Windows Antivirus Rampart

Windows Antivirus Rampart Description


Windows Antivirus Rampart Screenshot 1Windows Antivirus Rampart claims to be able to protect your PC from an amazing plethora of attacks and harmful software as soon as you pay up a little money for its registration fee, but SpywareRemove.com malware researchers have determined all of Windows Antivirus Rampart’s security features to be erroneous at best and detrimental to your PC in worst cases. Windows Antivirus Rampart displays behavior that’s standard for FakeVimes-based scamware, including hostility towards normal security programs and frequent pop-up alerts that proudly whip out completely inaccurate system analyses about your computer’s health and safety. Since Windows Antivirus Rampart is both unable to provide any of its supposed features and is a very real danger to your computer’s security, disabling and then deleting Windows Antivirus Rampart with a high-quality anti-malware program should be done with as little delay as possible.

How Windows Antivirus Rampart Scales Real PC Defenses to Offers Mockups of Its Own


Windows Antivirus Rampart, like all members of Win32/FakeVimes, may market itself as security and anti-malware software, but there isn’t even one of Windows Antivirus Rampart’s apparent security features that work to the benefit of your computer. Common distribution methods for Windows Antivirus Rampart and its relatives include fake online scanners and fraudulent media software updates. Some of Windows Antivirus Rampart clones are Windows Shield Tool, Windows Antivirus Release, Windows Pro Rescuer, Windows ProSecurity Scanner, Windows Safety Wizard, Windows Threats Destroyer, Live Enterprise Suite, Windows Pro Web Helper, Windows Private Shield, Best Antivirus Software, Windows Be-on-Guard Edition, Smart Anti-Malware Protection, Windows Problems Stopper, Windows Safety Manager, Windows Ultimate Safeguard, Smart Internet Protection 2012, Windows Functionality Checker, Windows Premium Guard, Windows Proactive Safety, Windows PC Aid, My Security Engine, Windows Antivirus Machine, Windows Firewall Constructor, Windows Shielding Utility, Windows Risk Minimizer, Windows Crucial Scanner, Windows Abnormality Checker, Windows Advanced User Patch, Windows Pro Safety, Windows Interactive Security, Windows Maintenance Suite, Windows Advanced Toolkit, Windows Pro Safety Release, Windows Guard Tools, Additional Guard, Windows Smart Warden, Windows PRO Scanner, Windows ProSecure Scanner, Windows Control Series, Windows Expert Series, Volcano Security Suite, Windows Maintenance Guard, Windows AntiHazard Center, Windows Daily Adviser, Windows Custom Safety, Windows Proprietary Advisor, Home Safety Essentials, Windows First-Class Protector, Windows Safety Maintenance, Security Master AV, My Security Shield, Strong Malware Defender, Windows Guardian Angel, Internet Security Essentials, Windows Managing System, Windows Trouble Taker, Smart Internet Protection 2011, Home Malware Cleaner, Windows Protection Unit, Windows Privacy Extension, Windows Premium Defender, Windows Personal Doctor, Virus Doctor, Windows Debug Center, Personal Internet Security 2011, Windows Custodian Utility, Windows Performance Adviser, Windows Secure Workshop, System Protection Tools, Best Malware Protection, Windows Protection Maintenance, Live PC Care, Windows Web Combat, PrivacyGuard PRO, My Security Wall, Activate Ultimate Protection, Security Antivirus, Windows Smart Partner, Windows Pro Solutions, Windows Ultimate Security Patch, Windows No-Risk Center, Windows Activity Debugger, Windows Care Taker, Windows Instant Scanner, Windows Pro Defence, Windows Secure Workstation, Windows Virtual Angel, Windows Process Director, Total Anti Malware Protection, Windows Custom Management, Windows Security System, Windows Antivirus Patch, Windows Antivirus Care, Windows Web Commander, Windows Home Patron, Anti-Malware Lab, Windows Malware Sleuth, Windows Software Saver, Windows Defence Counsel, Fast Antivirus 2009, Windows Enterprise Suite, Windows Warding System, Windows Active Defender, Windows Anti-Malware Patch, Windows AntiHazard Helper, Windows Safety Module, Windows Internet Booster, Internet Security Suite, Windows Virus Hunter, Windows Interactive Safety, CleanUp Antivirus, XP Smart Security, Windows Guard Solutions, Windows Safeguard Upgrade, Windows Safety Series, Windows System Defender, Windows Multi Control System, Windows Defending Center, Keep Center Keeper, Windows Tools Patch, Extra Antivirus, Windows Privacy Module, Windows Secure Web Patch, Antivirus Smart Protection, Enterprise Suite, Windows Profound Security, Personal Security Sentinel, Windows Performance Catalyst, PC Live Guard, Windows Antihazard Solution, Windows Secure Surfer, Windows Virtual Security, Windows Stability Guard, Windows Sleek Performance, Windows Security Renewal, Smart Virus Eliminator, Windows Privacy Counsel, Windows Protection Master, Windows No-Risk Agent, Windows Premium Console, Smart Security, Windows Health Keeper, Windows Telemetry Center, Windows High-End Protection, Windows Active Guard, Windows Safety Checkpoint, Windows Turnkey Console, Smart Engine, VirusSecurity, Windows Software Keeper, Windows Safety Toolkit, Windows Basic Antivirus, Windows Advanced Security Center, Windows Security Suite, Windows Virtual Firewall, Windows Efficiency Accelerator and Windows Enterprise Defender. Avoiding downloads from disreputable sources is, therefore, the easiest way to avoid a possible Windows Antivirus Rampart infection, although SpywareRemove.com malware researchers also recommend that you scan your PC regularly to thwart PC threats that may install Windows Antivirus Rampart automatically without requiring manual downloads themselves.

Windows Antivirus Rampart uses common Windows Registry exploits to launch itself automatically, and afterward, will begin displaying various forms of fraudulent security messages.
Download SpyHunter Spyware Scanner
SpywareRemove.com malware experts note that these pop-ups can even resemble legitimate warnings from your operating system, firewall or other applications, and will always contain inaccurate information about PC threats or attacks against your computer.

This cheap sham of security is just a facade to tug you into a purchase form for Windows Antivirus Rampart’s registered version, which should always be avoided. However, registering Windows Antivirus Rampart with the free key 0W000-000B0-00T00-E0020 is an optional step as part of Windows Antivirus Rampart’s removal process, for those who have need of it.

Demolishing Windows Antivirus Rampart’s PC Play Castle


True to all Win32/FakeVimes-based PC threats of late, SpywareRemove.com malware research team has also found that Windows Antivirus Rampart will attempt to block anti-malware and security programs, up to and including doing so during their installation. Software that’s afflicted by Windows Antivirus Rampart’s blockade includes various popular brands of anti-virus scanners, as well as the Task Manager, Registry Editor, the UAC and similar Windows utilities. In some cases, this may also extend to your web browser.

In spite of Windows Antivirus Rampart’s attempts to block you from saving your computer without paying its fee, SpywareRemove.com malware researchers have found Safe Mode to be effective at deactivating Windows Antivirus Rampart’s startup routine. This will allow you to reinstall any required anti-malware products and scan your PC for Windows Antivirus Rampart’s complete removal – hopefully along with any other PC threats that were installed with Windows Antivirus Rampart. Like every other piece of FakeVimes-based scamware, Windows Antivirus Rampart is also built to infect Windows-based PCs, and other operating systems can be considered safe from Windows Antivirus Rampart attacks.

Windows Antivirus Rampart Automatic Detection Tool (Recommended)


Is your PC infected with Windows Antivirus Rampart? To safely & quickly detect Windows Antivirus Rampart, we highly recommend you run the malware scanner listed below.



Visual & GUI Characteristics


Windows Antivirus Rampart Screenshot 2Windows Antivirus Rampart Screenshot 3Windows Antivirus Rampart Screenshot 4Windows Antivirus Rampart Screenshot 5Windows Antivirus Rampart Screenshot 6Windows Antivirus Rampart Screenshot 7Windows Antivirus Rampart Screenshot 8Windows Antivirus Rampart Screenshot 9Windows Antivirus Rampart Screenshot 10Windows Antivirus Rampart Screenshot 11

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
  • The following files were created in the system:
    # File Name Detection Count
    1 %APPDATA%\ Protector-eqmq.txt.exe 454
    2 %APPDATA%\ Protector-slom.exe 12
    3 %AppData%\NPSWF32.dll N/A
    4 %AppData%\Protector-[RANDOM 3 CHARACTERS].exe N/A
    5 %AppData%\Protector-[RANDOM 4 CHARACTERS].exe N/A
    6 %AppData%\1st$0l3th1s.cnf N/A
    7 %CommonStartMenu%\Programs\Windows Antivirus Rampart.lnk N/A
    8 %Desktop%\Windows Antivirus Rampart.lnk N/A
    9 %AppData%\result.db N/A

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-5-29_7"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "yurrockari"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\ASProtectHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntiVirus_Pro.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\brasil.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hbinst.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mu0311ad.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\purge.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svc.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"

Additional Information

  • The following messages's were detected:
    # Message
    1Warning
    Firewall has blocked a program from accessing the Internet
    C:\program files\internet explorer\iexplore.exe
    is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Posted: May 29, 2012 | By
Share:
Follow Me on Pinterest More More
Threat Level: 10/10
1 Star2 Stars3 Stars4 Stars5 Stars (1 votes, average: 2.00 out of 5)
Loading ... Loading ...
Rate this article:
Detection Count: 801

2 Comments

  • nick says:

    it made it so i cant even open google what do i do Please help

  • Deborah Miller says:

    Please take you pop up add to put this Windows Antivirus Rampart off my computer I don’t want it and I can not get it to leave and leave me alone I already have a antivirus program on here.

Leave a Reply

What is 6 + 11 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)