• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

My AntiSpyware

Your Go-To Destination for Scam Awareness, Malware Removal, Antispyware Downloads, and Expert Guidance

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools
Home › Rogue Anti Spyware › Tutorials - HowTo › How to remove BlockWatcher (Uninstall instructions)

How to remove BlockWatcher (Uninstall instructions)

Myantispyware team October 31, 2009     No Comment    

BlockWatcher is a rogue antispyware program from the WiniGuard family of rogue antispyware as SoftBarrier, ShieldSafeness and SoftStronghold. This software uses trojans to masquerade itself as an Adobe Flash Player update. When the trojan is downloaded and installed, it will install BlockWatcher, will create a lot of harmless files with random names and will set BlockWatcher to run automatically every time, when computer loads. Once running, BlockWatcher will begin to scan the computer and list previously created files as infections to trick you to buy the paid version of the software. All of these infections are scam and can`t harm your computer, so you can safely ignore them.

BlockWatcher
BlockWatcher

The same trojan that installs BlockWatcher will also display nag screens, fake security alerts and notifications from Windows task bar. An example:

Spyware Alert!
Your computer is infected with spyware. It could damage your
critical files or expose your private data on the Internet. Click
here to register your copy of BlockWatcher and remove
spyware threats from your PC.

You should ignore all the warnings that the rogue gives you and remove it from your computer. Use these free instructions below to remove BlockWatcher and any associated malware from your computer.

More BlockWatcher screen shoots



Symptoms in a HijackThis Log

O4 – HKCU\..\Run: [zdp4.tmp.exe] C:\WINDOWS\system32\zdp4.tmp.exe
O4 – HKCU\..\Run: [BlockWatcher] C:\Program Files\BlockWatcher Software\BlockWatcher\BlockWatcher.exe -min

Use the following instructions to remove BlockWatcher (Uninstall instructions)

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for BlockWatcher infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

BlockWatcher_remover
Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start BlockWatcher removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.

BlockWatcher creates the following files and folders

C:\Documents and Settings\All Users\Start Menu\Programs\BlockWatcher
C:\Program Files\BlockWatcher Software
C:\Program Files\BlockWatcher Software\BlockWatcher
C:\WINDOWS\system32\zdp4.tmp.exe
C:\Documents and Settings\All Users\Start Menu\Programs\BlockWatcher\1 BlockWatcher.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\BlockWatcher\2 Homepage.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\BlockWatcher\3 Uninstall.lnk
C:\Program Files\BlockWatcher Software\BlockWatcher\BlockWatcher.exe
C:\Program Files\BlockWatcher Software\BlockWatcher\uninstall.exe
C:\Documents and Settings\All Users\Desktop\BlockWatcher.LNK

BlockWatcher creates the following registry keys and values

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BlockWatcher
HKEY_LOCAL_MACHINE\SOFTWARE\BlockWatcher
HKEY_CURRENT_USER\SOFTWARE\BlockWatcher
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\zdp4.tmp.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BlockWatcher

Rogue Anti Spyware Tutorials - HowTo

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

Leave a Reply Cancel reply




New Guides

TEMU UP TO 90 OFF SPECIAL OFFER scam
Beware of the ‘TEMU UP TO 90% OFF SPECIAL OFFER’ Scam on Facebook! 🚨
Delivery Failed Addressee Unknown USPS Scam
Delivery Failed, Addressee Unknown: USPS or Scam? Decoding the Alert
Re Captha Version Top virus
Re Captha Version Top Virus Removal Guide
Rosyday.co.uk scam store
Rosyday.co.uk Review: The Reality Behind the ‘Beautiful Dresses’ Facebook Ads
Re-captha-version-3-35.top Click Allow Scam
Re-captha-version-3-35.top Virus Removal Guide

Follow Us

Search

Useful Guides

Tech Support Scam
Remove Tech Support Scam pop-up virus [Microsoft & Apple Scam]
How to reset Internet Explorer settings to default
This setting is enforced by your administrator (Removal guide)
Files encrypted by ransomware become useless
How To Recover Encrypted Files (Ransomware file recovery)
browser redirect virus
How to remove Browser redirect virus [Chrome, Firefox, IE, Edge]

Recent Posts

How to remove Windows Enterprise Suite (Uninstall instructions)
How to remove SoftBarrier (Uninstall instructions)
How to remove Desktop Defender 2010 (Uninstall instructions)
How to remove Volcano Security Suite (Uninstall instructions)
How to remove Windows System Defender (Uninstall instructions)

MYANTISPYWARE.COM

  • About Us
  • Contact Us
  • Privacy Policy

NEED A HELP ?

If you're seeing unwanted pop-ups or ads in your web-browser, you might have an adware installed on your computer. Use the following guide to stop pop-up ads and remove malicious software. Or ask for help here.

Links

  • Downloads
  • Instructions
  • Questions and Answers
  • Free Malware Removal Tools
Copyright © 2004 - 2023 MASW - Myantispyware.com.