Aliases: No associated aliases
Windows Defender detects and removes this threat.
This malware family can steal your personal information and lower your PC security settings.
- Stop your security software from running
- Steal your sensitive information
- Download and run other files
- Delete security-related files from your PC
- Lower your PC security settings
Use the following free Microsoft software to detect and remove this threat:
- Windows Defender Antivirus for Windows 10 and Windows 8.1, or Microsoft Security Essentials for Windows 7 and Windows Vista
- Microsoft Safety Scanner
- Microsoft Windows Malicious Software Removal Tool
You should also run a full scan. A full scan might find other hidden malware.
Enable registry editor
This threat might prevent Registry Editor from running. To allow the Registry Editor to run, follow these steps:
- Click Start then Run and type cmd to run a command prompt.
- In the command prompt, type the following and press Enter:
reg.exe add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f
- Type exit.
Restore your PC
This threat might make lasting changes to your PC's settings that won't be restored when it's cleaned. The following steps can help change these settings back to what you want:
- Restore my system registry:
- Restore security settings to a known working state
- View hidden and/or system files:
- Start Windows services:
- Enable Task Manager:
- Enable Windows Firewall:
- Enable Windows Security Center/Action Center alerts:
- Correct "disable Autorun registry key" enforcement in Windows
- For other support and help related articles, go to:
- Microsoft Security TechNet Center
Get more help
If you’re using Windows XP, see our Windows XP end of support page.