Firewall Warning is not a genuine firewall warning alert, its just a false alert from WinPC Antivirus which is also belong to rogue security software group. Weather you click on “Block Attack” or “Allow” button, you will be redirect to WinPC Antivirus website. This is done in order to scare the user so that he would buy the full version of the rogue. The “Firewall Warning” Pop up shows:
“FIREWALL WARNING. Hidden file transfer to remote host was detected. WinPC Anrivirus has detected that somebdoy is trying to transfer your private data via Internet. We strongly recommend you to block the attack immediately. Details of the attack: remote host transfer IP 18.104.22.168; remote user computer name ‘FORENSICS'”
Risk Level : High
Note :- To safely & quickly detect Firewall Warning, We highly recommend you to use the Removal Tool for Firewall Warning.
Download – Removal Tool for Firewall Warning Popup
Symptoms of WinPC Antivirus
Pop up balloon warning messages claiming that your PC is infected.
- "Critical System Error",
- "Your computer is infected",
- Hijacked homepage to obscure webpage.
- Flashing icons appear on your system tray (Near of your system clock).
Manual Removal Process: ( How to get rid of Firewall Warning alert )
Search and kill the following processes (Learn Here)
Remove Firewall Warning files & folders (Learn Here)
%UserProfile%\Start Menu\WinPC Antivirus.LNK
Remove/Modify corrupt Registry Entries (Learn Here)
HKEY_CURRENT_USER\Control Panel\don’t load “scui.cpl”
HKEY_CURRENT_USER\Control Panel\don’t load “wscui.cpl”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusDisableNotify” => 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallDisableNotify” => 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “UpdatesDisableNotify” => 1