June 2, 2011

Windows Averting System.

Windows Averting System (also called WindowsAvertingSystem) is scam software, following the other threats such as Windows Anticrashes Utility or Windows Troubles Solver.
 It must be added that all these malwares are hailing from the same family, so they have identical GUI and acts in the same order as well. If you have already been infected by any of them, you will know that similarly to earlier released versions, Windows Averting System must be removed from the system as soon as possible.

As you should have already heard, Windows Averting System is based on triggering falsified system scanners that report multiple infections detected on computer. In reality, these detections are fake harmless files dropped by the same Windows Averting System as soon as it manages to get inside the system. Once it is there, it will also be set to start as soon as PC is rebooted and will ‘scan’ your system for viruses.

Windows Averting System may also hijack your IE and direct it to various malicious websites that will promote the licensed version of this scam. As you can see, it should go without saying that Windows Averting System won’t give you any kind of protection but it will only let more viruses inside your machine. To avoid this, you must remove Windows Averting System as soon as you can, so get a reputable anti-spyware. To get rid of its fake system scanners, wait for they finish scaning and then click them out. 


Kill malicious Processes from Task Manager: 
  • <random>.exe
 Location of the infection:
  1. %UserProfile%\AppData\[random].exe
  •  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
  •  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
  •  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
Although it is possible to manually remove Windows Averting System., such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend  malware and spyware removal applications.

After removing all these files, restart your computer and the issue will be fixed. And don’t forget to do update your Security Software, check the Firewall Settings and the Operating System and finally do a full system scan with the Security Software.


Post a Comment

Related Posts Plugin for WordPress, Blogger...

Search This Blog



Twitter Delicious Facebook Digg Stumbleupon Favorites More