1 of 5
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

Windows Risks Preventions

There is a perpetually growing family of rogue which can drive any user insane. The latest addition to this nest of rogue antispyware is Windows Risks Preventions. You might have encountered the very same rogue previously only by different name. Other versions of this computer threat are called Windows Profile System, Windows Precautions Center, Windows Safeguard Utility and so on. All of them belong to the Fake Microsoft Security Essentials scam and as any other rogue out there Windows Risks Preventions is also created in order to make easy money.

Download Spyware Removal Tool to Remove* Windows Risks Preventions
  • Quick & tested solution for Windows Risks Preventions removal.
  • 100% Free Scan for Windows

Windows Risks Preventions rips easy financial gain by wrapping unsuspecting computer users around its little finger (figuratively speaking). It presents itself as a legitimate security program to the point it copies Windows logo for its interface. Everything is done in order to make Windows Risks Preventions look as if it were a part of or a supplement to the operating system. Once the user is believes that the rogue can safeguard his computer, everything is bound to become even worse.

The rogue's way to your computer can be very simple - it's enough to catch a random Trojan infection to get Windows Risks Preventions, because some Trojans can communicate over the network with other computers and download different types of malicious programs. So once the seed of the infection reaches the system, the user will see this pop up message:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

This notification should scare the user into believing that something is terribly wrong with his computer. By clicking on 'show results' tab the user will be presented with s scarce technical information regarding the supposed threat, but at the same time the Fake Microsoft Security Essentials will calm him down with:

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a serious possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

Obviously, if the user clicks the "OK" button then the Windows Risks Prevention installation will be complete and once the rogue entrenches in the system it will start sending even more fake security alert messages. Not to mention that fake full-system scan it performs. During the scan Windows Risks Preventions supposedly checks various system's security components including computer safety, network security, private data protection, media components, hard disk optimization, memory & devices. It would be good if everything that is displayed on the rogue's attractive interface were true. However, all of the information shown to the user is fake and Windows Risks Preventions only needs your credit card number to rip you off.

Getting your credit card number is very easy especially if you fill in the blanks on Windows Risk Prevention purchase page. Then the criminals can acquire your personal information, credit card number and CVV2 code. With this information at hand they can sweep your bank account clean without you even knowing it. That is why you need to close that purchase page and remove Windows Risks preventions from your computer immediately. Get yourself a good antimalware tool which will not only terminate the rogue, but also safeguard your system against other attacks in the future.

Download Spyware Removal Tool to Remove* Windows Risks Preventions
  • Quick & tested solution for Windows Risks Preventions removal.
  • 100% Free Scan for Windows

How to manually remove Windows Risks Preventions

Files associated with Windows Risks Preventions infection:


Windows Risks Preventions processes to kill:


Remove Windows Risks Preventions registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.