How do I repair a malware infected Windows 8 / 8.1 system that is blocking the Antivirus software?

info-symbol

This article is for a Windows 8 system that has been infected with malware blocking antivirus software.

Here you can see how to repair the system after the malware has been removed as explained in this article.

settings-icon

  1. Change to the Metro desktop ("tile view").
  2. Right-click on an empty area.
  3. Select "All apps" at the lower edge.
  4. Open the "Task-Manager" (to the right, in the category "Windows System").
  5. Click on FileRun new task.


     
  6. Enter "regedit".
  7. Check "Create this task with administrative privileges.".


     
  8. Click on OK.
  9. Search for the following path:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\


    Below this folder is another folder "0". Please delete it.


     
  10. Next, please look for this path:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\

  11. On the right side please look for the entry "ConsentPromptBehaviorUser".
  12. Right-click on it and select "Modify".


     
  13. Change the value to "1".


     
  14. Click on OK.
  15. Close all windows.

The initial entries of the system have to be corrected in the next step:

  1. Change to the Metro desktop ("tile view").
  2. Right-click on an empty area.
  3. At the lower edge, select "All apps".
  4. Open the "Task-Manager".
  5. Select the tab "Startup".


     
  6. Look for all entries with "regsrv" in the description.
  7. Right-click on the corresponding entries and select "Disable".
  8. Repeat this for all entries that contain "regsrv".
  9. Close all windows<./li>

Restart your PC now.

Modules that are relevant for the system will be generated again at the restart.

影響を受ける製品

  • Avira Professional Security [Windows]
  • Avira Free Antivirus [Windows]
  • Avira Antivirus Pro [Windows]
  • Avira Internet Security Suite [Windows]
  • Avira Ultimate Protection Suite [Windows]
  • 作成日 : 2014年5月23日金曜日
  • 最終更新日時 : 2018年3月29日木曜日
  • この記事を評価