Windows Antivirus Patrol Removal

Windows Antivirus Patrol is a rogue program that comes from the Rogue.FakeVimes family of computer viruses. This program is not a real antivirus software but pretends like it is, simultaneously infecting your computer and asking for payment in order to remove it. Don’t trust it! Windows Antivirus Patrol will display fake scan results and false security warning and attempt to scare you into purchasing it. The virus can also steal sensitive data from your computer. Remove it immediately.

Remove Windows Antivirus Patrol AUTOMATICALLY

Having Problems? Call Us Toll Free: 1-855-682-1216

Virus Removal Instructions Using Safe Mode

1. Reboot computer in safe mode.

2. To do this, when computer restarts, tap F8 at startup.

3. Select Safe Mode With Networking.

4. When computer is done booting, open command box.

5. Press “Windows” and “R” keys to do this.

6. Type this into command box: iexplore spyware-fix.net/download

7. Install software and run a scan on your computer.

8. Register software and remove all viruses.

9. If you have any problems call 1-855-682-1216

Symptoms Of Infection

Your computer is acting slow. Windows Antivirus Patrol slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
You are getting pestered with pop ups. Windows Antivirus Patrol infects your registry and uses it to launch annoying pop up ads out of nowhere.
Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious Windows Antivirus Patrol infection.

Dangers Of Infection

Viruses like Windows Antivirus Patrol will infect your registry and other important system files. If the infection is not treated, it can cause a complete collapse of your system.

Some Windows Antivirus Patrol infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.

How To Remove Infection Manually

Uninstall Windows Antivirus Patrol Processes

service.exe

Delete Windows Antivirus Patrol Files

%AppData%\jork_0_typ_col.exe
%CommonStartMenu%\Programs\Windows Antivirus Patrol virus
%StartupFolder%\ch810.exe 
%CommonAppData%\pcdfdata\vl.bin

Remove Windows Antivirus Patrol Registry Files

HKEY_LOCAL_MACHINE\Software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bckd "ImagePath" = 22.sys 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\svc-.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableVirtualization" = 0