1 of 5
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
WindowsClearProblems

Windows Clear Problems

Protecting your PC against dangerous rogue security tools like Windows Clear Problems without some type of help can be a fool’s game. Developers of rogueware like Windows Clear Problems is increasingly investing more and more time and money into their fake applications in an effort to remain one step ahead of users and security tools. This rogue in particular emanates from the same destructive family of rogues as Windows Trouble Solver, Windows Attention Utility and Windows Inspection Utility, and forms part of the now well-known and heavily despised fake Microsoft Security Essentials scam.

Windows Clear Problems will use any nefarious means at its disposal to facilitate its unwarranted and forceful intrusion of its victims’ PCs. These may include using browser hijacking websites and bogus online malware scanners, or most recently infected flash online ads. Once it securely roots itself in the system Windows Clear Problems will configure the system so that it launches each time the user logs on to Windows.

When this happens Windows Clear Problems will launch a fake system scan which will invariably report on various fake security threats being present on the system, such as the fake Backdoor.Win32.Rbot and Unknown Win32/Trojan threats. It will also inform the user that his system is under attack, and the only way to stop this and prevent the system from being damaged will be to pay for a Windows Clear Problems license. Never pay for any Windows Clear Problems product as you’ll only lose your money and gain nothing of value.

As a further attack, Windows Clear Problems will spam the user with fake security alerts in the form of incessant pop up messages. Some of the most popular pop up messages used read as follows:

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Warning!
Location: c:\windows\system32\taskmgr.exe
Viruses: Backdoor.Win32.Rbot

Obviously no correspondence received from Windows Clear Problems can be trusted, and users are warned to immediately get rid of Windows Clear Problems upon detection. This rogue will not stop here. It will cause other annoying and severe symptoms to occur in its effort to force the user’s hand into paying for its worthless software. This encompasses blocking the user’s access to the Internet and preventing him for running any type of application on the infected PC. It will also cause severe erratic system behavior as well as poor system performance.

Do not allow this rogue to fleece you out of your money. Limit the damage it will cause to your PC and destroy Windows Clear Problems completely using a properly functioning security tool. Doing so will also protect your PC against similar attacks in future.

Download Spyware Removal Tool to Remove* Windows Clear Problems
  • Quick & tested solution for Windows Clear Problems removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Clear Problems

Files associated with Windows Clear Problems infection:

%AppData%\Microsoft\[random].exe

Windows Clear Problems processes to kill:

%AppData%\Microsoft\[random].exe

Remove Windows Clear Problems registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.