1 of 3
Danger level 8
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

Windows Scan

With all the sophistication which goes into the development of rogue defragmenters and system optimizers, it can be easy to fall victim to the clever marketing campaigns and lies employed by rogues such as Windows Scan. Windows Scan derives from the very same pit of disparity as well known and much hated rogue optimizer Defragmenter. It is clear to see by the company Windows Scan keeps that this fake software has no place on any healthy PC.

Windows Scan does not break new ground with infection techniques, and makes use of established forms of infection distribution. Browser hijackers and willfully malicious bogus online malware scanners form part of Windows Scan’s online marketing campaign, and these aspects all aid in Windows Scan’s promotion and distribution. Other popular ways for Windows Scan to spread its Trojans and malware is by bundling it along with legitimate security updates and downloads obtained from third party websites.

The PC owner will largely remain unaware of the presence of Windows Scan on his system until it decides to reveal its presence to the user by making use of various fake security notifications. These fake alerts were all designed expressly to cause panic among Windows Scan’s victims, as well as to place Windows Scan in an authoritarian position with the user. Windows Scan is malevolent fake software and no correspondence received from it should ever enjoy any attention. Some of the more notorious fake security alerts to be on the lookout for include the following:

Critical Error!
Damaged hard drive clusters detected. Private data is at risk.

Critical Error
Hard Drive not found. Missing hard drive.

Critical Error
RAM memory usage is critically high. RAM memory failure.

Critical Error
Windows can't find hard disk space. Hard drive error

Critical Error!
Windows was unable to save all the data for the file System32496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.

Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.

System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.

Activation Reminder
Windows Scan Activation
Advanced module activation required to fix detected errors and performance issues. Please purchase Advanced Module license to activate this software and enable all features.

Low Disk Space
You are running very low disk space on Local Disk (C:).

Windows - No Disk
Exception Processing Message 0x0000013

Requested registry access is not allowed. Registry defragmentation required
Read time of hard drive clusters less than 500 ms
32% of HDD space is unreadable
Bad sectors on hard drive or damaged file allocation table
GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash
Drive C initializing error
Ram Temperature is 83 C. Optimization is required for normal operation.
Hard drive doesn't respond to system commands
Data Safety Problem. System integrity is at risk.
Registry Error - Critical Error
Windows detected a hard drive problem.
A hard drive error occurred while starting the application.

Windows cannot find notepad. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.

Windows detected a hard drive problem.
Scanning for hard drive errors...
Hard drive scan helps to detect and resolve hard drive problems and system performance issues.

Windows Scan will try and prevent you from executing any executables on the system, as well as bar you from connecting to the Internet. It does this in an attempt to prevent its victim from either running or downloading a security tool which will be able to detect and remove Windows Scan from the system. If you want to “activate” Windows Scan on the system, and thus restore your ability to run programs on your PC and to connect to the Internet, paste the following security key to Windows Scan:

0973467457475070215340537432225

Do not by any stretch think that the security threat has now been neutralized simply by having entered the above security key. You still need to obliterate Windows Scan from your PC in order to minimize the certain damage that follows a Windows Scan infection. Do this by employing the removal power of a genuine security tool which will not only erase Windows Scan but also offer future protection against similar threats.

Download Spyware Removal Tool to Remove* Windows Scan
  • Quick & tested solution for Windows Scan removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Scan

Files associated with infection (Windows Scan):

Uninstall Windows Scan.lnk
Windows Scan.lnk
AxaiRCLSb.exe
%ALLUSERSPROFILE%\Application Data\[random].exe
%UserProfile%\Start Menu\Programs\Windows Scan\Windows Scan.lnk
%UserProfile%\Start Menu\Programs\Windows Scan\Uninstall Windows Scan.lnk
%UserProfile%\Start Menu\Programs\Windows Scan

Files associated with infection (Windows Scan) (Win7, Vista):

%UserProfile%\Start Menu\Programs\Windows Scan\Windows Scan.lnk
%UserProfile%\Start Menu\Programs\Windows Scan\Uninstall Windows Scan.lnk
%UserProfile%\Start Menu\Programs\Windows Scan\
%UserProfile%\Desktop\Windows Scan.lnk
%AllUsersProfile%\[random].exe
%AllUsersProfile%\[random].dll

Processes to kill (Windows Scan):

AxaiRCLSb.exe
%ALLUSERSPROFILE%\Application Data\[random].exe

Remove registry entries (Windows Scan):

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = 'no'
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Use FormSuggest" = 'yes'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.