Windows Attacks Defender is a rogue anti-spyware program that is promoted via trojans and hacked websites. This rogue starts a fake system check and states that your computer in infected with malicious software. In order to remove the supposedly found infection and remove viruses you have to pay for a full version of Windows Attacks Defender. Of course, you shouldn't do that because this program is a scam and won't protect your computer for malware. Fake scan results is a vert common method used by scammers to scare users into purchasing rogue programs. You should remove Windows Attacks Defender from your computer manually or use an automatic removal tool below as soon as possible because the rogue program may later downlaod and install additional malware onto your computer.
Windows Attacks Defender will constantly display fake security alerts claiming that your computer in infected with spyware, trojans and other viruses.
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
The rogue program can not detect any problem, so in reality it blocks programs on your computer randomly and states that they are infected or potentially harmful. As you can see, Windows Attacks Defender is nothing more but a scam. It displays fake security alerts to make you think that your computer in infected. Then it prompts to pay for a full version of the program to clean up the computer. Do not buy. Instead, use our removal instructions below to remove Windows Attacks Defender from the system as soon as possible. If you can't download or install malware removal tools, reboot your computer in safe mode with networking and try running removal tool once again.
Windows Attacks Defender manual removal
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "ID" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-2-17_2"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
%appdata%\Inspector-[3 random characters].exe
%desktopdir%\Windows Attacks Defender.lnk
%StartMenu%\Programs\Windows Attacks Defender.lnk
Comments on Windows Attacks Defender
Post a comment
Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.