What is Windows Ultimate Security Patch and how to remove it?
Windows Ultimate Security Patch is another fake antivirus program from a family of rogues called "FakeVimes", Internet criminals who are responsible for creating this rogue family are releasing new bogus programs daily. All of the programs from "FakeVimes" family are using the same user interface and same strategies to trick computer users into downloading them. Most common way of distributing these malicious programs is by using fake online security messages and security scans. Such misleading online pop-ups are incorporated in malicious websites which are promoted in social networks, etc.
When a computer users enters such bogus website, a pop-up message will be shown stating that your computer is infected with malware and that you should download and install Windows Ultimate Security Patch to remove them.Such fake messages are mostly followed by false detection lists or fake security scans. Other method used to trick PC users into downloading Windows Ultimate Security Patch is by showing fake torrent alerts and offering an anonymous torrent connection. You should carefully look at the provided screenshot and if you notice similar security program on your desktop you can be sure that you are dealing with a rogue program Windows Security Patch or any of it's predecessors. Previous variants of this bogus software were named Windows Defence Counsel, Windows Guard Tools, Windows Safety Maintenance.
You shouldn't trust any of the information provided by Windows Ultimate Security Patch, this rogue program uses generated security scans and messages. It displays the same malware detection list and indicates same security issues on every PC that it infects. When installed on your computer this fake software will initate a fake security scan and will come up with a long list of supposedly detected spyware and malware. Don't be frightened by this message, in reality none of the infections that are indicated by Windows Ultimate Security Patch exists on your computer. These processes are just a part of a misleading strategy used to scare you and then sell you a licence key for a totally useless security program. If you have already payed for Windows Ultimate Security Patch you should contact your credit card company and dispute the charges explaining that you have been tricked into buying a fake antivirus program. If you have noticed this rogue program on your desktop you should use this step by step instructions to eliminate it.
Windows Ultimate Security Patch:
Before downloading the remover for Windows Ultimate Security Patch click a question mark icon at the top of the main window of this program, choose "Activate Now" and enter this registration code: 0W000-000B0-00T00-E0020 This will enable blocked Windows functions and will make the further removal process much easier, after entering the activation code continue to downloading the spyware remover.
remover for Windows Ultimate Security Patch
Manual Windows Ultimate Security Patch removal:
End these Windows Ultimate Security Patchprocesses:
random.exe
Protector.exe (Protector.exe file may have 3 or more random characters at the end of it's file name like ProtectionGQY.exe)
Remove these Windows Ultimate Security Patch entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashLogV.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\beagle.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jedi.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msa.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntvdm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rav7.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoler.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vir-help.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wupdt.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net
Delete these Windows Ultimate Security Patch files:
%StartMenu%\Programs\Windows Ultimate Security Patch.lnk
%AppData%\Protector.exe (NOTE: this file may have various symbols at the end of it's name. Look for the similar file name pattern and remove it)
%AppData%\result.db
%Desktop%\Windows Ultimate Security Patch.lnk
Instructions on how to end processes, remove registry entries...