WinPC Antivirus is a rogue antivirus/antispyware program that a new version of rogue named as WinPC Defender. Like other rogue antispyware programs, it is distributed through the use trojans. Once infected with these trojans your computer will display large amount of security alerts and popups that tells you that your computer is infected and you should download and install WinPC Antivirus in order to protect your computer.
When installed, WinPC Antivirus configures itself to run automatically every time, when you start your computer. Once running, it will scan your computer and reports false or exaggerated system security threats on the computer that cannot be removed unless you first purchase the software. Running of WinPC Antivirus may drastically slow the performance of your computer.
While WinPC Antivirus is running, your computer will display fake Windows Security Center that will recommend you register WinPC Antivirus and fake security alerts from your Windows taskbar.
FIREWALL WARNING
WinPC Antivirus has detected that somebody is trying to
transfer your private data via internet. We strongly recommend
you to block the attack immediately.
These alerts and warnings are a fake and should be ignored! Use the free instructions below to remove WinPC Antivirus and any associated malware from your computer.
Symptoms in a HijackThis Log
O4 – HKCU\..\Run: [sysav] %UserProfile%\Application Data\winav.exe
Use the following instructions to remove WinPC Antivirus (Uninstall instructions)
Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded you will see window similar to the one below.
Malwarebytes Anti-Malware Window
Select “Perform Quick Scan”, then click Scan. The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure that everything is checked, and click Remove Selected. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.
WinPC Antivirus creates the following files and folders
%UserProfile%\Application Data\winav.exe
%UserProfile%\Desktop\WinPC Antivirus.LNK
%UserProfile%\Start Menu\WinPC Antivirus.LNK
I’ve got the WinPC trojan, but cannot download your anti-malware software because it’s preventing me from connecting to the internet. Plus I cannot open task manager because it comes up with ‘Application cannot be executed. The file is infected’ Please activate your antivirus software’.
Help! What do I do?
Roland
Roland, try use Safe mode with networking. Please read the article: How to reboot computer in Safe mode, but reboot your computer in the Safe mode with networking (Select second option in the Advanced Options Menu).