Mar 11

Remove Win-live-care2010.com hijacker (Removal Instructions)

Hijackers Add comments

Threat Description:

Win-live-care2010.com is a new part of the hideous mechanism pursuing the objective of promoting rogue security software. Win-live-care2010.com is pushing Windows Defender 2010 crimeware whcih is a general name for a group of insecure applications exploiting the same common malcode (e.g. XP Guardian or XP Antivirus Pro 2010). If one of the above-mentioned unsafe programs penetrates into your system, it will generate deceptive scanners and popup ads that erroneously report many infections and recommend you to get this whole thing fixed. It’s then that you get rerouted to Win-live-care2010.com without your consent. When on Win-live-care2010.com, you can either exit it or do what it prompts. The former option (i.e. navigating away) will prove to be merely a temporary relief because the still hijacked browser will exhibit the same activity over and over. So you will get one principal choice: to purchase Windows Defender 2010 or one of its clone rogue anti-spywares; or get rid of Win-live-care2010.com hijacker. The right path to follow is obvious: you should remove the malicious software that is gradually taking over your Operating System. Win-live-care2010.com hijacker deletion tips are there for you below this post.

Determine if your system is infected with Win-live-care2010.com hijacker and related threats:

Download Win-live-care2010.com Infection Free Scanner with Remover

Win-live-care2010.com Screenshot:

Win-live-care2010.com

How to remove this threat manually:

Win-live-care2010.com manual uninstall procedure:

Get rid of the related corrupt files:

  • %Documents and Settings%\[UserName]\Application Data\av.exe
  • %Documents and Settings%\[UserName]\Application Data\WRblt8464P

Delete the associated registry entries:

  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1″ %*
  • HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1″ %*
  • HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1″ %*
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “av.exe” /START “firefox.exe”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-mode
  • HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “av.exe” /START “iexplore.exe”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″

Please note that Win-live-care2010.com manual removal is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may cause irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download Win-live-care2010.com Removal Tool

Leave a Reply