Remove Windows Antihazard Helper

What is Windows Antihazard Helper?

Windows Antihazard Helper is a bogus anti-virus application that is categorized under the Rogue:Win32/FakeVimes family of malware. This bogus anti-virus software program gets on to penetrate your pc via numerous downloads from corrupted sites and as it invades your pc's system it will notify you whenever Windows starts up. The Windows Antihazard Helper will notify you that there are infections to your pc via a bogus pc scan. And that you can not remove this rogue pc software application unless you pay for the total version online.

Windows Antihazard Helper will notify you continuously stating that your pc is under attack by malware and that all your personal files will probably be lost unless you buy the total version of the application. And aside from generating a bogus scan and bogus messages of system attacks it can also send you bogus messages like you need to click "Remove All" or "Prevent Attack" but once you do, you will be led to a page that will insist you buy the complete version of Windows Antihazard Helper.

It is strongly recommended that anyone who has this malware to eliminate it immediately after it pops-up. There are many trustworthied antispyware programs that can get rid of Windows Antihazard Helper.

Associated Windows Antihazard Helper System Entries and files

Windows Antihazard Helper Processes

Protector-[random 3 characters].exe Protector-[random 4 characters].exe

Windows Antihazard Helper Files

%AppData%\NPSWF32.dll %AppData%\result.db %CommonStartMenu%\Programs\Windows Antihazard Helper.lnk %Desktop%\Windows Antihazard Helper.lnk

Windows Antihazard Helper Registry Entries

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0 HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0 HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0 HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0 HKCU\Software\Microsoft\Windows\CurrentVersion\Run "Inspector" HKCU\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "<random 10 characters>" HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\a.exe HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\~2.exe ...and hundreds more of these Image File Execution Options entries.

---

How to Stop Windows Antihazard Helper Fake Alerts

To register Windows Antihazard Helper and stop its fake warnings, use the following fake license key.

Windows Antihazard Helper registration code: 0W000-000B0-00T00-E0020

NOTE: this code will NOT remove Windows Antihazard Helper from your computer, it will JUST stop the annoying alerts and messages.

---

Windows Antihazard Helper Removal Instructions

Step 1: Reboot in Safe Mode with Networking

To restart your computer in Safe Mode with networking:

1. Restart your computer.

2. When you see the computer manufacturer's logo, press and hold the F8 key.

3. On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking, and then press Enter.
   
   

4. Log on to your computer with a user account that has administrator rights.

---

Step 2: Disable Windows Antihazard Helper Proxy Server

Windows Antihazard Helper may add a proxy to its package. Its goal is to get the information through the Web connection (password etc).
It also helps to block the connection to certain sites (eg malware removal help sites) or to block the download of trustworthy antispyware and antivirus programs.

The following steps reset the Internet Explorer proxy settings in the Windows registry so that you can access the Internet again:

1. Click Start, and then click Run. (Keyboard Shortcut: Windows logo + R)

2. Copy and paste or type the following text in the Open box in the Run dialog box:
   reg add "HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings" /v ProxyEnable /t REG_DWORD /d 0 /f
   
   

3. Click OK.

4. click Start, and then click Run.

5. Copy and paste or type the following text in the Open box in the Run dialog box:
   reg delete "HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings" /v ProxyServer /f

6. Click OK.

Now that you have disabled Windows Antihazard Helper proxy server, you will be able to browse the web again with Internet Explorer.

1. Click Start, and then click Run. (Keyboard Shortcut: Windows logo + R)

2. Type in iexplore.exe.
   
   

---

Step 3: Stop Windows Antihazard Helper processes

In order to stop Windows Antihazard Helper from interfering with our removal procedure, we need to end and kill its processes. For this, we will use a FREE powerful utility called RogueKiller.

RogueKiller (by Tigzy) is a tool written in C++, which scans the running processes, and kills those which are malicious. This tool was developed based on speed execution, which will clean the running processes before being killed.

To terminate Windows Antihazard Helper process:

1. Always in Safe Mode Download RogueKiller to your desktop from the following link:
   
   RogueKiller Download link
   
   RogueKiller is a portable application, so you don't need to install anything.

2. Windows Antihazard Helper may block all executable files, so when you launch the RogueKiller file, it will execute itself. So Rename RogueKiller.exe to RogueKiller.com or winlogon.exe or iexplore.exe

3. At this point a "pre-scan" will complete and stop any malicious process. Also a list of options will appear along the right-hand side.
   
   

---

Step 4: Remove Windows Antihazard Helper registry keys

To remove Windows Antihazard Helper malicious registry entries, we will need RogueKiller again.
RogueKiller also checks for rogue Registry entries, rogue drivers, and Master Boot Record (MBR) issues, so rootkits will be cut.
RogueKiller can also fix and restore a Host file, delete any Proxy entries, repair shortcut problems and unhide files.

CAUTION: This tool is not for beginners. In this step we will ONLY use the Registry tab.

To Delete Windows Antihazard Helper Registry entries:

1. Always in Safe Mode run a scan, open RogueKiller and click on Scan.
   
   

2. After a while, you should see a screen with scan results like the following one:
   
   

3. Click on the Registy tab, then click on the Delete button.
   
   

Don't Reboot you computer yet, please stay in Safe Mode.

---

Step 5: Remove Windows Antihazard Helper files

Malwarebytes Anti-Malware is simply the best known FREE malware removal tools online.

To remove Windows Antihazard Helper files:

1. Download Malwarebytes to your desktop from the following link:
   Malwarebytes Anti-Malware Download link
   
   

2. Just Follow the easy setup process. Do not make any changes to the default settings
   When the setup is finished, make sure you leave both the Update Malwarebytes Anti-Malware and Launch Malwarebytes Anti-Malware checked.
   You can check or uncheck the Enable free trial of Malwarebytes Anti-Malware PRO as the malware removal is FREE.
   Then click on the Finish button. If Malwarebytes prompts you to reboot, please do not do so.
   
   

3. When Malwarebytes is launched, it will ask you to update the databse. Just click OK.
   
   

4. On the Scanner tab,select Quick scan and then click on the Scan.
   
   

5. When the scan is finished a message box will appear, click OK to continue.
   Then the screen results will show the various malware infections including Windows Antihazard Helper that Malwarebytes has found on your computer.
   the image below is just an example, your results will be different.
   Click on the Remove Selected button.
   
   

6. After Malwarebytes has finished the removal of Windows Antihazard Helper, you will get a message stating that you need to reboot your computer.
   Just Do so, and restart your computer in Normal Mode.
   
   

---

Step 6: Check for any Windows Antihazard Helper left over

To make sure that your computer is now completely free of Windows Antihazard Helper, redo a Malwarebytes scan in Normal Mode.
After your are finished, Reboot your PC as asked by Malwarebytes anti-malware.

---