The rogue will assist its creators with stealing the money, and will leave the computer system in ruins. Due to such possible consequences the user must remove Windows Accidents Prevention before it meddles with computer processes too much. It can be done either manually or automatically, all the methods are good as long as Windows Accidents Prevention disappears from the computer for good.
How to manually remove Windows Accidents Prevention
Files associated with Windows Accidents Prevention infection:
Windows Accidents Prevention processes to kill:
Remove Windows Accidents Prevention registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'