Junker or Windows Health Is Critical Alert Removal Guide

[HVNews]

Junker is a Trojan from the Rogue.Tech-Support-Scam family that displays fake security alerts on your computer that are designed to scare you into calling a remote tech support phone number. These alerts are shown in such a way as to trick the user into thinking their computer has crashed or that a virus has been detected on the computer. It does this to try and scare the infected user into calling one of the listed numbers in order to receive support. In reality, though, they will only be greeted with people who are trying to sell them unneeded support contracts and services.

Junker or Windows Health Is Critical Alert Removal Guide

• Sun, 06 Mar 2016 13:21:31 EST
• Read 563 times

Junker is a Trojan from the Rogue.Tech-Support-Scam family that displays fake security alerts on your computer that are designed to scare you into calling a remote tech support phone number. These alerts are shown in such a way as to trick the user into thinking their computer has crashed or that a virus has been detected on the computer. It does this to try and scare the infected user into calling one of the listed numbers in order to receive support. In reality, though, they will only be greeted with people who are trying to sell them unneeded support contracts and services.

When displaying the alerts, the Trojan will display phones numbers associated with the geographic region of the victim. For the USA the number is 1-800-986-4360, for the UK it is 0-800-088-5560, and for Australia the remote support number is 1-800-460-832.
When the Trojan is started, it will display a fake security alert that pretends to be a blue screen, or Windows crash, that states your computer has a serious error and that a virus has been detected. The text of these alerts are:

0x000000CE DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS
WINDOWS HEALTH IS CRITICAL
DO NOT RESTART
BSOD : Error 333 Registry Failure of operating system - Host:
Blue Screen Error 0x000000CE

and

Windows Detected a Potential threat on your computer
Windows Security Essential wasn't able to block virus. Windows detected potential threats that might compromise your privacy or damage your computer.
Error code: 0x8024402c, windows couldn't install the definition updates.

As you can see, this Trojan was created for the sole purpose of scaring you into calling a remote tech support phone number so they can sell you unnecessary services. If you have called this company and purchased any services, it is strongly advised that you contact your credit card company and dispute these charges. To remove Junker and other related badware, please use the removal guide below to remove it for free.
Array
View Associated Junker Files C:\Program Files (x86)\Junker\C:\Program Files (x86)\Junker\Junker.exeC:\Program Files (x86)\Junker\JunkerReports.dllC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Junker\C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Junker\C:\Windows\country_data.txtC:\Windows\junker.txt


View Associated Junker Registry Information HKCU\Software\JunkerHKCU\Software\Junker\ApplicationPath C:\Program Files (x86)\JunkerHKCU\Software\Junker\MACAddress HKCU\Software\Junker\InstalledVersion 1.02HKCU\Software\Junker\InstalledTime HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr 1HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Junker C:\Program Files (x86)\Junker\Junker.exeHKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing\PopupsUseNewWindow 2HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing\Enabled 1HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing\WarnOnClose 0HKLM\SOFTWARE\Classes\TypeLib\{454BE601-3DB6-4C6E-89EC-033342DF837D}HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{454BE601-3DB6-4C6E-89EC-033342DF837D}HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr 1HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\DisableAddonLoadTimePerformanceNotifica tions 1HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\Junker C:\Program Files (x86)\Junker\Junker.exeHKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\JunkerHK LM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr 1HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\DisableAddonLoadTimePerform anceNotifications 1HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{454BE601-3DB6-4C6E-89EC-033342DF837D}







Click here to view the article.