Description: Windows Protection Suite is a rogue security application which attempts to trick users into paying for a license to the software. This rogue application gets downloaded by Trojans which enter the computer under the pretext of online advertisements. Once installed, Windows Protection Suite disables the Windows Firewall and security updates. Then it proceeds to perform endless security scans on the system, reporting false results which state that the computer is heavily infected with malicious software. Fake security warning pop-ups are also generated from the Windows taskbar. The aim of all this activity is to try and get the user to pay for the license to the ‘full’ version of Windows Protection Suite by claiming that the currently installed ‘trial’ version is incapable of removing the detected ‘threats’. However, this is a fake software program, so it has no ability to clean the viruses which do not exist anyway. Therefore you should never fall for its tricks and you should never pay for its bogus software license.
Windows Protection Suite
» Download Windows Protection Suite Removal Software
Once you detect the malicious activity described above, it suggests an infection of Windows Protection Suite. You should take immediate measures to remove this rogue program. In order to remove Windows Protection Suite, you need to stop its processes, unregister its DLL files, delete its files and folders and remove its registry entries.
Remove Proxy Setting so You Can Connect to the Internet Again.
Windows Protection Suite Manual Removal Procedures
The first step you need to take in order to delete Windows Protection Suite is to stop the following processes: Not all of them will be running on your system
- WI345d.exe
- CLSV.exe
- snl2w.exe
- std.exe
- WindowsProtectionSuite.exe
- WI345d.exe
- ppal.exe
To learn how to terminate a running process see the How to Guides section on top.
Next, it is necessary to unregister the following DLL files:
- tempdoc.dll
- energy.dll
- mozcrt19.dll
- sqlite3.dll
- cid.dll
- CLSV.dll
- ddv.dll
The next step in Windows Protection Suite removal is to delete the following files and folders:
- WI345d.exe
- CLSV.exe
- snl2w.exe
- std.exe
- WindowsProtectionSuite.exe
- WI345d.exe
- ppal.exe
- tempdoc.dll
- energy.dll
- mozcrt19.dll
- sqlite3.dll
- cid.dll
- CLSV.dll
- ddv.dll
- tempdoc.dll
- WINPS.ico
- working.log
- vd952342.bd
- winps.cfg
- cookies.sqlite
- Instructions.ini
- cb.sys
- cid.tmp
- CLSV.tmp
- DBOLE.sys
Windows Protection Suite Registry Removal Procedures
Removal of files and folders alone is not sufficient to completely delete Windows Protection Suite. The following registry keys and settings should also be deleted for complete Windows Protection Suite removal:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “WindowsProtectionSuite”
- HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
- HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
- HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "9877034603"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Protection Suite"
You should now run a full security scan to ensure no other threats are installed on your computer if you have not already done so.
Windows Protection Suite Directories:
We are unsure of the exact file locations. Please make a comment if you have this threat and tell the world were it's located.
Outside Resources:
http://www.bleepingcomputer.com/virus-removal/remove-windows-protection-suite
http://answers.yahoo.com/question/index?qid=20090812170519AA4nVhb
Speak Your Mind