Windows Virtual Angel

From Wiki-Security, the free encyclopedia of computer security

Windows Virtual Angel Information
Type: Spyware
Analysis: Installs & gathers info from a PC without user permission.
Infection: By downloading freeware & shareware.
Symptoms: Changes PC settings, excessive popups & slow PC performance.
Detection Tool: >>> Download SpyHunter's Spyware Scanner <<<

SpyHunter's spyware scanner is intended to quickly scan and identify spyware on your PC. If you wish to eliminate spyware from your PC and prevent future spyware attacks, we recommend you buy SpyHunter's spyware removal tool, which includes full technical support and a Spyware HelpDesk to tackle spyware that is uniquely affecting your PC.
IE Alert:

If you are using Internet Explorer and can not download SpyHunter, please use a different browser like Firefox or Chrome.

Windows Virtual Angel is a rogue anti-virus program that tricks PC users into believing that a computer infection has taken place and must be eliminated using its paid software. While Windows Virtual Angel is designed with the final intention of extorting money from computer users, monetary fraud is just one part of the entire scheme. Windows Virtual Angel is often bundled with a rootkit, so that Windows Virtual Angel is able to avoid detection as long as possible. Its keylogger functionality, furthermore, allows Windows Virtual Angel to obtain financial data from PC users. Although Windows Virtual Angel is branded as something from Microsoft, Windows Virtual Angel does not possess the features or the usability of a legitimate Windows product. There is every reason, therefore, to eliminate Windows Virtual Angel, before the infection escalates to highly alarming levels. Windows Virtual Angel belongs to the same family, FakeVimes, as its many clones. A few of these clones include Windows Privacy Adviser, Windows ProActive Safety, Windows Malware Firewall and Windows Proprietary Advisor.

Predictable Tactics of Windows Virtual Angel

Like many of its variants and versions, Windows Virtual Angel main objective is to take advantage of the necessity for PC users to install security software in their respective computers. The cyber criminals behind Windows Virtual Angel usually rely on hacked websites and malicious scripts in the perpetration of an infection. When a PC user visits the hacked website, the site will drop the infection through a drive-by download. When this happens, the victim normally doesn't know that an infection has already taken place.
The people behind Windows Virtual Angel also employ unreliable anti-malware scanners to distribute this rogue anti-virus application. These online scanners will pretend to scan the targeted PC, proceed to display the infection and convince the user to download Windows Virtual Angel. In this case, the computer users know they are downloading some software, except that they are unaware of its malicious nature. Once downloaded, Windows Virtual Angel will immediately work on its strategy – launching scans and showing fake alerts. These are done to scare the PC user further and have them pay for the full version of Windows Virtual Angel.

How to Protect Your PC from Windows Virtual Angel

The continued presence of these rogue anti-virus applications in the Internet is proof that not all websites and not all anti-malware applications are worthy of your time, trust or money. These rogue anti-virus applications are being distributed through an affiliate program. Affiliates are provided with fake codec links, obfuscation tools and other materials necessary to distribute Windows Virtual Angel in as many Windows computers as possible.

Safeguarding your PC from these rogueware attacks starts with responsible web browsing practices and ends with installing legitimate PC security software. Updating your operating system and security software, as well as keeping firewall settings turned on, also helps to protect your computer from rogueware assaults.
Windows Virtual Angel does not offer any benefit or service, whether in scanning for malware or updating computer security. Eliminating this fake anti-virus software should be done at once, through a legitimate PC security product.

To check your computer for Windows Virtual Angel, download SpyHunter Spyware Detection Tool.

SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Windows Virtual Angel and other threats. If you detect the presence of Windows Virtual Angel on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Windows Virtual Angel.


Detection of Windows Virtual Angel (Recommended)

Windows Virtual Angel is difficult to detect and remove. Windows Virtual Angel is not likely to be removed through a convenient "uninstall" feature. Windows Virtual Angel, as well as other spyware, can re-install itself even after it appears to have been removed.

You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Windows Virtual Angel and other spyware, adware, trojans and viruses on your computer.

Run a Windows Virtual Angel scan/check to successfully detect all Windows Virtual Angel files with the SpyHunter Spyware Detection Tool. If you wish to remove Windows Virtual Angel, you can either purchase the SpyHunter spyware removal tool to remove Windows Virtual Angel or follow the Windows Virtual Angel manual removal method provided in the "Remedies and Prevention" section.

Method of Infection

There are many ways your computer could get infected with Windows Virtual Angel. Windows Virtual Angel can come bundled with shareware or other downloadable software.

Another method of distributing Windows Virtual Angel involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Windows Virtual Angel on your system. Windows Virtual Angel installs on your computer through a trojan and may infect your system without your knowledge or consent.

If you think you may already be infected with Windows Virtual Angel, use this SpyHunter Spyware dectection tool to detect Windows Virtual Angel and other common Spyware infections. After detection of Windows Virtual Angel, the next advised step is to remove Windows Virtual Angel with the purchase of the SpyHunter Spyware removal tool.


Windows Virtual Angel may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Windows Virtual Angel from your computer.

Remedies and Prevention

Windows Virtual Angel, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Windows Virtual Angel along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.

Install a good anti-spyware software

When there's a large number of traces of Spyware, for example Windows Virtual Angel, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Windows Virtual Angel and other types of spyware.

Remove Windows Virtual Angel manually

Another method to remove Windows Virtual Angel is to manually delete Windows Virtual Angel files in your system. Detect and remove the following Windows Virtual Angel files:


  • %AppData%\Protector-[RANDOM CHARACTERS].exe

Registry Keys

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-2-17_2"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "rudbxijemb"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "ID" = 0
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe

External links

RECOMMENDED by Wiki-Security
Download SpyHunter's Spyware detection tool to detect the latest Spyware threats.

Disclaimer Information
This website, its content or any portion of this website is NOT affiliated with, connected to, or sponsored by Windows Virtual Angel or its creators in any way. This website does not advocate the actions or behavior of Windows Virtual Angel and its creators. Our objective is to provide Internet users with the know-how to detect and remove Windows Virtual Angel and other Internet threats.

The readers of this article should not mistake, confuse or associate this article to be an advertisement or a promotion of Windows Virtual Angel in any way. The content provided on this website is intended for educational or informational purposes and is provided "AS IS" with no warranties, and confers no rights.