Threat Database Rogue Anti-Spyware Program Windows Accidents Prevention

Windows Accidents Prevention

By Domesticus in Rogue Anti-Spyware Program

Windows Accidents Prevention Image

Understanding Windows Accidents Prevention

Windows Accidents Prevention is a dangerous rogue anti-spyware program. This harmful application is not designed to prevent accidents and Windows Accidents Prevention absolutely has nothing to do with the makers of Windows. It is a harmful infection that mimics genuine security programs to steal your money. Rogue anti-spyware programs belong to a type of malware known as scareware. Windows Accidents Prevention is named like this because Windows Accidents Prevention is engineered to scare computer users by making them believe their computer is in trouble. Windows Accidents Prevention acts like a real anti-spyware tool. However, the very cause of most of the problems on the infected computer is Windows Accidents Prevention itself.
 

Windows Accidents Prevention and the Fake Microsoft Security Essentials Alert

Windows Accidents Prevention is part of a notoriously invasive family of rogue anti-spyware program. This group of rogue anti-spyware programs is known as the "Fake Microsoft Security Essentials Alert" family of rogue anti-spyware programs. The reason behind this is that the first sign of an infection is a false notification from Microsoft Security Essentials. This false alert will prompt the user to download and install Windows Accidents Prevention to remove an imaginary Trojan infection. All of the programs in this group of rogue anti-spyware programs have the same user interface. The only thing that changes from clone to clone is the rogueware's name, which is displayed on the top, left side of the interface. These names can be hilariously nonsensical. They may, in fact, be randomly generated to resemble genuine-sounding names for a security application. Some examples of clones of Windows Accidents Prevention are Windows Troubles Solver, Windows Troubles Killer, Windows Saviour Firewall, Windows Steady Work, Windows Work Checker, and countless others. They first started appearing in 2010 and are thought to have originated in the Russian Federation.
 

Avoiding Windows Accidents Prevention in the First Place

There are a few things you can do to avoid Trojans carrying harmful software like Windows Accidents Prevention. What it all boils down to is being careful when browsing the Internet. That means making sure that you don't click on unknown links or download unknown files. You should also always have an anti-virus monitoring your Internet connection and checking any external devices before connecting them to your computer. Most importantly, avoid high-risk websites. These include adult video sites, file sharing networks and third-party sites containing updates for Flash, Java or Windows itself.
 

Dos and Don’ts of Removing Window Accidents Prevention from Your Computer

If Windows Accidents Prevention is already on your computer system, follow these simple dos and don'ts when attempting to remove Windows Accidents Prevention:

  • DON'T give Windows Accidents Prevention your credit card information.
  • DON'T attempt to remove Windows Accidents Prevention manually if you don't know what you are doing.
  • DON'T attempt to delete any files marked by Windows Accidents Prevention as infected or potential security risks.
  • DON'T pay any attention to security alerts and notifications displayed by Windows Accidents Prevention.
  • DO use a genuine anti-malware utility to remove Windows Accidents Prevention automatically from your computer.
  • DO perform a complete malware scan on your computer with a reliable anti-malware tool, once you've removed Windows Accidents Prevention.

ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

File System Details

Windows Accidents Prevention may create the following file(s):
# File Name Detections
1. %AppData%\Microsoft\[RANDOM CHARACTERS].exe

Registry Details

Windows Accidents Prevention may create the following registry entry or registry entries:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell "%AppData%\Microsoft\[RANDOM CHARACTERS].exe"

Messages

The following messages associated with Windows Accidents Prevention were found:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.
System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.
Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a serious possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.
Warning!
Location: c:\windows\system32\taskmgr.exe
Viruses: Backdoor.Win32.Rbot

Trending

Most Viewed

Loading...