Friday, July 1, 2011

Remove Windows Vulnerabilities Rescuer virus

Windows Vulnerabilities Rescuer is a new fake antivirus software from the same family of malware as Windows Proofness Guarantor, Windows Inviolability System, Windows Microsoft Guardian, Windows Rescue Center, Windows Risks Prevention, Windows Activity Inspector, Windows Power Expansion, Windows Simple Protector, etc. It simulates a system scan and generates tons of false system security alerts to make you think your computer is infected with trojans, spyware, adware, worms and other malicious software.
Remember, the program created to make troubles for a computer user and does not protect your machine in any way! Thus, never trust anything relate to Windows Vulnerabilities Rescuer and uninstall it as soon as possible.

What Windows Vulnerabilities Rescuer does


Windows Vulnerabilities Rescuer is promoted and distributed with the help of Microsoft Security Essentials Alert trojan. When the rogue is installed, it will register itself in the Windows registry to run automatically.

The program will perform a system scan and list a lot of trojans, viruses and other malicious programs. Of course, the scan and its results are a fake. The rogue uses the false scan results as method to trick you into purchase the full version of the software. Ignore all that Windows Vulnerabilities Rescuer will show you and remove it as soon as possible.

While Windows Vulnerabilities Rescuer is running, it will display various misleading notifications and fake security alerts from Windows taskbar. Some of the alerts are:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click ‘show details’ to learn more.
Check your computer security
There are multiple security problems with your
computer.
Check this notification to fix these problems.
Warning!
Location: …\mbam.exe
Viruses: Trojan.Win32.Qhost

However, do not believe in any of the fake messages. The rogue generates these messages only to scare you into paying for this scam software. Thus, like false scan result, you should ignore all of them.

As you can see, Windows Vulnerabilities Rescuer pretends to be a legitimate antivirus software but, in reality, it is a scam. You should remove this malware as soon as you notice it installed on the system.  Please use the steps below to remove this malware from your computer for free.

How to remove Windows Vulnerabilities Rescuer


Reboot your computer. When you will see a Windows Vulnerabilities Rescuer prompt, click OK and wait while it`s scanning your computer. Once the scan is complete click "Fix errors" button. Now you can close the rogue. Press ATL+F4 or "X" button at the top-right of Windows Vulnerabilities Rescuer.

Click Start, type in search field (for Windows XP, click Start, Run, type in Open field)
%appdata%
Press Enter.

It will open a contents of Roaming folder (Application Data for WINDOWS XP). Next, open Microsoft folder.

This malware hides its own files, so before next step you should enable "Show hidden files" option. Click Organize, next "Folder and search options”, next View tab. If you use Windows 2000/XP, open Tools, next Folder Options, next View tab.

Select “Show hidden files and folders” option and click OK button.

Now look for randomly named files, e.g lklklka.exe or lklklka, and rename them. Reboot your computer.

Download Malwarebytes Anti-malware. Double click mbam-setup.exe to install the application. When installation is complete, make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version.

Once the program has loaded you will see a screen like below.

Malwarebytes' Anti-Malware

Select "Perform Quick Scan", then click Scan. When the scan is done, click OK, then Show Results to view the results. You will see a list of malware that  Malwarebytes' Anti-Malware found on your computer. Note: list of malware may be different than what is shown in the screen below.

Malwarebytes' Anti-Malware - lists of malicious software

Make sure that everything is checked, and click Remove Selected. Once disinfection is finished, a log will open in Notepad and you may be prompted to Restart.

Your system should now be free of the Windows Vulnerabilities Rescuer malware.

4 comments:

  1. Doesn't work, it's full of shit. Don't waste your tinme. Regards, LP

    ReplyDelete
  2. This worked perfectly. Thanks so much!

    ReplyDelete
  3. should i try or not?

    ReplyDelete