Windows Cleaning Toolkit

Just yesterday we informed you about Windows Expert Console – a new rogue antispyware application from Rogue.VirusDoctor family. Another day has come, and it seems like we are about to experience yet another onslaught of these infections, because now we have to deal with Windows Cleaning Toolkit – a fake antivirus application right off the pan. Just like its predecessors this new infection targets your money and it will not leave you be unless you actually purchase the full version of the application. Unfortunately, that will not solve all your problems.

You will only get your computer back if you remove Windows Cleaning Toolkit from your computer. At first it may seem that Windows Cleaning Toolkit is a legitimate application, because it has a sophisticated interface and it definitely behaves like a genuine antivirus application. However, all the infections this rogue informs you of are fake, and the main threat you need to fight is Windows Cleaning Toolkit itself.

You most probably got infected with Windows Cleaning Toolkit, because you accidentally downloaded a Trojan or some potentially unwanted program on your computer. It is very common that users download files from the Internet, thinking they are legitimate applications, but it turns out the opposite. For example, some of the Rogue.VirusDoctor installer files are known to masquerade as .pdf extension files. So while you think that you are about to open a .pdf document, the moment click a file in question, you actually initiate Windows Cleaning Toolkit installation process.

When the rogue settles in your system, it is configured to launch automatically which each system boot up. Actually, right after the installation, Windows Cleaning Toolkit will force your system to restart and then once the PC loads again, the rogue will pop into action performing a fake system scan. Needless to say, that all the malicious “infections” Windows Cleaning Toolkit detects are absolutely fake, and the system messages delivered to you are also nothing, but scam devised to push you into purchasing a worthless product.

If Windows Cleaning Toolkit blocks you from using your Task Manager, Start Menu and Internet browser, reboot your PC in Safe Mode with Networking and download SpyHunter free scanner to launch a full system scan, to find all the malicious files currently present in your computer. Then, invest in a powerful antimalware tool that would help you remove Windows Cleaning Toolkit automatically, and then protect your PC from other similar infections.

In case you need any further guidance, please leave us a comment below. This description will be expanded once detailed research provides more information on the infection.

UPDATE

Due to the fact that Windows Cleaning Toolkit blocks Windows Explorer, you need to restore it in order to install a computer security application on your computer. For that you will need another computer which is not infected with spyware. Follow the instructions below to remove Windows Cleaning Toolkit from your computer for good.

How to remove Windows Cleaning Toolkit

1. Restart your computer and when BIOS screen loads, tap F8 repeatedly.
2. Select Safe Mode with Command Prompt on Advanced Boot Options and press Enter.
3. When system loads type cd.. next to C:\Windows\system32\ in Command Prompt and press Enter.
4. Another line C:\Windows will appear.
5. Type C:\Windows\explorer.exe and press Enter.
6. Windows Explorer will load.
7. Open Start menu and type %appdata% into the search box. Press Enter. For Windows XP Users: Open Start menu, launch Run, enter %appdata% into open box and click OK.
8. When the directory loads, delete the file "guard-{4 random symbols}.exe".
9. Restart the PC in Normal Mode.
10. Open Start menu and enter regedit into the search box. Press Enter. For Windows XP Users: Open Start menu, launch Run, enter regedit into open box and click OK.
11. Go to HKEY_CURRECT_USER\Software\Microsoft\Windows NT\Current Version\Winlogon.
12. Right-click "Shell" on the right pane, select Modify.
13. Change Value Data by typing in %WinDir%\Explorer.exe and click OK.
14. Exit Registry Editor and access http://www.pcthreat.com/download-sph and install SpyHunter.
15. Run a full system scan and remove Windows Cleaning Toolkit automatically.