Severity scale  

Windows Pro Defence Kit. How to Remove? (Uninstall Guide)

removal by - -   Also known as WindowsProDefenceKit | Type: Rogue Antispyware

Windows Pro Defence Kit is a malicious application, which was created for making the money. It is categorized as rogue anti-spyware because all it does is infects computers and then starts displaying fake alerts. Of course, it always 'detects' something and then offers purchasing its useless license and eliminating detected cyber infections. If you thought that Windows Pro Defence Kit is legitimate, you should remember that neither these viruses nor its license is real. You must ignore all alerts that belong to rogue anti-virus and also scan the system with reliable anti-spyware if you want to get rid of its malicious files. Otherwise, you may find more viruses installed on your computer, notice continuous redirects to unknown websites and receive more alerts that are misleading. System slow downs may also be caused by this rogue.

How can Windows Pro Defence Kit infiltrate my computer?

Windows Pro Defence Kit is spread by trojans that typically hide inside illegal websites, misleading pop-up notifications and spam. In most of the cases, these notifications report that computer is infected and that you should check it with a free tool by clicking on the ad. Once you click on such ad, you download virus on your computer. In order to avoid other Windows Pro Defence Kit's infiltration methods, you should pay more attention to your PC's security. We highly recommend relying only on reliable anti-viruses and anti-spywares.

As soon as Windows Pro Defence Kit hijacks the system, it is also set to start its work everytime victim reboots computer. Once these preparations are made, malware starts showing such misleading alerts and notifications:

Trojan activity detected. System integrity at risk. Full system scan is highly recommended.

Warning! Identity theft attempt detected
Hidden connection IP:
Target: Microsoft Corporation keys

Firewall has blocked a program from accessing the Internet
is suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.

System data security is at risk!
To prevent potential PC errors, run a full system scan.

If you have already been tricked by Windows Pro Defence Kit and purchased its license, you should waste no time and contact your bank in order to dispute the payment. Otherwise, hackers may try to steal your credit card details and steal more money from you. In addition, we also recommend scanning the system with reliable anti-spyware. This will help you to remove Windows Pro Defence Kit from your computer.

How to remove Windows Pro Defence Kit?

Windows Pro Defence Kit is a misleading security application, which only mimics activities that are performed by anti-spywares. If you started receiving its ads, you should waste no time and scan it with one of anti-spywares. Our recommended products are Reimage, PlumbytesWebroot SecureAnywhere AntiVirus, Malwarebytes Anti Malware.

If you can't launch any of them, use these instructions:

1. Reboot your computer to Safe Mode with Networking. Just reboot your PC and, as soon as it starts booting up, start pressing F8 repeatedly.
2. Loggin as the same user as you were in normal Windows mode.
3. Now click on IE or other browser and select 'Run As' or 'Run As administrator', enter your Administrator account password (if needed).
4. Enter this link to your address bar: and download a program on your desktop. Launch it to kill the malicious processes and remove its files.

The latest parasite names used by FakeVimes:
Windows Internet Guard, Windows Web Watchdog, Windows AntiBreach Patrol, Windows Antivirus Patrol, Windows Pro Defence Kit

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Reimage - remover Happiness
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Pro Defence Kit. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Windows Pro Defence Kit. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
We are testing Plumbytes's efficiency (2014-03-19 06:11)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2014-03-19 06:11)
Hitman Pro
Webroot SecureAnywhere AntiVirus
Windows Pro Defence Kit screenshot
Windows Pro Defence Kit snapshot

Windows Pro Defence Kit manual removal

Kill processes:
%AppData%\svc-[random characters].exe

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableVirtualization" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MS-SEC" = %AppData%\svc-.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ZSFT" = %AppData%\svc-.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "S_SC" = %AppData%\svc-.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SD-986-001" = %AppData%\svc-.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\Software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bckd "ImagePath" = 22.sys
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\svc-.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
Delete files:
%UserProfile%\Desktop\Windows Pro Defence Kit.lnk
%AllUsersProfile%\Start Menu\Programs\Windows Pro Defence Kit.lnk
%AppData%\svc-[random characters].exe

Removal guides in other languages

Information updated:

Comments on Windows Pro Defence Kit

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)