{"id":2420,"date":"2012-03-01T05:14:24","date_gmt":"2012-03-01T05:14:24","guid":{"rendered":"http:\/\/malwaretips.com\/blogs\/?p=2420"},"modified":"2012-03-01T07:32:30","modified_gmt":"2012-03-01T07:32:30","slug":"removal-guide-for-windows-basic-antivirus-2","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/removal-guide-for-windows-basic-antivirus-2\/","title":{"rendered":"Remove Windows Basic Antivirus"},"content":{"rendered":"<h1 style=\"text-align: center;\">Remove Windows Basic Antivirus (Uninstall Guide)<\/h1>\n<p><strong>Windows Basic Antivirus<\/strong>\u00a0is a malicious software that will display fake alerts, claiming malware has been detected on your computer.<br \/>\nThe security alerts are professional looking pop-ups and when you click on them, you\u2019re advised to buy Windows Basic Antivirus in order to remove the detected threats.<br \/>\nIn reality, none of the issues are real, and are only used to scare you into buying\u00a0Windows Basic Antivirus and stealing your personal financial information.<br \/>\nTo make matters worse, this malicious software actually installs malicious code that puts you at risk of attack from additional threats.<br \/>\nWe strongly advise you to follow our Windows Basic Antivirus removal guide and ignore any alerts that this malicious software might generate.Under no circumstance should you buy this rogue security software as this can lead to identity theft.<\/p><div id=\"mwtad91463008\" class=\"gas_fallback-ad_309684--placement_360520\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3957935887\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p>If you&#8217;ve got a <strong>Windows Basic Antivirus\u00a0<\/strong> infection , you&#8217;ll be seeing this screens :<\/p>\n<p><img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/fakeav\/Windows Basic Antivirus.png\" alt=\"[Image: Windows Basic Antivirus ]\" border=\"0\" title=\"\"><\/p>\n<p><img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/fakeav\/Windows+Stability+Guard-trial.png\" alt=\"[Image: Windows Basic Antivirus trial]\" border=\"0\" title=\"\"><\/p>\n<h1>Removal guide for Windows Basic Antivirus<\/h1>\n<div id=\"mwtad4227218642\" class=\"gas_fallback-ad_309746-ad_309691-placement_360521\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"4456629336\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>STEP 1 : Start your computer in\u00a0Safe Mode with Networking<\/h2>\n<p>To boot into Safe Mode with Networking <strong>press and hold the F8<\/strong> key as your computer restarts.<br \/>\nOn the <strong>Advanced Boot Options<\/strong> screen, use the arrow keys to highlight\u00a0Safe Mode with Networking\u00a0, and then <strong>press\u00a0ENTER<\/strong><\/p><div id=\"mwtad1641467966\" class=\"gas_fallback-ad_381396-ad_309691-placement_360566\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"1471373341\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p><img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/safemode.jpg\" alt=\"[Image: Safemode.jpg]\" border=\"0\" title=\"\"><\/p>\n<hr \/>\n<div id=\"mwtad1582875940\" class=\"gas_fallback-ad_309747-ad_309691-placement_360587\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"9589536513\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>STEP 2 :\u00a0Remove Windows Basic Antivirus malicious proxy server which is preventing the you from accessing the internet.<\/h2>\n<p><strong>Open<\/strong> Internet Explorer \u2192 Click on the <strong>gear icon<\/strong> <img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/icongear.jpg\" alt=\"[Image: icongear.png]\" border=\"0\" title=\"\"> (Tools for Windows XP Users) \u2192 Select <strong>Internet Option<\/strong>s \u2192 <strong>Connections<\/strong> tab \u2192 Click on <strong>LAN Settings<\/strong> \u2192 Uncheck\u00a0the option\u00a0<strong>Use a proxy server for your LAN<\/strong><img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/ie3.png\" alt=\"[Image: Windows Basic Antivirus  2012-ie3]\" border=\"0\" title=\"\"><\/p>\n<p>If you are a Firefox users, go to <em>Firefox(upper\u00a0left corner) \u2192 Options \u2192 Advanced tab \u2192 Network \u2192 Settings<\/em> \u2192 Select\u00a0<em>No Proxy<\/em><\/p>\n<hr \/>\n<h3>STEP 3:\u00a0Run <a href=\"http:\/\/www.bleepingcomputer.com\/download\/anti-virus\/rkill\" rel=\"nofollow noopener\" target=\"_blank\">RKill<\/a> to terminate Windows Basic Antivirus malicious processes<\/h3>\n<ol type=\"1\">\n<li>While your computer is\u00a0 in <em>Safe Mode with Networking<\/em> ,download and run <a href=\"http:\/\/www.bleepingcomputer.com\/download\/anti-virus\/rkill\" rel=\"nofollow noopener\" target=\"_blank\">RKill<\/a> to terminate Windows Basic Antivirus malicious processes.<br \/>\n<a href=\"http:\/\/download.bleepingcomputer.com\/grinler\/iExplore.exe\" rel=\"nofollow noopener\" target=\"_blank\"><img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/downloadnow.gif\" alt=\"\" title=\"\"><\/a><\/li>\n<li>Run Rkill , when the program has completed its task, it will <strong>generate a log<\/strong>. You can then <strong>proceed with the rest of the guide<\/strong>.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/rkill3.png\" alt=\"[Image: rkill3.jpg]\" border=\"0\" title=\"\"><\/li>\n<\/ol>\n<h4>WARNING:\u00a0Do not reboot your computer after running RKill as the malware process will start again , preventing you from properly performing the next step.<\/h4>\n<hr \/>\n<h3>STEP 4:\u00a0Download and scan with <a href=\"https:\/\/store.malwarebytes.org\/342\/cookie?affiliate=17877&amp;redirectto=http%3a%2f%2fwww.malwarebytes.org%2fproducts%2fmalwarebytes_free\" rel=\"nofollow noopener\" target=\"_blank\">Malwarebytes Anti-Malware FREE<\/a>\u00a0to remove Windows Basic Antivirus malicious files from your computer.<\/h3>\n<ol type=\"1\">\n<li>Download and run Malwarebytes Anti-Malware FREE<br \/>\n<a href=\"https:\/\/store.malwarebytes.org\/342\/cookie?affiliate=17877&amp;redirectto=http%3a%2f%2fwww.malwarebytes.org%2fproducts%2fmalwarebytes_free\" rel=\"nofollow noopener\" target=\"_blank\"><img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/downloadnow.gif\" alt=\"\" title=\"\"><\/a><\/li>\n<li><strong>Install Mawlarebytes Anti-Malware by following the prompts<\/strong>. Do not make any changes to the default installation settings and do not restart your computer if asked so.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/mbam2.png\" alt=\"[Image: Windows Basic Antivirus mbam2.png]\" border=\"0\" title=\"\"><\/li>\n<li>On the\u00a0<strong>Scanner<\/strong>\u00a0tab,please select\u00a0<strong>Perform full scan<\/strong>\u00a0and then click on the\u00a0<strong>Scan<\/strong>\u00a0button to start scanning your computer for any possible infections.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/mbam4.png\" alt=\"[Image: Windows Basic Antivirus mbam4.png]\" border=\"0\" title=\"\"><\/li>\n<li>When the scan is finished click the &#8216;<strong>OK<\/strong>&#8216; button and then you will be presented with a screen showing you the malware infections that Malwarebytes&#8217; Anti-Malware has detected.<br \/>\nMake sure that <strong>everything is\u00a0Checked\u00a0(ticked)<\/strong> and click on\u00a0<strong>Remove Selected<\/strong>\u00a0button.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/mbam6.png\" alt=\"[Image: Windows Basic Antivirus mbam6.png]\" border=\"0\" title=\"\"><\/li>\n<li>Malwarebytes&#8217; Anti-Malware will now start removing the malicious files.<br \/>\nIf during the removal process Malwarebytes will display a message stating that it needs to<strong> reboot, please allow<\/strong> this request.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/mbam10.png\" alt=\"[Image: Windows Basic Antivirus mbam10.png]\" border=\"0\" title=\"\"><\/li>\n<\/ol>\n<hr \/>\n<div id=\"mwtad1093884219\" class=\"gas_fallback-ad_309748-ad_309691-placement_360588\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3906789406\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>STEP 5:\u00a0Download ans scan with <a href=\"https:\/\/www.cleverbridge.com\/747\/cookie?affiliate=17877&amp;redirectto=http:\/\/www.surfright.com\/downloads\" rel=\"nofollow noopener\" target=\"_blank\">HitmanPro<\/a> to double check your system for any left over infections.<\/h2>\n<ol type=\"1\">\n<li>This step can be performed in <strong>Normal Mode<\/strong> ,so please <strong>download the latest official version of HitmanPro<\/strong>.<br \/>\n<a href=\"https:\/\/www.cleverbridge.com\/747\/cookie?affiliate=17877&amp;redirectto=http:\/\/www.surfright.com\/downloads\" rel=\"nofollow noopener\" target=\"_blank\"><img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/downloadnow.gif\" alt=\"\" title=\"\"><\/a><\/li>\n<li>Start HitmanPro\u00a0 by <strong>double clicking on the previously downloaded file.<\/strong> and then following the prompts.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/hpro4.png\" alt=\"[Image: hitmanproscan4.png]\" border=\"0\" title=\"\"><\/li>\n<li>Once the scan is complete, a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click\u00a0<strong>Next<\/strong>\u00a0.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2012\/02\/rsz_hpro5.png\" alt=\"[Image: hitmanproscan5.png]\" border=\"0\" title=\"\"><\/li>\n<li>Click\u00a0<strong>Activate free license<\/strong>\u00a0to start the free 30 days trial and remove the malicious files.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/hpro6.png\" alt=\"[Image: hitmanproscan6.png]\" border=\"0\" title=\"\"><\/li>\n<li>HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/hpro7.png\" alt=\"[Image: hitmanproscan7.png]\" border=\"0\" title=\"\"><\/li>\n<\/ol>\n<hr \/>\n<div id=\"mwtad988568705\" class=\"gas_fallback-ad_318930-ad_309691-placement_360589\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3818335085\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>STEP 6: Remove the residual damage from Windows Basic Antivirus<\/h2>\n<p>Windows Basic Antivirus may also modify your HOSTS file default settings, which can cause browser redirects or errors while trying to access antivirus and security websites.<br \/>\nTo protect itself, Windows Basic Antivirus has changed the permissions of the HOSTS file so you can&#8217;t edit or delete it.<\/p><div id=\"mwtad563975822\" class=\"gas_fallback-ad_309686-ad_309691-placement_360569\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"6935453015\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<ol type=\"1\">\n<li>Please <strong>download the following batch file<\/strong> to revert your HOSTS file permissions:<br \/>\n<img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/attachtypes\/html.gif\" alt=\".bat\" border=\"0\" title=\"\">\u00a0\u00a0<a href=\"http:\/\/malwaretips.com\/images\/removalguide\/hostfix.bat\" target=\"_blank\">hostfix.bat<\/a>\u00a0(Size: 134 bytes)<\/li>\n<li><strong>Click on\u00a0hostfix.bat<\/strong>\u00a0and allow this file to run.Once it starts you will see a small black window that opens and then quickly goes away, then you should be able access your HOSTS file.<\/li>\n<li>Please <strong>download and run the below file from\u00a0Microsoft\u00a0<\/strong>to revert your host file to its original settings.Please note that if you have added custom entries to your HOSTS file then you will need to add them again after restoring the default HOSTS file.<br \/>\n<a href=\"http:\/\/go.microsoft.com\/?linkid=9668866\" rel=\"nofollow noopener\" target=\"_blank\"><img decoding=\"async\" src=\"\/\/malwaretips.com\/images\/removalguide\/downloadnow.gif\" alt=\"\" title=\"\"><\/a><\/li>\n<\/ol>\n<div id=\"mwtad1079946134\" class=\"gas_fallback-ad_381388-ad_309691-placement_381390\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3191649120\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>If you are still experiencing problems on your machine, please start a new thread in our\u00a0<a href=\"http:\/\/malwaretips.com\/Forum-Malware-Removal-Assistance-and-Help\" rel=\"nofollow\" target=\"_blank\">Malware Removal Assistance<\/a>\u00a0forum.<\/h2>\n<hr \/>\n<p>For more detailed instructions on how to perform each step, you can read our <a title=\"Remove Windows Basic Antivirus (Uninstall Guide)\" href=\"http:\/\/malwaretips.com\/blogs\/remove-windows-basic-antivirus\/\"> Remove Windows Basic Antivirus (Uninstall Guide)<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Remove Windows Basic Antivirus (Uninstall Guide) Windows Basic Antivirus\u00a0is a malicious software that will display fake alerts, claiming malware has been detected on your computer. The security alerts are professional looking pop-ups and when you &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Remove Windows Basic Antivirus\" class=\"read-more button\" href=\"https:\/\/malwaretips.com\/blogs\/removal-guide-for-windows-basic-antivirus-2\/#more-2420\" aria-label=\"Read more about Remove Windows Basic Antivirus\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":2377,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ai_generated_summary":"","footnotes":""},"categories":[49],"tags":[],"class_list":["post-2420","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scam-reports","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/2420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=2420"}],"version-history":[{"count":0,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/2420\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/2377"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=2420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=2420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=2420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}