Virus Protector is a fake anti-spyware program that tries to trick users in to paying for its software license. It gets installed on a user’s computer by using Trojan viruses that get downloaded from shady websites on the internet. Once installed, Virus Protector creates a number of fake and harmless files in the computer’s hard disk. It then proceeds to load itself as a startup program and performs a large number of fake scans on the system reporting that the system is dangerously infected with malicious software. It also shows the previously created harmless files as viruses that should be removed. Virus Protector then urges the user to purchase a license to the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is insufficient to remove the detected ‘threats’. However, it is important to remember that the so-called ‘full’ version of Virus Protector is just as incapable of scanning or cleaning any system as the ‘trial’ version is.
Virus Protector
» Download Virus Protector Removal Software
As soon as you find a copy of this rogue program on your computer, you should take measures to delete Virus Protector. The process of Virus Protector removal involves stopping processes, unregistering DLLs, deleting files and folders and removing registry entries.
Virus Protector Manual Removal Procedures
The first step you must take in order to remove Virus Protector is to kill the following process:
- [random characters].exe
The next step you must take for Virus Protector removal is to unregister the following DLL file:
- [random characters].dll
Finally, to complete file removal, delete the following files and folders:
- c:\Documents and Settings\UserName\Application Data\[random characters].exe
- c:\Documents and Settings\UserName\Application Data\[random characters].dll
- c:\Documents and Settings\UserName\Local Settings\Temp\[random characters].exe
- c:\Documents and Settings\UserName\Local Settings\Temp\[random characters].dll
- c:\Program Files\Internet Explorer\[random characters].exe
- c:\Program Files\Internet Explorer\[random characters].dll
- c:\WINDOWS\[random characters].exe
- c:\WINDOWS\[random characters].dll
- c:\WINDOWS\system32\[random characters].exe
- c:\WINDOWS\system32\[random characters].dll
- c:\WINDOWS\system32\drivers\[random characters].exe
- c:\WINDOWS\system32\drivers\[random characters].dll
Now it is safe to say that your hard disk is devoid of anything to do with Virus Protector.
Virus Protector Registry Removal Proedures
File removal alone is not sufficient to properly delete Virus Protector. It is required to delete the following keys and settings for complete Virus Protector removal:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Virus Protector"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "LoadAppInit_DLLs" = "1"
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs" = "[random characters].dll"
After this step has been completed, your computer is safe from Virus Protector. Additionally, in order to make sure that the entire process related to Virus Protector removal has been completed successfully it is recommended to scan the PC using genuine antivirus software such as Spyware Doctor with Antivirus.
Delete Virus Protector Directories:
No set directories to delete
Outside Resources:
http://www.bleepingcomputer.com/virus-removal/remove-virus-protector
http://www.myantispyware.com/2012/04/10/how-to-remove-windows-component-protector-virus/
Speak Your Mind