MyPCHealth

Windows Stability Center– Fake Antivirus/Spyware Program

Windows Stability Center is a fake anti spyware program that is designed to make you pay for what you think is a piece of software that will rid your computer of viruses and spyware. In fact what it’s actually doing is some or all of the following:

• Stops you from running any executable files on your computer including programs like office, antivirus installers and even programs like Microsoft paint!
• It shows false infection and error messages to make you think your system is infected
• Constantly pops up with its fake messages
• It may create pop-ups and re-direct your browser.
• There is no uninstallation process, so cannot be uninstalled.

This is one of a family of fake anti spyware programs of which there are many here are a few variations:

• AntiVirus Live 2010
• Advanced Security Tool 2010.
• Home Personal Antivirus
• IE-Security, Security Central
• System Tool
• Win PC Defender
• Win PC Antivirus
• XP Deluxe Protector
• XP Police Antivirus

Windows Stability Center automated removal guide

• To remove this program you first need to let it perform its fake scan. once it has press the ok, then open the license manager. You will now be at a screen where you can close the program by clicking the X in the top hand corner.
• Once closed and the desktop has loaded download RKill to stop the process thats causing it to load.
• Once the process has been stopped you can download malwarebytes. Install this anti spyware software. Run a full scan and allow it to remove any infections found.
• Reboot the computer and see if its removed.

Windows Stability Center Manual removal.

• Load computer into safe mode by pressing f8 on startup and selecting safe mode from the menu.
• Find where the software is installed by locating its executable file :

The infection can be found in the following locations :

• %UserProfile%\Application Data\Microsoft\<random>.exe
• %UserProfile%\Application Data\<random>.exe
• All users\Application Data\<random>.exe
• All users\Application Data\Microsoft\<random>.exe

Where <random> is a set of random characters.

• Write down file name then Delete the file.
• Open the registry by running regedit.
• Search for the file name you wrote down above.
• Delete the entry found in the "run" or "runonce" registry key.
• Reboot and it should be removed. However its still best to download malwarebytes and run a full scan to remove any remaining infected registry keys.

Windows Stability Centre infects the following registry keys :

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\afwserv.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastsvc.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msascui.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe "Debugger" = 'svchost.exe'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore "DisableSR " = '1'

Tags: Remove Windows Stability Center help, get rid of Windows Stability Center , uninstall Windows Stability Center , delete Windows Stability Center ,