Free Windows Rescue Center removal instructions

Rogue Antispyware:

Windows Rescue Center is a fake antivirus application that is installed to systems through fake Microsoft Security Essentials alert. The look of this alert is based on real alert by Microsoft. However, it has nothing related to Microsoft. The program only uses this name to look more legitimate.

So the message warning about Trojan virus also offers running s system scan in order to remove that infection. This is when Windows Rescue Center is installed to the computer. After that the program is started with each computer reboot. You will see a scanner running on your system, but don’t believe that it is really looking for infections. Windows Rescue Center will only pretend looking for infections and finally it will display a list of random files and call them infections. Do not take this list for granted. Windows Rescue Center displays random files just to make you think your system is infected but it does not mean that it is actually infected.

You are strongly recommended to get rid of Windows Rescue Center as soon as you notice it on your computer. Use a reputable antispyware program for the best results. If you have paid for Windows Rescue Center already, contact your credit card company and dispute the charges.

NOTE! manual removal of Windows Rescue Center might be dangerous if not performed carefully. We recommend using an automatic remover -Spyware doctor which decreases risk of harming your PC.

Free manual removal instructions

NOTE! You need to have a lot of computer kmowledge to remove spyware properly from your personal computer. Main things you have to know is:
1. How to STOP running proccesses
2. How to unregister DLLs
3. How to remove files and Registry entries

Stop Windows Rescue Center processes:

%UserProfile%\Application Data\Microsoft\[random].exe

Unregister Windows Rescue Center Dlls:

Remove Windows Rescue Center files:

%UserProfile%\Application Data\Microsoft\[random].exe

Remove Windows Rescue Center registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR " = '1'

NOTE! manual removal of Windows Rescue Center might be dangerous if not performed carefully. We recommend using an automatic remover -Spyware doctor which decreases risk of harming your PC.

Keyword Search

Search by First Lettera b c d e f g h i j k l m n o p q r s t u v w x y z 0 1 2 3 4 5 6 7 8 9