What is Windows Firewall Constructor?
Terminate Windows Firewall Constructor the moment you notice this program acting up in your computer, because it is a dangerous rogue that will cause great damage to your computer if you don’t take the infection seriously.
What is a Rogue Antispyware Program?
Windows Firewall Constructor and many other rogues out there are fake computer security programs that might look and behave like legitimate applications, but it is only a fake act devised in order to trick and steal your money.
A user might ask how it can be possible for something like Windows Firewall Constructor to steal his or her money. The answer is simple – since Windows Firewall Constructor looks so much like a real antivirus, it is easy to believe in whatever it says. The usual chain of events is as follows: Windows Firewall Constructor infects your computer and configures the Registry in a way it allows the program to run automatically once you restart your computer. Windows Firewall Constructor full system “scan” window pops into view and performs a fake full system scan, “finding” multiple errors and infections. Then Windows Firewall Constructor urges you to purchase the full version of the program, saying that only the licensed version will protect you against any threat possible. So when you pay for the “program” you expose your financial information and then the criminals behind Windows Firewall Constructor can use it to steal your money.
Hence, you must get rid of Windows Firewall Constructor as soon as possible. Use a reliable security tool to do it automatically, if you cannot do it manually.
Windows Firewall Constructor is the more so dangerous, because it belongs to the Rogue.FakeVimes family of computer malware. The previous versions of this rogue include such computer threats as Windows Stability Guard, Windows PRO Scanner, Windows Telemetry Center and many more. Keeping in mind how fast new rogues of this family appear, it would be of no surprise if yet another one would pop up any time soon.
As it has been mentioned above, Windows Firewall Constructor tries to convince you that you have been infected with multiple malware by sending you fake security notifications. The example of such messages is as follows:
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Warning! Virus Detected
Threat detected: FTP Server
Infected file: C:\Windows\System32\dllcache\wmpshell.dll
Apart from that Windows Firewall Constructor is also able to block your executables, Task Manager and Registry Editor. You might ask why the rogue would block Registry Editor if you don’t use it often. However, Registry Editor is an important Windows tools, especially for those users, who know how to remove rogues manually, and therefore, by blocking various Windows tools and applications Windows Firewall Constructor tries to prolong its stay on your computer.
Everything is done in order for this rogue to swindle you out of your money. While it tries to achieve that, Windows Firewall Constructor little by little damages your computer and you have to do something about it quick, because if the rogue stays in your system for a long period of time, the system can be damaged beyond repair. Remove Windows Firewall Constructor immediately and safeguard your computer against similar threats.
tested removal of Windows Firewall Constructor*100% FREE spyware scan and
Stop these Windows Firewall Constructor Processes:
Remove these Windows Firewall Constructor Files:
%CommonStartMenu%\Programs\Windows Firewall Constructor.lnk
Remove these Windows Firewall Constructor Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312 "iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ss3edit.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PC_Antispyware2010.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\McSACore.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "dbbqyjinfs"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\auto-protect.nav80try.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wupdt.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = 2012-2-29_2
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ethereal.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0