Results 1 to 4 of 4

Thread: "Firewall Warning" from a Fake Anti-Virus

  1. #1
    Join Date
    May 2011

    "Firewall Warning" from a Fake Anti-Virus

    I am running Windows Vista on my computer and have also installed Avast Antivirus recently. From last week or so Avast antivirus is detecting fake antivirus called Firewall Warning in my pc. I tried removing it from avast but it will not get removed. The Firewall Warning pops up anytime that it wants to. Is there anyone who can tell me how to remove this fake popup once and for all from my pc? Thanks

  2. #2
    Join Date
    Mar 2010

    Re: "Firewall Warning" from a Fake Anti-Virus

    You will need to delete some registry keys in order to remove the fake firewall warning from your pc. To do that click on Start, click on Run and then type regedit. After that delete the below registry values:
    HKEY_CURRENT_USER\Software\WinPC Antivirus
    HKEY_CURRENT_USER\Control Panel\don?��t load ?�?scui.cpl?�?
    HKEY_CURRENT_USER\Control Panel\don?��t load ?�?wscui.cpl?�?
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ?�?sysav?�?
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center ?�?AntiVirusDisableNotify?�? => 1
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center ?�?FirewallDisableNotify?�? => 1
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center ?�?UpdatesDisableNotify?�? => 1

  3. #3
    Join Date
    May 2008
    You will need to search and delete the below files also:
    • Launch WinPC Antivirus.lnk
    • delwdef2008.bat
    • [Random Name].tmp
    • data.dat
    • WinPC Antivirus.LNK
    • FwHookDrv.sys
    • HOSTS.hst
    • Manual.url
    • options.xml
    • reserve.dat
    • Rules.txt
    • siren.wav
    • Support.url
    • svo.scf
    • Web.url

    After that delete the below directories as well:
    • %ProgramFiles%\WinPC Antivirus\
    • %ProgramFiles%\WinPC Antivirus\rules
    • %ProgramFiles%\WinPC Antivirus\temp
    • %ProgramFiles%\WinPC Antivirus\vfile

  4. #4
    Join Date
    Nov 2009
    Can you try to access Safe Mode with Networking by restarting your pc and then pressing the F8 key continuously to get to this option. Generally in safe mode the virus is less active and so you should try to remove the virus from this option. While scanning with some antivirus software try to run it as administrator and also enable to view hidden files.

Similar Threads

  1. Replies: 6
    Last Post: 07-02-2012, 06:52 PM
  2. Toshiba "Shipping and Handling" price is fake
    By Chachhi in forum Off Topic Chat
    Replies: 1
    Last Post: 29-11-2011, 01:36 AM
  3. Facebook warning "your computer appears to have a virus"
    By Tyee in forum Technology & Internet
    Replies: 4
    Last Post: 23-05-2011, 10:15 AM
  4. Replies: 2
    Last Post: 16-03-2004, 07:32 AM

Tags for this Thread


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
Page generated in 1,708,863,499.41521 seconds with 17 queries