Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Blocks internet connection
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
  • Cant change my homepage
  • Shows commercial adverts

Windows Antivirus Care

If you see an unfamiliar computer scanner running, and it uses the name of Windows Antivirus Care, we are afraid that your Windows system is under an attack of a treacherous application, which only resembles a legitimate antispyware, and in reality is a harmful, fake security program. It will not be hard for Windows Antivirus Care to infiltrate into your PC, if it is not protected by security tools, which can automatically remove such malware or guard your system against any malicious invasions, but do not worry even if your Windows are already infected, because we are here to help!

If you browse and download carelessly, it is not surprising that Windows Antivirus Care is running in your system, as this particular malware travels via encrypted downloads, online scanners, spam email attachments, social engineering scams, active Trojans and various other security cracks. After its installation, Windows Antivirus Care will pop up unexpectedly and start intimidating you in a highly panicking manner, as various, bogus warning messages and pop-up recommendations will start flooding your screen. What is worst, you will not be able to remove these horrendous notifications, as well as other Windows dysfunctions, which may appear amongst Windows Antivirus Care’s activity. Whatever you do, do not think that your best option of getting rid of all of these symptoms is paying money for full Windows Antivirus Care’s version, which will be completely useless, once your system gets infected with real malware!

Windows Antivirus Care is completely fake and all of its given information is bogus as well, so your best option right now is to ignore anything this fake antispyware proclaims. Simply install legitimate security tools, and soon enough you will see that Windows Antivirus Care is acknowledged as a malicious program, which should be removed without wasting any time! If you want to delete Windows Antivirus Care manually, be sure you remove all of its infectious files; otherwise, Windows Antivirus Care might return and backdoors for other malware may be created. In fact, if you have never deleted malignant components before, it is best to leave this task for automatic removal tools!


As mentioned above, Windows Antivirus Care will present such fictitious security notifications and warnings:

Activate Windows Antivirus Care to get ultimate protection against Identity Theft, Viruses, Malware and other threats!

Warning! Virus Detected
Threat detected: FTP Server

Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

Potential malware detected.
It is recommended to activate protection and perform a thorough system scan to remove the malware.

If you do not ignore these fictitious warnings, which you will not be able to remove, you will be pushed to follow the directions found in Windows Antivirus Care’s purchase page. Here, you will be fooled with such reliable-looking, attractive information:

Subscription term
6 Month $49.95
1 Year $59.95
Lifetime $79.95
+Lifetime support $19.95
Total: 99.90 USD

30 Day Money Back Guarantee

Verified by Visa

Do not believe this information and enter the area, appointed for existing Windows Antivirus Care users, where you will be able to enter this code: ( 0W000-000B0-00T00-E0020. This researched license key will help you remove Windows Antivirus Care’s symptoms, and will assist you with the rogue’s removal.

Note: if you have already made a money transaction for the rogue useless license, do not think that you do not need to remove Windows Antivirus Care anymore, as this infection is still in your computer! Moreover, in such case, be sure to inform your bank.

Download Spyware Removal Tool to Remove* Windows Antivirus Care
  • Quick & tested solution for Windows Antivirus Care removal.
  • 100% Free Scan for Windows

How to renew your internet connection:

This rogue antispyware blocks your Internet connection to prevent you from removing the rogue application. To enable the Internet connection, please follow these instructions:
  1. Open Internet Explorer and go to >Tools< select >Internet Options<

  2. Select >Connections<

  3. Select >LAN Settings<

  4. Now you need to uncheck the checkbox labeled >Use a proxy server for your LAN< in Proxy Server section. Then press the >OK< button to close this screen and press the >OK< button to close the Internet Options screen.

  5. Now you can download the SpyHunter scanner and remove the infection.

Download Spyware Removal Tool to Remove* Windows Antivirus Care
  • Quick & tested solution for Windows Antivirus Care removal.
  • 100% Free Scan for Windows

How to manually remove Windows Antivirus Care

Files associated with Windows Antivirus Care infection:

%CommonStartMenu%\Programs\Windows Antivirus Care.lnk
%Desktop%\Windows Antivirus Care.lnk

Windows Antivirus Care DLL's to remove:


Windows Antivirus Care processes to kill:


Remove Windows Antivirus Care registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "okanrqfdwk"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\atro55en.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\esafe.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install[4].exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mssmmc32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pcip10117_0.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\scrscan.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utpost.exe

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.