Malware Protection Center. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as MalwareProtectionCenter | Type: Rogue Antispyware
12

Malware Protection Center is a dangerous application that was released by scammers to gain some money. For that, this cyber threat simply starts displaying continuous alerts and scanners that claim about tons of viruses detected. This program is designed to report only about invented viruses that have nothing to do with a real computer's situation, so make sure you don't trust them. Note that it is capable to change the language on its alerts according to country and language settings found on the compromised PC. As soon as you notice its pop-ups, remove Malware Protection Center using a reputable anti-spyware program. Please, never buy licensed, full or whatever it is called version of Malware Protection Center. You will simply lose your money together with your credit card details and other sensitive information that can be found.

Malware Protection Center belongs to the category of rogue anti-spywares that are usually propagated by Trojans. These trojan viruses get inside the system through security vulnerabilities found and additionally set the malware to start once the PC is rebooted. That helps for Malware Protection Center to become a really dominating program on your system. In addition to annoying alerts and scanners, it will also disconnect the compromised PC from the Internet and will disable other legitimate programs found running on machine. The only website user is able to reach when Malware Protection Center is inside is the purchase page which agressively offers to buy the license.

To make you concerned about your computer, this scamware claims:

Warning! Virus Detected
Threat Detected: Trojan-Spy.HTML.BankFraud.ra
Recommended: Please click “Remove All” button to erase all infected files and protect your PC.

System Alert
Suspicious software which may be malicious has been detected on your PC. Click here to remove this threat immediately using Malware Protection Center.

System Message
Your PC may still be infected with dangerous viruses. Malware Protection Center protection is needed to prevent data loss and avoid theft of your personal data and credit card details. Click here to activate protection.

Address space conflict
Warning! Access conflict detected
An unidentified program is trying to access system process address space.

As you can see, the real aim of detecting and reporting dangerous viruses is really simple – Malware Protection Center tries to make users buy its license by scaring its victims into believing that they have numerous problems with their PCs. Because of it, you will get tons of system tray notifications and security scanners that will report malware on your machine. To forget about this problem, you are highly recommended to remove Malware Protection Center from your computer. Using a reputable anti-spyware for that is recommended.

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Malware Protection Center you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Malware Protection Center. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Malware Protection Center (2012-01-25)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Malware Protection Center (2012-01-25)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Malware Protection Center (2012-01-25)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Malware Protection Center (2012-01-25)

Malware Protection Center manual removal:

Kill processes:
ScanDisk_.exe

MPa76.exe

eb.exe

kernel32.exe

runddlkey.exe

tjd.exe

[random].exe

Delete registry values:
HKEY_CURRENT_USERSoftware3

HKEY_CLASSES_ROOTCLSID{3F2BBC05-40DF-11D2-9455-00104BC936FF}

HKEY_CLASSES_ROOTMP3d5_8029.DocHostUIHandler

HKEY_USERS.DEFAULTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=8040&q={searchTerms}"

HKEY_CURRENT_USERSoftwareClassesSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://findgala.com/?&uid=8040&q={searchTerms}"

HKEY_CURRENT_USERSoftwareMicrosoftInternet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings5.0User AgentPost Platform "88680791803"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings5.0User AgentPost Platform "update/208040"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer "DisallowRun" = "1"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "0" = "msseces.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "1" = "MSASCui.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "10" = "avgscanx.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "11" = "avgcfgex.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "12" = "avgemc.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "13" = "avgchsvx.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "14" = "avgcmgr.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "15" = "avgwdsvc.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerDisallowRun "2" = "ekrn.exe"

Unregister DLLs:
mozcrt19.dll

sqlite3.dll

energy.dll

PE.dll

std.dll

[random].dll

Delete files:
%AppData%Malware Protection Center

%AppData%Malware Protection Centercookies.sqlite

%AppData%Malware Protection CenterInstructions.ini

%AppData%Malware Protection CenterScanDisk_.exe

%AppData%MicrosoftInternet ExplorerQuick LaunchMalware Protection Center.lnk

%CommonAppData%79b35

%CommonAppData%79b35MPa76.exe

%CommonAppData%79b35MPC.ico

%CommonAppData%79b355162.mof

%CommonAppData%79b35mozcrt19.dll

%CommonAppData%79b35sqlite3.dll

%CommonAppData%79b35BackUp

%CommonAppData%79b35BackUpAdobe Reader Speed Launch.lnk

%CommonAppData%79b35BackUpAdobe Reader Synchronizer.lnk

%CommonAppData%79b35MPCSys

%CommonAppData%79b35Quarantine Items

%CommonAppData%MPOSBTAPBMC

%CommonAppData%MPOSBTAPBMCMPYYBEYC.cfg

%Desktop%Malware Protection Center.lnk

%UserProfile%Recentcb.drv

%UserProfile%Recenteb.exe

%UserProfile%Recenteb.sys

%UserProfile%Recentenergy.dll

%UserProfile%Recentenergy.drv

%UserProfile%Recentkernel32.exe

%UserProfile%Recentkernel32.tmp

%UserProfile%RecentPE.dll

%UserProfile%RecentPE.drv

%UserProfile%RecentPE.sys

%UserProfile%RecentPE.tmp

%UserProfile%Recentrunddlkey.exe

%UserProfile%RecentSM.tmp

%UserProfile%Recentsnl2w.sys

%UserProfile%Recentstd.dll

%UserProfile%Recentstd.drv

%UserProfile%Recenttjd.exe

%StartMenu%Malware Protection Center.lnk

%StartMenu%ProgramsMalware Protection Center.lnk

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author