1 of 5
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's

Windows Armour Master

Look out for Windows Armour Master. It is a rogue antispyware application and it looks a lot like a legitimate antivirus program, but that is a feature shared with all of its predecessors - Windows Salvor Tool, Windows Necessary Firewall, Windows Proofness Guarantor and many more. All of these dangerous computer threats belong to the Fake Microsoft Security Essentials scam.

Once Windows Armour Master is installed in your system, it loads automatically with your Windows and you can see the rogue's screen displayed right before Windows desktop loads. Then, it will urge you to perform a fake system scan. During the scan Windows Armour Master will find numerous problems in your computer such as viruses, system errors, registry errors and so on. It will give you a low overall system security rating and then will tell you that 'to optimize your system performance' you need to 'click on "Fix Errors" '.

Needless to say, that "Fix Errors" button will direct you to Windows Armour Master's purchase page. It will tell you that you computer will be fixed once you pay for the full version of the rogue. Keep in mind that all the notifications and error messages might disappear when you pay, but the rogue will remain in your computer, and will start the vicious circle all over after some time, while your money will be stolen already by the criminals who have gotten a hold of your banking information when you first purchased absolutely worthless product.

The fake security error messages sent by Windows Armour Master include:

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Warning!
Location: c:\windows\system32\taskmgr.exe
Viruses: Backdoor.Win32.Rbot

These messages, as well as the scan, are fake and you should pay no attention to them. They are nothing but annoying, just like the rogue itself, so you must remove Windows Armour Master from your computer before it slows down to the point you can no longer operate it. Not to mention that by deleting Windows Armour Master you will avoid being robbed by cyber criminals. So do not hesitate any longer and make sure this rogue disappears from your computer for good.

Download Spyware Removal Tool to Remove* Windows Armour Master
  • Quick & tested solution for Windows Armour Master removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Armour Master

Files associated with Windows Armour Master infection:

%AppData%\Microsoft\[random].exe
deqnhti.exe

Windows Armour Master processes to kill:

%AppData%\Microsoft\[random].exe
deqnhti.exe

Remove Windows Armour Master registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.