Windows Efficiency Magnifier removal guide
Windows Efficiency Magnifier is a malicious program which is created by Internet criminals with an intention of scaring you into thinking that your computer is highly infected with various security threats. This bogus program is spread through trojans. After it infects your computer it will display various fake alerts and will perform a fake security scan on every system start-up. You should ignore all the security warning messages and the scans. All of these procedures are only performed to scare you into purchasing this program's licence.
If you buy the full version of this program, you will lose your money and you PC will still be infected. You should remove this program from your computer as soon as possible. Needless to say that this program is a total scam. It's useless and is only designed to steal money from your credit card.
When installed on your computer Windows Efficiency Magnifier will modify your operating system's registry. This will block the execution of legitimate Windows programs. To further scare you into believing that your PC is infected Windows Efficiency Magnifier will generate security warning pop-ups which indicates that your computer is attacked by viruses. As the security scan these messages are false, this rogue program doesn't have any of the features that are required for a real security program. Windows Efficiency Magnifier uses pre generated security scans and warning messages to force you into buying it's licence key in order to remove the found security issues. You should ignore all the information shown by Windows Efficiency Magnifier and remove it from your computer.
Such fake security warning messages will be displayed:
"System component corrupted! System reboot error has occurred due to lsass.exe system process failure. This may be caused by severe malware infections. Automatic restore of lsass.exe backup copy completed. The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption"
"Warning! Name: firefox.exe Name: c:\program files\firefox\firefox.exe Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning"
"Microsoft Security Essentials Alert Potential Threat Details Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more"
"Threat prevention solution found Security system analysis has revealed critical file system vulnerability caused by severe malware attacks. Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a serious possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer"
Screenshot of Windows Efficiency Magnifier:
Remove Windows Efficiency Magnifier program from your computer. This software is totally useless.
Windows Efficiency Magnifier removal
1. Start your computer, wait until your windows boots. Windows Efficiency Magnifier should appear on your screen. Click the OK button to start the Windows Efficiency Magnifier.
2. Let Windows Efficiency Magnifier run it's fake scan. After the fake scan, close the program by clicking on the X at the top right of the main window. After this procedure you should have access to your desktop.
3. In Windows Xp: click Start->Run->Type %APPDATA% in the opened window search for a file with random letters (example: gasdf.exe) rename it to abc.exe and restart your computer.
In Windows 7: Click Start->In the search tab type %APPDATA% in the opened window search for a file with random letters (example: gasdf.exe) rename it to abc.exe and restart your computer.
In Windows Vista: Click Start->In the search tab type %APPDATA% in the opened window search for a file with random letters (example: gasdf.exe) rename it to abc.exe and restart your computer.
4. Fix your Windows Registry Shell value so you could access desktop at the next system start-up. Download the file registyfix.reg then double-click it.
5. Open Internet explorer, click Tools and select Internet Options. Select "Connections".
6.Click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
7. Download a legitimate anti-spyware software to fully remove Windows Efficiency Magnifier from your computer.
Other tools known to remove Windows Efficiency Magnifier:
Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.
If you can't access Internet:
Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.
Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.
If you are unable to remove Windows Efficiency Magnifier, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
End these Windows Efficiency Magnifier processes:
%UserProfile%\Application Data\[RANDOM CHARACTERS].exe
Remove these Windows Efficiency Magnifier entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR " = '1'
Delete these Windows Efficiency Magnifier files:
%UserProfile%\Application Data\[RANDOM CHARACTERS].exe
General tips on removing Windows Efficiency Magnifier:
*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.
- FBI Your Computer Has Been Locked scam
- System Care Antivirus
- Department of Justice MoneyPak Virus
- Win 7 Antivirus 2013
- SweetIM Toolbar (Search.sweetim.com Virus)
- Department of Justice scam
- FBI Cybercrime Division - Your PC is Blocked (MoneyPak Virus)
- Metropolitan Police ransomware (PCeU) virus
- Police Central E-Crime Unit Virus
- Internet Security "designed to protect" Scam - Fake Antivirus Program