If your computer is loaded with Windows Advanced Toolkit and you are thinking to get this software, just stop for a while and learn what is Windows Advanced Toolkit and how to deal with it.
“Windows Advanced Toolkit” is a fake program that comes from rogue virus or FakeVimes family. This malware is created and distributed by hackers who are just getting crazy to somehow take your money. For this purpose, they code some malicious tools and give them name and interface just like a real anti-virus software. Once your computer is infected with this fake and useless bug, it will claim that it is a powerful security tool installed on your computer to protect your system form viruses. Heres a point to be noted, how did this so self called anti-virus got installed on your computer when you did not download it? The answer is; Windows Advanced Toolkit is dropped into computer through malicious websites that use Trojans. The installation process of this virus is done very secretly so you will only know about Windows Advanced Toolkit infection when it has taken over your computer and started its job.
As soon as your PC is infected with Windows Advanced Toolkit virus, it will start displaying alerts on your screen. Some annoying popups appearing on your screen will claim that your computer is seriously infected with some harmful keyloggers, viruses and some Firewall problems detected. You,ll be told about an infected windows media player file wmploc.dll which has been blocked. More over you may read an identity theft message like the one below:
Warning! Identity Theft attempt detected!
Hidden connection IP: 210.1.58.100
Target: Microsoft corporation keys
Your IP: 127.0.0.1
Please remember, all these warnings and alerts are totally fake as Windows Advanced Toolkit is fake. It is a scamware program which wants to scare you of viruses, then it will try its best to make you pay for its full version so it could remove the threats and viruses from your computer. Please do not buy this program. Windows Advanced Toolkit is a useless thing that will ruin your PC if you let it be there in your PC. It can steal your private information like credit cards and bank accounts. It can also bring more viruses and malwares from remote server. It can disable your legitimate anti-spyware software, it can block you from accessing Windows Task manager and registry editor REGEDIT. We recommended you to immediately take action to get rid of Windows Advanced Toolkit and clean your PC to make it safe.
How to uninstall Windows Advanced Toolkit virus manually:
To remove this virus manually, complete the following set of tasks. Do not forget to create a backup before getting started to the manual removal guide.
To prform manual removal steps, you may need to learn,
How to stop a process
How to delete registry entries
Stop Windows Advanced Toolkit processes:
Protector.exe
Disable Windows Advanced Toolkit DLL files:
npswf32.dll
Remove Windows Advanced Toolkit Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
Delete Windows Advanced Toolkit files:
%AppData%\Protector.exe
Auto Removal
To remove this virus Automatically, We suggest following tools:
Malware Bytes Anti-Malware (Download)
HitMan Pro Anti-Malware (Download)
