Get Rid of Windows Antivirus Patrol Rogue (Removal Guide)

Windows Antivirus Patrol is a rogue anti-malware program that only imitates the functions of security software instead of performing them in real. It’s one new member from the FakeVimes whose goal is to swindle money from computer users by selling them a fake program. Windows Antivirus Patrol slips into random computers furtively under the help of Trojan viruses which is good at utilizing system vulnerabilities to enter target system secretly. Once installed, Windows Antivirus Patrol will be configured to start automatically together with every system’s log-in.
Windows Antivirus Patrol pretends to run a scanner and seems to look for some infections. It displays a list of files and claims they are harmful for your computer. In order to remove them, the program offers you to activate Windows Antivirus Patrol by purchasing its license. Moreover while the program is running in the background, it will constantly generate fake security notifications claiming that your system has been attacked by various infections. Do not trust such messages either because they are just another mean used in order to gain your trust and convince you into paying for Windows Antivirus Patrol. Never be taken in. You are strongly advised to remove Windows Antivirus Patrol from your computer and terminate all malicious processes on your system.

Harmful properties of Windows Antivirus Patrol

It may cause browser redirection or even disable internet access as a result.
It occupies much of your CPU and opens up new gateways for other malware.
It can shun the legit security tools and destroy your computer secretly.
It is able to allow remote hacker access the compromised system for illicit purpose.

It blocks task manager and registry editor to prevent users from removing it manually.

Manual steps on deleting Windows Antivirus Patrol effectively

Firstly, please restart your computer and before Windows interface loads, hit F8 key repeatedly. Choose “Safe Mode with Networking” option, and then press Enter key. System will load files and then get to the desktop in needed option.

Secondly, you can follow these steps to get rid of Windows Antivirus Patrol manually: it’s to end virus related processes, search and remove all other relevant files and registry entries. Follow the removal guides below to start.
Step one: Launch Windows Task Manager by pressing keys Ctrl+Alt+Del or Ctrl+Shift+Esc, search for suspicious processes and right-click to end them.

Step two: Open Control Panel in Start menu and search for Folder Options. When you’re in Folder Options window, please click on its View tab, check Show hidden files and folders and uncheck Hide protected operating system files (Recommended) and then press OK.

Step three: Click on the “Start” menu and then click on the “Search programs and files” box, Search for and delete these files created by Windows Antivirus Patrol:
%AppData%\svc-<random>.exe
%AppData%\data.sec

Step four: Open Registry Editor by pressing Windows+R keys, type regedit in Run box and click “OK” to proceed. When Registry Editor is open, search and get rid of the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bckd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bckd "ImagePath" = "123123.sys"

Thirdly, reboot the computer normally to check whether the virus is completely removed or not.

Note: If you haven’t sufficient expertise in handling virus program files, processes, dll files and registry entries, you will take the risk of messing up your computer and making it crash down finally. If you need online professional tech support, click here to get: 24/7 Online Virus Removal Support.