Windows Software Protection
Windows Software Protection is a bogus security product created for Windows operating system. Windows Software Protection virus can penetrate a target computer by providing misleading alerts about the status of the computer. This malicious software is promoted on fake Microsoft Security Essentials alert. When you visit an infected web sites related to this malware, you might see this pop-up message:
Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click ‘show details’ to learn more.
Executing this warning will lead you to download and install a trial version of Windows Software Protection. If loaded on the computer, it will modify the registry to make itself to run every time you start using Windows. Then, the virus begins to scan your PC and quickly exhibit dozens of threats it recommends to remove as soon as possible. However, it will not permit you to proceed. Cleaning the computer will only function if you obtain the full version of Windows Software Protection.
Keep in mind that Windows Software Protection virus was created in the sole mean of earning a profit from this fraudulent act. It will ask for your credit card details to process the payment. However, aside from the software license fee, other charges may be debited to your account. Worst, attacker may use your credit card data for unknown transactions. You must avoid this harmful software. As much as possible, remove Windows Software Protection using only trusted anti-virus programs.
Screen Shot Image:
Technical Details and Additional Information:
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7
[cf]regis[/cf] [cf]files[/cf]How to Remove Windows Software Protection
Automatic Removal Procedures
Windows Software Protection Removal Tool:
In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.
Using Portable SuperAntiSpyware:
To thoroughly remove the virus, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be remove as well. Click here to download and run SAS Portable Scanner.
Online Virus Scanner:
Another way to remove a virus without the need to install additional anti-virus application is to perform a thorough scan with free Online Virus Scanner that can be found here or on websites of legitimate anti-virus and security provider.
Alternative Removal Method for Windows Software Protection
Option 1 : Use Windows System Restore to return Windows to previous state
If Windows Software Protection enters the computer, there is a big chance that Windows files, registry entries and other essential components are also infected. System Restore can reinstate clean system files by restoring the configuration to an earlier date. The method also replaces compromised files with a clean version. If you have a saved restore point before Windows Software Protection infiltrates the PC, we highly encourage you to execute this procedure if none of the above works. You may proceed with Windows System Restore, click here to see the full procedure.
Option 2 : Windows Software Protection manual uninstall guide
IMPORTANT! Manual removal of Windows Software Protection requires technical skills. Deleting system files and registry entries by mistake may result to total disability of Windows system. We advise you to perform a backup of registry before proceeding with this guide.
1. Kill any running process that belongs to Windows Software Protection.
- Press Ctrl+Alt+Del on your keyboard.
- When Windows Task Manager appears, look for Windows Software Protection files (refer to Technical Reference) and click End Process.
2. Delete all registry entries that belong to this malware.
- Press [Windows Key]+R on your keyboard.
- In the 'Open' dialog box, type regedit and press Enter. This will open registry editor.
- Find and delete registry entries as mentioned in Technical Reference section below.
- Close registry editor. Changes made will be save automatically.
3. Scan the computer with antivirus program.
- Connect to Internet and open your antivirus software. Please update to obtain the latest database and necessary files.
- Restart the computer in Safe Mode.
- Just before Windows logo begins to load press F8 on your keyboard.
- On Windows Advanced Boot Options, select Safe Mode and press Enter.
4. Delete all files dropped by Windows Software Protection.
- While still in Safe Mode, search and delete malicious files. Please refer to 'Technical Reference'. Make sure that you execute 'End Task' first before deleting the file. Otherwise, the system will not let you perform this action.
Kronos
Feb 09, 2011 @ 18:52:28
Thanx for this information page!