2

Remove WindowsScan

WindowsScan or also known as the Windows Scan virus is a phony and useless hard drive tool that will be installed on the computer without users consent. This rogue application was originated from the same group who created HDD Ok and My Disk. It has already a dozens of clones that was being propagated via the Internet. Once it penetrate the system, WindowsScan will provide fake alert messages stating the following problems:

Critical Error
Windows can’t find hard disk space. Hard drive error

Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.

System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

If computer is deeply harmed, WindowsScan will prevent installed programs from being executed especially antivirus applications. To stop these annoyances, run a complete scan of a trusted security application and remove WindowsScan virus immediately. Also, victims may also register WindowsScan using this code ” 0973467457475070215340537432225.” Once registered, program should now have an uninstall option and can be taken out automatically.

What are the Symptoms of WindowsScan Infection?

WindowsScan Image

It will modify Windows Registry and add the following entries:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun “[random]”
HKCUSoftwareMicrosoftWindowsCurrentVersionRun “[random].exe”

The threat will drop the following malicious files:
%TempDir%[random] %TempDir%[random].exe
%Desktop%Windows Scan.lnk
%Programs% Windows Scan Windows Scan.lnk
%Programs% Windows Scan Uninstall Windows Scan.lnk

Follow these Procedures to Remove WindowsScan

Procedure 1: Manual Removal

1. Restart your computer in Safe Mode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select Safe Mode

2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
– Click Start > Run
– Type in the field, regedit
– Navigate and look for the registry entries mentioned above and delete if necessary

3. Delete malicious files that the threat added:
– Base on the given location above, browse and delete the file
– If no location is given, click Start>Search> and search for the files.
– If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.

4. Scan computer with Antivirus Program
– Update antivirus program
– Scan computer and delete all detected threats.

Procedure 2: Scan PC with Removal Tool

To remove WindowsScan, download the suggested tool by clicking on the button below. This tool is effective in getting rid of Trojans, viruses and malware.

Download WindowsScan Removel Tool

1. After downloading, please install the program using the default settings.
2. At the end of the installation, please make sure that it will download necessary updates.
3. Once update has completed. The tool will launch.
4. Thoroughly scan the computer and remove all threats detected by this anti-malware program.

Troubleshooting Guides

After successfully removing a virus from computer, the next move is to fix any damages due to infection. Antivirus program are not capable of fixing issues caused by a virus or malware.

Fix and Restore Internet Connection After WindowsScan Infection

Windows Vista and Windows 7:
1. Go to Start > Run. Type cmd in the box (Search Program and files) and press Enter on keyboard.

Start and Run CMD

2. It will display a command prompt. Type the following and press Enter on keyboard after each command.
netsh int ip reset reset.log
(Press Enter on keyboard)

netsh winsock reset catalog
(Press Enter on keyboard)

Netshell DOS Command

3. Exit the command prompt window and please restart the computer.

Windows XP:
1. Click on the download button bellow to get a fresh copy of Winsock.Zip. Unzip the file on a proper directory. It will decompress a file called Winsock.reg.

Winsock Download

2. Right-click on Winsock.reg file, select Merge to add the value to your Windows registry. Press OK on the next prompt to confirm merging.

3. Restart the computer.

4. After the reboot, go to Start > All Programs > Accessories > Communications. Select Network Connections.

5. Right-click on Local Area Connection, select Properties from the list.

Network Properties

6. On General tab, click on Install. It will open a new window.

LAN Properties Install

7. Select Protocol from the list. Next, click Add.

Protocol for TCP

8. If it prompts for the location, click on Have Disk…

9. Type C:\Windows\inf in the Browse section. Click OK.

10. Select Internet Protocol (TCP/IP). Click OK to confirm.

11. You may now restart the computer.

Unhide Non-System Files and Folders

WindowsScan brings you more harm in such a way that it will hide all files and folders. You can change attributes of hidden files and folders manually but be careful with system files because they are set to be hidden to avoid accidental deletion. To unhide only non-system files and folders, follow this procedure.

1. Download the program Unhide Non-System Files. This is a free tool. Download page will open in a new window.

Unhide Non System Files

2. Once downloaded, double-click on the file to launch the program.

Note: If Smart Screen Filter is active, it alerts you that the file is “not commonly downloaded and could harm your computer.” To proceed, please click on Actions. Select Run anyway from Smart Screen Filter pop-up.

Detection of Smart Screen Filter

3. When the program is running, please click on Start button to begin the restoration of your hidden files.

Unhide Files Interface

Steps to Restore Shortcut Links and Start Menu Icons

If WindowsScan stays long enough on the infected computer, it can cause more damages than expected. It modifies the look of the system and hides shortcut links and Start Menu icons. Perform these steps to restore shortcut links and missing icons.

1. Download the program Rogue Killer. This tool does not only fix certain problems cause by malware infection, it also finds and destroy presence of malicious files and registry entries.

RogueKiller Download

2. After downloading the file, double-click to run the program.

Note: If Smart Screen Filter is active, it alerts you that the file is “not commonly downloaded and could harm your computer.” To proceed, please click on Actions. Select Run anyway from Smart Screen Filter pop-up.

3. When launch, the tool will run a scan on the computer and check it for presence of malware. Please let the scan to complete.

4. Click on the ShortcutsFix button on right side of the interface. This action will restore missing shortcut links and Start Menu icons. The scan would take a few minutes.

RogueKiller Shortcut Fix Button

Protect your PC from WindowsScan or Similar Attack

Once you take out WindowsScan, prevent it from getting into your computer once again. Install reputable anti-malware software that fights and protect your PC against rogue software. Moreover, anti-malware programs are capable of checking web sites for harmful objects and blocks the access if found suspicious.

Click Here to Leave a Comment Below 2 comments
Jay Cee - January 25, 2011

Thanks so much.
Followed instructions and entered code – all clear now!

Reply
Bryan Hampton - January 27, 2011

Hey, trying to get rid of Windows Scan on my Mom’s computer. McAfee can still be run and has detected a couple threats, but will not detect anything significant as far as removing the virus itself. Can you give me instructions on where to enter the code you used by chance?

Reply

Leave a Reply: