Home » News » Rogue Antispyware » How to Remove Windows Protection Suite, Windows Protection Suite Removal Guide

How to Remove Windows Protection Suite, Windows Protection Suite Removal Guide

By Bryan on August 12, 2009 | Rogue Antispyware How to Remove Windows Protection Suite, Windows Protection Suite Removal Guide

Windows Protection Suite is a malicious application pretending to be a Windows security tool. However, it is very important not to fall into it's trap as it might cause some serious system security problems.

Windows Protection Suite is a part of an online scam designed to make the computer users purchase a non-functional security program, which actually appears to be a malware. The programs is distributed online at some fraudulent websites and is downloaded and installed with the help of trojans. Once inside the system Windows Protection Suite hijacks the internet browser and redirects it to some promotional websites that suggest buying the full Windows Protection Suite software. Please note that Windows Protection Suite is not an actual security application and is not able to detect or remove computer viruses of any kind. It is strongly advised to get rid of Windows Protection Suite upon detection.

Windows Protection Suite websites

windowsprotectionsuite.com
4-open-davinci.com
securitysoftwarepayments.com
privatesecuredpayments.com
secure.privatesecuredpayments.com
getantivirusplusnow.com
secure-plus-payments.com
getantivirusplusnow.com
secure-plus-payments.com
getavplusnow.com
securesoftwarebill.com
secure.paysecuresystem.com
4-open-davinci.com
securitysoftwarepayments.com
privatesecuredpayments.com
secure.privatesecuredpayments.com
getantivirusplusnow.com
secure-plus-payments.com
getantivirusplusnow.com
secure-plus-payments.com
getavplusnow.com
securesoftwarebill.com
secure.paysecuresystem.com Learn how to block rogue websites

New processes created

Windows Protection Suite.exe
uninstall.exe
WI345d.exe
CLSV.exe
wic0e.exe
ppal.exe Learn how to remove malicious processes

New Windows Protection Suite registry entries created

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "9877034603"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Protection Suite" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

%startmenu%\windows protection suite.lnk
%common_appdata%\winspsys\winps.cfg
Windows Protection Suite.exe
uninstall.exe
WI345d.exe
CLSV.exe
ANTIGEN.drv
DBOLE.drv
dudl.sys
energy.dll
grid.dll
grid.sys
kernel32.dll
PE.dll
runddl.dll
SM.dll
wic0e.exe
285.mof
mozcrt19.dll
sqlite3.dll
WINPS.ico
working.log
vd952342.bd
cookies.sqlite
instructions.ini
cb.sys
cid.dll
cid.tmp
CLSV.dll
CLSV.tmp
DBOLE.sys
ddv.dll
eb.sys
eb.tmp
energy.drv
energy.sys
exec.tmp
kernel32.drv
PE.drv
PE.tmp
ppal.exe
runddlkey.drv
snl2w.sys
tempdoc.dll
searchplugins\search.xml Learn how to unregister malicious DLL files

How to remove Windows Protection Suite

To remove Windows Protection Suite manually you must block rogue Windows Protection Suite related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Windows Protection Suite files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

Windows 7 Antispyware 2012 removal tutorial

Windows 7 Antispyware 2012 is a fake computer protection application which spreads via trojan horse and is a copy of Win 7 Antispyware 2012 scam as well. The parasite is distributed online and is usually difficult to avoid if one does not employ reputable security service. Once installed it will display false system security warnings and the will prompt you buy a "full" version of this program to remove threats that don't even exist. For example:Malware Intrusion! Read more.


News categories

Latest news