This guide will help you to detect and remove Windows Web Shield misleading application at short notice. This application is actually a new fake security software from Win32/FakeVimes rouges family. It is being pushed by the Trojans which come from misleading or infected web resources along with fake online virus scanners that imitates the operation of real antivirus program while scanning your PC. In other words you will see the progress bar as well as certain results of scanning. But all of them are a fake. Every casual user will naturally try to fix all those problems. In this case he will be asked to download and install Windows Web Shield antispyware. You will be forced to believe that this application is truly able to help you recover your PC from all those viruses and infections. You are not supposed to trust this fake scanner. Otherwise it can lead to serious problems.
Moreover Windows Web Shield will always make you think that your PC is infected and has lots of problems. As soon as you logon to Windows, this misleading application is automatically configured to system. You will get numerous messages regarding all kinds of infections while running OS. In addition it will use real names of different viruses, worms and infections. The main aim is to make you believe that your PC is truly infected. However it is not. Always keep in mind that all those viruses are nothing more but fake. Remember about it especially when you will be asked to buy a full version of Windows Web Shield or download any kind of additional applications. All you need is to ignore it.
You will also get different types of security warning and alerts while operating on the computer. All of them will also be sent by Windows Web Shield. This is all made in order to make you scared. In other words it becomes obvious that Windows Web Shield is absolutely of no use. To say the truth, the rogue was created only for getting money from users. Moreover in some occasions it can turn out to be rather harmful for your PC.
So, be quick and take effort to remove Windows Web Shield immediately. As the rogue is part of the Win32/FakeVimes rogues family, Windows Web Shield can be removed in almost the same way. If you have already purchase this misleading application, then call to your credit card company and tell them what has happened.
Step by step instructions on how to remove Windows Web Shield from Windows 8, Windows 7, Windows Vista or Windows XP.
The rogue will not allow you to run a malware removal tools, then you will need to reboot your computer in Safe mode with Command Prompt.
Restart your computer. After hearing your computer beep once during startup, start pressing the F8 key on your keyboard. On a computer that is configured for booting to multiple operating systems, you can press the F8 key when the Boot Menu appears.
Instead of Windows loading as normal, Windows Advanced Options menu appears similar to the one below.
Windows Advanced Options menu
When the Windows Advanced Options menu appears, select Safe mode with Command Prompt and then press ENTER.
Once Windows loaded, command prompt (black window) opens. In the command prompt type explorer.exe and Press Enter. Your desktop will now appear. Run Notepad and write the text below to Notepad:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“GuardSoftware” =-[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
“Shell”=”explorer.exe”
Save this as fix.reg to your Desktop (remember to select Save as file type: All files in Notepad.)
Double Click fix.reg and click YES for confirm.
Reboot your computer in Normal Windows mode.
Now you should download Malwarebytes Anti-malware and remove all Windows Web Shield associated malware.
Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded you will see window similar to the one below.
Malwarebytes Anti-Malware Window
Select Perform Quick Scan, then click Scan, it will start scanning your computer for Windows Web Shield infection. This procedure can take some time, so please be patient.
When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure that everything is checked, and click Remove Selected for start Windows Web Shield removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
Your system should now be free of the Windows Web Shield virus. If you need help with the instructions, then post your questions in our Spyware Removal forum.
Windows Web Shield removal notes
Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.
Note 2: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.
Note 3: If you follow this guide above to remove Windows Web Shield let us know how you managed by sending us your comments please.
I am able to create the notepad and save in safemode but once i sign in (regular mode) I get the same messgaes for spyware and cannot get to internet to download the new software as directed in your directions. Please advise