Search this blog

Tuesday, April 26, 2011

Windows Protection Suite virus. How to remove Windows Protection Suite bogus anti-malware tool

We would now like to warn you of Windows Protection Suite. This stands for another fake anti-virus tool that applies counterfeit scan results and bogus security alerts in order to make you believe your PC is infected with plenty of spywares, Trojans and other supposed malicious applications. You need to know that this fictitious device throws lots of lies in front of you and then proposes to you to purchase its registered version in order to remove non-existing system security vulnerabilities.

Windows Protection Suite is spread via evil Trojan viruses and fabricated online anti-malware scanners. This virus can be also uploaded and then installed manually during browsing of several malicious sites that spread it. After its successful installation this badware will be adjusted in such a way that it would run its fictitious scan of your workstation automatically with every Windows launching. Windows Protection Suite would state that all kinds of infections and privacy problems are available on your PC and would indicate that you should purchase the device in order to have those problems repaired. In addition, it will regularly show legitimately looking security alerts from Windows task bar. The bogus program will also try to imitate Windows Security center. It has a tendency to present security warnings and notices telling of unprotected PC and possible attacks from some kind of remote PC. Fake notices from Windows task bar indicate the text of the following meaning: "System Alert! Malicious applications, which can contain trojans, were found on your PC and need to be immediately removed. Click here to remove these potentially harmful items using Windows Protection Suite". As soon as it is successfully launched and running, Windows Protection Suite will greatly slow down the system speed of your workstation. Most probably it will delete all available system restore points and block all installed security applications. In order to make things even more worse and scary, Windows Protection Suite will block your Internet browser and all search results after your inquiry.

To make the long story short, you need to get rid of Windows Protection Suite virus from your system. Its only main objective is to make you pay for its full registered version, which is as incapable of removing real threats as the trial one. We recommend you to uninstall Windows Protection Suite virus by means of GridinSoft Trojan Killer. There are several ways of doing this, including automatic and manual removal of this junkware. The choice is all yours, but you must get rid of Windows Protection Suite immediately to prevent further damage of your system due to its presence.

Windows Protection Suite automatic removal:

For automatic removal of Windows Protection Suite download GridinSoft Trojan Killer and run it.

Windows Protection Suite manual removal:

Delete Windows Protection Suite files:

  • %CommonAppData\56a10a26-dc02-40f3-a4da-8fa92d06b367_.mkv
  • %CommonPrograms%\Startup\56a10a26-dc02-40f3-a4da-8fa92d06b367_33.lnk
  • %ProgramFiles%\Windows Protection Suite
  • %ProgramFiles%\Windows Protection Suite\Windows Protection Suite.dll
  • %AppData%\Microsoft\Internet Explorer\Quick Launch\Windows Protection Suite.lnk
  • %Desktop%\Windows Protection Suite.lnk
  • %Programs%\Startup\56a10a26-dc02-40f3-a4da-8fa92d06b367_33.lnk
  • %TempDir%\[random].dll

Delete Windows Protection Suite registry entries:

  • HKCR\CLSID\{56a10a26-dc02-40f1-a4da-8fa92d06b367}
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56a10a26-dc02-40f1-a4da-8fa92d06b367}
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run “56a10a26-dc02-40f3-a4da-8fa92d06b367_33″
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “56a10a26-dc02-40f3-a4da-8fa92d06b367_33″

No comments:

Post a Comment

Search this blog