DP's Security Bits

Windows Virtual Firewall is a rogue anti-spyware program from the Rogue.FakeVimes family of computer infections. Programs from this family are spread via three methods. The first method is hacked web sites that host malicious scripts that attempt to exploit vulnerabilities on your computer to install Windows Virtual Firewall without your permission or knowledge. The second method is through Trojans that pretend to be a codec or software that is required to view an online video. The last method is through advertisements that pretend to be online anti-malware scanners that state your computer is infected and then prompt you to download and install the rogue to remove the detected threats.

While being installed, Windows Virtual Firewall will set itself to start automatically and will create numerous Windows Registry entries that make it so you are unable to launch your normal programs. When you attempt to launch one of your normal security programs, these Registry entries will instead launch the rogue and state that your programs are infected.

Once started, the program will perform a fake scan of your computer and state that there are numerous infections present. If you attempt to remove any of these infections, though, the program will state that you first need to purchase it before it will allow you to do so. As these threats are either non-existent or harmless files, please ignore any of the scan results and instead remove this rogue via the guide below.

http://www.bleepingcomputer.com/virus-removal/remove-windows-virtual-firewall