How to Get Rid of Windows Antivirus Master - Virus Removal Help

Windows Antivirus Master is a newly released rogue application from FakeVimes family which has been releasing new versions of this badware regularly for the last few months. Usually the program can be installed onto random computers with a help of Trojan horses without asking users’ permission.

Once inside, Windows Antivirus Master runs a scanner that pretends to look for some infections on your computer. It reports about a bunch of threats and recommends removing them as soon as possible. To continue with the scan and eliminate the threats, you will be asked to purchase a full version of Windows Antivirus Master. Meanwhile, your computer will be running much slower than before.

Despite that Windows Antivirus Master seems very similar to Windows Defender, it is in fact a fake program that is not related to Microsoft. You should never pay for it as the program has no database of infections, so it can neither detect not remove any real threats. Actually, it’s a useless program and it has nothing to do with your computer’s protection. It was designed by cyber criminals to scam money from you. It is highly recommended to remove Windows Antivirus Master from your system in order to eliminate the true cause of all the problems you are experiencing. Follow the instructions below to isolate and remove all related files and registry entries of the rogue from your system completely.

What harms does Windows Antivirus Master do?

It may cause browser redirection or even disable internet access as a result.
It occupies much of your CPU and opens up new gateways for other malware.
It can shun the legit security tools and destroy your computer secretly.
It is able to allow remote hacker access the compromised system for illicit purpose.

It blocks task manager and registry editor to prevent users from removing it manually.

Manual steps on deleting Windows Antivirus Master effectively

Firstly, please restart your computer and before Windows interface loads, hit F8 key repeatedly. Choose “Safe Mode with Networking” option, and then press Enter key. System will load files and then get to the desktop in needed option.

Secondly, you can follow these steps to get rid of Windows Antivirus Master manually: it’s to end virus related processes, search and remove all other relevant files and registry entries. Follow the removal guides below to start.
Step one: Launch Windows Task Manager by pressing keys Ctrl+Alt+Del or Ctrl+Shift+Esc, search for suspicious processes and right-click to end them.

Step two: Open Control Panel in Start menu and search for Folder Options. When you’re in Folder Options window, please click on its View tab, check Show hidden files and folders and uncheck Hide protected operating system files (Recommended) and then press OK.

Step three: Click on the “Start” menu and then click on the “Search programs and files” box, Search for and delete these files created by Windows Antivirus Master:
%AppData%\svc-<random>.exe
%AppData%\data.sec

Step four: Open Registry Editor by pressing Windows+R keys, type regedit in Run box and click “OK” to proceed. When Registry Editor is open, search and get rid of the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bckd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bckd "ImagePath" = "123123.sys"

Thirdly, reboot the computer normally to check whether the virus is completely removed or not.

Automatic Removal Tool (Recommended)

SpyHunter is a powerful, real-time anti-spyware application that designed to assist the average computer user in protecting their PC from malicious threats like worms, Trojans, rootkits, rogues, dialers, spyware, etc. It is important to notice that SpyHunter removal tool works well and should run alongside existing security programs without any conflicts.

Step 1. Click the Download icon below to install SpyHunter on your PC.


Step 2. After the installation, run SpyHunter and click “Malware Scan” button to have a full or quick scan on your computer.


Step 3. Choose Select all>Remove to get rid of all the detected threats on your PC.

Note: If you haven’t sufficient expertise in handling virus program files, processes, dll files and registry entries, you will take the risk of messing up your computer and making it crash down finally. If you need online professional tech support, please click here to download SpyHunter to help you.