1 of 4
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

Windows AV Component

The Fake Microsoft Security Essentials scam is a perpetually growing set of rogue antispyware applications which can turn your computer in a complete mess. To name just a few of them, there are Windows Necessary Firewall, Windows Cleaning Tool, Windows Antidanger Center and many more. Windows AV Component is yet another addition to this batch of malicious applications and you must be weary of it, because this seemingly docile program can actually cause detrimental harm to your computer.

The first indication that you have been infected are various security warning messages which tell you that an unknown Trojan has been detected in your computer and you need to perform a quick system scan to find out what is going on. The message which starts the terrible chain of actions is thus:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

If you click through Windows AV Component's instructions you end up downloading the rogue and ultimately installing it into your system. Keep in mind that Windows AV Component changes the registry entries in your system so that it can automatically load whenever you boot your Windows. When the rogue loads along with the whole system, Windows AV Component's scan window pops into view, and the rogue "scans" your system, giving it a very poor overall security rating.

At the same time Windows AV Component also hinders your system's processes, making your computer work slower than usual. The rogue might block you from accessing various programs, claiming that the files have been infected and they need to be blocked in order to protect your system from further infections. That is why it is easy to think that you might need to use Windows AV Component to remove the threats plaguing your system, but the truth is that all the virus notifications that you see are generating by the rogue itself. It expects you to pay money for the full version of the program, and then to rip you off completely, as the creators of Windows AV Component would already have your credit card information in their hands.

Therefore, you simply must remove Windows AV Component from your computer as soon as possible. Nothing good can come from keeping this rogue in your system. Manual removal can quite a tedious task if you are not familiar with your system's components, so you are recommended to acquire a reliable antimalware tool, which will terminate Windows AV Component for you.

Download Spyware Removal Tool to Remove* Windows AV Component
  • Quick & tested solution for Windows AV Component removal.
  • 100% Free Scan for Windows

How to manually remove Windows AV Component

Files associated with Windows AV Component infection:


Windows AV Component processes to kill:


Remove Windows AV Component registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.