Windows Armour Master

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 8
First Seen: July 11, 2011
Last Seen: January 8, 2020
OS(es) Affected: Windows

Windows Armour Master Image

Windows Armour Master is a fake anti-spyware application and a new duplicate of Windows Armature Master which poses as a reputable security software, but, in reality attempts to trick unsuspecting PC users. Windows Armour Master was designed by hackers to deceive computer users and extort their money. Windows Armour Master spread on the web via bogus online malware scanners, browser hijackers and spam emails. When installed on a machine, Windows Armour Master starts a fictitious scanning of your PC system and lists lots of malware infections and security issues supposedly found on the compromised computer. However, all given threats and problems are falsified, and you should not trust them; otherwise, Windows Armour Master rogueware will steal your money. Then, Windows Armour Master suggests the targeted computer user to buy its imaginary registered version to eliminate those allegedly reported viruses and PC problems. You should not purchase Windows Armour Master scamware and remove it from your PC immediately after you detect it.

SpyHunter Detects & Remove Windows Armour Master

File System Details

Windows Armour Master may create the following file(s):
# File Name MD5 Detections
1. 5c228763b480f3d04e0789f9d77ab3dfef4a819e2d52c7a18c6357c9858eb7ac.exe 7a83e4f5c5cdfb6703fa5b5566335f9d 5
2. deqnhti.exe
3. %UserProfile%\Application Data\Microsoft\[RANDOM CHARACTERS].exe

Registry Details

Windows Armour Master may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR" = '1'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = '0'

Trending

Most Viewed

Loading...