How to get rid of Windows Protection Suite fake anti-virus program. Removal guide

andy | April 26, 2011

We would now like to warn you of Windows Protection Suite. This stands for another fake anti-virus tool that applies counterfeit scan results and bogus security alerts in order to make you believe your PC is infected with lots of spywares, Trojans and other supposed malwares. Bear in mind that this rogue device renders untrue scan results and then offers you to obtain its full version in order to get rid of non-existing system security vulnerabilities.

Windows Protection Suite virus

Windows Protection Suite virus

Windows Protection Suite is promoted by means of malicious Trojan viruses and fictitious online anti-malware scanners. This virus can be also downloaded and installed manually from several malicious sites that spread it. Upon its successful installation this malware will be tuned up in such a manner that it would run its fake scan of your system automatically with every Windows startup. Windows Protection Suite would claim the availability of all sorts of infections and privacy problems and state that you must buy the application in order to have those problems fixed. Moreover, it will regularly present legitimately looking security alerts from Windows task bar. The fake program will also try to imitate Windows Security center. It tends to show security warnings and messages telling of unprotected PC and possible attacks from a remote computer. Fake notification from Windows task bar indicates: “System Alert! Malicious applications, which can contain trojans, were found on your PC and need to be immediately removed. Click here to remove these potentially harmful items using Windows Protection Suite“. As soon as it is running, Windows Protection Suite will considerably slow down the system performance of your machine. Most probably it will remove all system restore points and block all available security programs. In order to make things even more horrifying, Windows Protection Suite will block your Internet browsers and search results.

To summarize the aforesaid, you need to remove Windows Protection Suite virus from your PC. Its only main goal is to make you pay for its full version, which is as useless as the trial one. We recommend you to remove Windows Protection Suite scam using GridinSoft Trojan Killer. There are several options of doing this, including automatic and manual removal of this pest. The choice is all yours, but you need to get rid of Windows Protection Suite by all means.

Windows Protection Suite automatic remover:

1. Download the latest version of GridinSoft Trojan Killer to clear (not infected) computer and install it.

2. Update the virus database.
3. Copy the entire folder “GridinSoft Trojan Killer” to your jump drive (memory stick). Normally it is located at the following path: (C:Program FilesGridinSoft Trojan Killer). “C” stands for the system disk of your computer. The name of the system disk, however, can be marked with another letter.
4. Open your jump drive (memory stick). Find the folder “GridinSoft Trojan Killer” there. Open it , find the file under the name “trojankiller.exe” and rename it to “iexplore.exe”.
5. Move memory stick to infected PC, open “GridinSoft Trojan Killer” folder and run iexplore.exe. Optional: copy the folder “GridinSoft Trojan Killer” from your jump drive to some other folder created on your PC and run “iexplore.exe”.

Windows Protection Suite manual removal guide:

Delete Windows Protection Suite files:
%CommonAppData56a10a26-dc02-40f3-a4da-8fa92d06b367_.mkv
%CommonPrograms%Startup56a10a26-dc02-40f3-a4da-8fa92d06b367_33.lnk
%ProgramFiles%Windows Protection Suite
%ProgramFiles%Windows Protection SuiteWindows Protection Suite.dll
%AppData%MicrosoftInternet ExplorerQuick LaunchWindows Protection Suite.lnk
%Desktop%Windows Protection Suite.lnk
%Programs%Startup56a10a26-dc02-40f3-a4da-8fa92d06b367_33.lnk
%TempDir%[random].dll
Delete Windows Protection Suite registry entries:
HKCRCLSID{56a10a26-dc02-40f1-a4da-8fa92d06b367}
HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{56a10a26-dc02-40f1-a4da-8fa92d06b367}
HKCUSoftwareMicrosoftWindowsCurrentVersionRun “56a10a26-dc02-40f3-a4da-8fa92d06b367_33″
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun “56a10a26-dc02-40f3-a4da-8fa92d06b367_33″

1 Comment

  1. Remove Windows Protection Suite says:

    This finally fixed my broswer redirect problem. Thanks!!!!!

Leave a comment

*