Home Malware Programs Rogue Anti-Spyware Programs Windows Accurate Protector

Windows Accurate Protector

Posted: July 8, 2011

ScreenshotWindows Accurate Protector is a fake security and anti-virus program that pretends to detect Trojans and other PC threats while also scoring your computer's safety. All of Windows Accurate Protector's pretenses at security are jammed full of bad information that's designed to make you panic and purchase Windows Accurate Protector quickly to fix problems that actually don't exist. Even if you simply refrain from buying into Windows Accurate Protector's scam, your computer will still be attacked by browser hijacks and other program-disabling behavior. Uninstalling Windows Accurate Protector is a high-priority effort that should be assisted with anti-virus software when this is possible.

The Hidden Members of Windows Accurate Protector's Rogue Software Family

Malicious websites that are linked to Windows Accurate Protector don't want you to know that Windows Accurate Protector is really a copy of other fake computer optimization and hard disk defragmenter tools. Other members of Windows Accurate Protector's extremely large subgroup include Windows Vulnerabilities Rescuer, Windows Easy Supervisor, Windows Salvor Tool, Windows Debugging Agent and Windows Debugging Center.

Windows Accurate Protector and its relatives use a misleadingly pleasant-looking interface with the Windows logo and a sham of a percentile grading system for your PC's security. Even though it looks like a normal and surprisingly powerful security program, Windows Accurate Protector can't perform any security-related functions and will always hand out negative scores.

Some other lies that Windows Accurate Protector throws your way can come in the form of pop-ups that alert you to infections that aren't on your computer:

Warning!
Location: [application file path]
Viruses: Backdoor.Win32.Rbot

Warning!
Name: [application file name]
Name: [application file path]
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Warning! Database update failed!
Database update failed!
Outdated viruses databases are not effective and can't [sic] guarantee adequate protection and security for your PC!
Click here to get the full version of the product and update the database!

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Warning! Running trial version!
The security of your computer has been compromised!
Now running trial version of the software!
Click here to purchase the full version of the software and get full protection for your PC!

Windows Accurate Protector will use these messages as another step in its ploy to make you buy into a worthless 'full' version of its software. Naturally, you should avoid this, and any credit card that's already been compromised by Windows Accurate Protector or affiliated entities should be cancelled to avoid any other fraudulent charges.

A Really Accurate Examination of Windows Accurate Protector

A close look at Windows Accurate Protector's real functions, as opposed to its fake security-related ones, will show a more sinister side to Windows Accurate Protector's capabilities:

  • Windows Accurate Protector may prevent you from using security-related programs and Windows utilities like Task Manager. Adding injury atop the insult, Windows Accurate Protector may even tell you that these programs are infected when the truth, of course, is that Windows Accurate Protector doesn't want you to use them.
  • Another one of Windows Accurate Protector's application-meddling tricks is to take over your web browser via hijacking. This can result in your homepage being set to the Windows Accurate Protector website, your search results being tampered with, real websites being blocked by fake warning screens and even redirects that force you to visit a Windows Accurate Protector-affiliated site.
  • As a final insult, Windows Accurate Protector won't even ask for permission before starting and is more than happy to launch itself right along with Windows.

Despite the severity of these attacks, you can delete Windows Accurate Protector with any quality anti-virus program, provided you use Safe Mode or another way of deactivating Windows Accurate Protector beforehand.


ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\Microsoft\{RANDOM CHARACTERS}.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell = "%AppData%\Microsoft\{RANDOM CHARACTERS}.exe"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe | DebuggerHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe | DebuggerHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe

Additional Information on Windows Accurate Protector

  • The following messages's were detected:
    # Message
    1 Warning
    There's a suspicious fsoftware running on your PC.
    For more details, run a system file check.
    2 Check your computer security
    There are multiple security problems with your
    computer.
    Check this notification to fix these problems.
    3 Warning!
    Location: ...\mbam.exe
    Viruses: Trojan.Win32.Qhost
    4 Warning!
    Location: [application file path]
    Viruses: Backdoor.Win32.Rbot
    5 System Security Warning
    Attempt to modify register key entries is detected. Register entries analysis is recommended.
    6 Warning!
    Name: [application file name]
    Name: [application file path]
    Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.
    7 System component corrupted!
    System reboot error has occurred due to lsass.exe system process failure.
    This may be caused by severe malware infections.
    Automatic restore of lsass.exe backup copy completed.
    The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.
    8 Warning! Database update failed!
    Database update failed!
    Outdated viruses databases are not effective and can't [sic] guarantee adequate protection and security for your PC!
    Click here to get the full version of the product and update the database!
    9 Warning! Running trial version!
    The security of your computer has been compromised!
    Now running trial version of the software!
    Click here to purchase the full version of the software and get full protection for your PC!

One Comment

  • Lanny Hovelson says:

    Hello to everyone, some days before i did a computer scan with my antivirus and a Trojan Horse Virus was founded. I hope to delete it but now when i download some praograms and i try to install them or to run them, it appeared an error:<br/> ERROR

Loading...