|
|
How to remove Windows Protection Suite (pop up) |
|
|
Monday, September 14th, 2009 at 2:35 am |
|
| |
Windows Protection Suite description |
|
| |
Misleading:The program reports false or exaggerated system security threats on the computer.The user is then prompted to pay for a full license of the application in order to remove the threats.
When Windows Protection Suite is installed, it will configure itself to start automatically when your computer starts and create numerous harmless files that will then be detected as infections when the program scans your computer. It will also constantly show fake security alerts and warnings that stop you from doing anything else but not allow you to remove them until you purchase it. In fact, the only infection that you have is Windows Protection Suite. You have to remove the rogue anti-malware Windows Protection Suite if it is already installed on your PC.
|
|
 |
| |
Technical details (How to remove Windows Protection Suite(pop up)) |
|
| |
When Windows Protection Suite is executed, it creates the following files: c:\ADWARE_LOG c:\Documents and Settings\All Users\Application Data\345d567 c:\Documents and Settings\All Users\Application Data\345d567\285.mof c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll c:\Documents and Settings\All Users\Application Data\345d567\WI345d.exe c:\Documents and Settings\All Users\Application Data\345d567\WINPS.ico c:\Documents and Settings\All Users\Application Data\345d567\working.log c:\Documents and Settings\All Users\Application Data\345d567\WINSPSys c:\Documents and Settings\All Users\Application Data\345d567\WINSPSys\vd952342.bd c:\Documents and Settings\All Users\Application Data\WINSPSys c:\Documents and Settings\All Users\Application Data\WINSPSys\winps.cfg %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Protection Suite.lnk %UserProfile%\Application Data\Windows Protection Suite %UserProfile%\Application Data\Windows Protection Suite\cookies.sqlite %UserProfile%\Application Data\Windows Protection Suite\Instructions.ini %UserProfile%\Desktop\Windows Protection Suite.lnk %UserProfile%\Recent\cb.sys %UserProfile%\Recent\cid.dll %UserProfile%\Recent\cid.tmp %UserProfile%\Recent\CLSV.dll %UserProfile%\Recent\CLSV.tmp %UserProfile%\Recent\DBOLE.sys %UserProfile%\Recent\ddv.dll %UserProfile%\Recent\eb.sys %UserProfile%\Recent\eb.tmp %UserProfile%\Recent\energy.drv %UserProfile%\Recent\energy.sys %UserProfile%\Recent\exec.tmp %UserProfile%\Recent\kernel32.drv %UserProfile%\Recent\PE.drv %UserProfile%\Recent\PE.tmp %UserProfile%\Recent\ppal.exe %UserProfile%\Recent\runddlkey.drv %UserProfile%\Recent\snl2w.sys %UserProfile%\Recent\tempdoc.dll %UserProfile%\Start Menu\Windows Protection Suite.lnk %UserProfile%\Start Menu\Programs\Windows Protection Suite.lnk c:\Program Files\Mozilla Firefox\searchplugins\search.xml
Windows Protection Suite creates the following registry entry/ies: HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF} HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "9877034603" HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Protection Suite"
Free download remover for Windows Protection Suite (pop up)
|
|
| |
Screen Shots |
|
| |
|
|
| |
|
|
| |
|
|
| |
facebok facbook
Random Password Generator Defrag server Defrag server 2003 Spyware remover software Free registry cleaner xp Password generator Naruto Hentai Spyware Remover Freeware
Spyware remover Free spyware removal software Crap cleaner System restore
|
|