How to remove Windows Control Series
Tuesday, July 3rd, 2012 at 12:24 amHome » Rogue Antispyware » Windows Control Series
Windows Control Series description
Windows Control Series may look like a security program at the first sight; but the fraud is quite apparent when you take a closer look. Keep in mind that legitimate applications do not appear on a PC without your permission and they don’t prevent the removal process.
Windows Control Series imitates the design of Windows Firewall. The scam is able to fabricate system errors, infection alerts and scanner reports. None of the notifications brings real information: Windows Control Series is not able to locate or remove malware.
Here are a few examples of Windows Control Series pop-ups:
Error
Attempt to modify registry key entries detected. Registry entry analysis is recommended.
Error
Attempt to run a potentially dangerous script detected.
Warning
Firewall has blocked a program from accessing the Internet
C:\program files\internet explorer\iexplore.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Windows Control Series is a Rogue Antispyware software
How to manually remove Windows Control Series
To remove Windows Control Series spyware you must block Windows Control Series sites, stop and remove processes, unregister DLL files, search and delete all other Windows Control Series files and registry utility. Follow the Windows Control Series detection and removal instructions below.
The most typical software removal method is to remove Windows Control Series by using "Add or Remove Programs" service. However there may be hidden Windows Control Series files, running processes and registries in your computer, so Windows Control Series may recreate all other files after reboot.
Windows Control Series manual removal instructions
Locate and delete Windows Control Series registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-6-24_4"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "gahvvhgncv"
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aswUpdSv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\click.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\init.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notstart.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\programauditor.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spyxx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vswinperse.exe
Read more how to delete Windows Control Series registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Control Series
Search and unregister Windows Control Series DLL libraries:
NPSWF32.dll
Read more how to unregister Windows Control Series DLL files
Detect and delete other Windows Control Series files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[3 random symbols].exe
%AppData%\Protector-[4 random symbols].exe
%AppData%\result.db
%AppData%\1st$0l3th1s.cnf
We strongly recommend you to use spyware remover to track Windows Control Series and automaticaly remove Windows Control Series processes, registries and files as well as other spyware threats.


