Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Can't be uninstalled via Control Panel
  • Blocks system files from running
  • Blocks Internet browsers
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Windows AntiVirus Booster

Windows AntiVirus Booster may offer you to purchase its full version, in order to have a fully protected system and guaranteed malware removal, if necessary. Despite this seemingly useful support and the professional looking interface, you must think about this antispyware’s existence within your personal system. Did you download it yourself? Was it a reliable source? Do you have no clue where this strange security tool came from? All of these questions should make you realize that you have to delete Windows AntiVirus Booster from your computer without wasting a dime on its licensed version, because this tool is completely fictitious!

The believable, well-constructed rogue application’s interface has been developed to trick you into trusting it, just like misleading security notifications and a computer scanner, which will attempt to create an illusion that multiple infections have been infiltrated into your system. If you are not careful enough, it is Windows AntiVirus Booster that could incorporate malignant program into your system, which means that only if you remove this devious infection from your system, will it be secured from attacking threats.

Windows AntiVirus Booster full version will never detect and remove truly existing infections, because this tool is only a simulated product for schemers to get your money. Nonetheless, this is not the only reason why you should delete Windows AntiVirus Booster from your system, as with this rogue inside your PC, you might face serious difficulties to run your computer. What is more, more devious threats could endanger your personal security. Therefore, it is strongly recommended having the infection deleted with automatic removal tools; however, those with strong skills will be able to follow manual removal instructions below.

It has been revealed that Windows AntiVirus Booster belongs to the Rogue.VirusDoctor family, and so there is no surprise that the removal of this application is quite complicated. Windows Antivirus Tool, Windows AntiBreach Helper, and tens of other clones have been discovered to block executable files which can disrupt the running of the entire system. Unless you restore full control over your personal computer, you will not be able to delete Windows AntiVirus Booster manually or install automatic malware removal software to perform this task for you. Needless to say, the removal of this infection is extremely important, and so you should not let your hands down.

If you click the ‘question mark’ icon placed at the top of the Windows AntiVirus Booster’s interface, you will be presented with a drop-down menu. Select Register and you will be presented with a box asking you to enter a license key. Even though you need to purchase the full version tool to acquire a license key, there are a few special keys which you can use in order to activate the fake rogue and disable the existing symptoms without wasting a cent. Here is one of them: 0W000-000B0-00T00-E0021. After the key is activated, you need to remove the rogue right away. Use automatic malware removal software to delete all existing computer threats. Alternatively, you can install this software using the instructions below.

Delete Windows AntiVirus Booster

  1. Restart the computer and wait for BIOS to load.
  2. As soon as the screen disappears start tapping F8 to access a menu.
  3. Use arrow keys to select Safe Mode with Command Prompt. Tap Enter.
  4. When the PC reboots you will be introduced to the Command Prompt utility.
  5. Place the cursor right after C:\Windows\system32\ type cd.. and tap Enter.
  6. As the C:\Windows appears type explorer.exe and tap Enter once again.
  7. Click the Start menu icon on the Task Bar and then click Search/RUN.
  8. Type %appdata% and tap Enter to open the Application Data folder.
  9. Delete svc-[random file name].exe and restart the PC in the Normal Mode.
  10. Wait for the PC to reboot, click the Start icon on the Task Bar and then click Search/RUN.
  11. Type regedit and tap Enter to access the Registry Editor.
  12. Go to HKEY_CURRECT_USER\Software\Microsoft\Windows NT\Current Version\Winlogon.
  13. Locate the Shell item, right-click it and select Modify.
  14. Navigate to the Value box, enter %WinDir%\Explorer.exe and click OK.
  15. Now download a reliable malware remover from http://www.pcthreat.com/download-sph .
  16. Install the automatic malware removal program and delete all existing computer threats.
Download Spyware Removal Tool to Remove* Windows AntiVirus Booster
  • Quick & tested solution for Windows AntiVirus Booster removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows AntiVirus Booster

Files associated with Windows AntiVirus Booster infection:

%AllUsersProfile%\Start Menu\Programs\Windows AntiVirus Booster.lnk
%UserProfile%\Desktop\Windows AntiVirus Booster.lnk
%AppData%\data.sec
%AppData%\svc-[random file name].exe

Windows AntiVirus Booster processes to kill:

svc-[random file name].exe

Remove Windows AntiVirus Booster registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\svc-[random file name].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MS-SEC" = %AppData%\svc-[random file name].exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ZSFT" = %AppData%\svc-[random file name].exe
HKEY_LOCAL_MACHINE\Software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableVirtualization" = 0
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bckd "ImagePath" = 22.sys
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.