Severity scale  
  (87/100)

Windows Protection Master. How to Remove? (Uninstall Guide)

removal by ,   Also known as WindowsProtectionMaster | Type: Rogue Antispyware

Windows  Protection Master is a program that should be avoided because it's a  malware which relies on Trojan viruses and its creators are trying to  get some money illegally by using this malicious threat. This rogue  anti-spyware is promoted with a help of fake online anti-malware  scanners,  misleading sites and other fraudulent software. To make it easier to  understand, you have to know that Windows Protection Master is basically  a clone of Think Point application which also belongs to the same Rogue.VirusDoctor family.

Just  after getting on board Windows Protection Master won't sit peacefully  and will start appearing on your computer with scary notifications from  Windows task bar. 
It also uses a fake scanner after each system reboot.  After Windows Protection Master finishes its fake scan, it will claim  that your computer is infected with numerous viruses but won't let  remove them until you purchase its certain modules that are not included  in a trial version. However, Windows Protection Master only pretends  scanning actions and it won't remove any real virus even after being  purchased. In order to trick its victims, this scamware claims:

Warning! Identity theft attempt detected
Hidden connection ip: XXXX
Target: Your bank account details.
Your IP: XXXX

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Warning! Spambot detected!
Attention! A spambot is sending viruses from your e-mail has been detected on your PC.
Yes, protect my PC and remove spambot now (Recommended)

Torrent Alert
Recommended: Please use secure encrypted protocol for torrent links.
Torrent link detected!
Receiving this notification means that you have violated the copyright  laws. Using Torrent for downloading movies and licensed software shall  be prosecuted and you may be sued for cybercrime and breach of law under  the SOPA legislation.
Please register your copy of the AV to activate anonymous data transfer and protocol through the torrent link.

Warning! Virus Detected
Threat detected: FTP Server
Infected file: C:\Windows\System32\dllcache\wmploc.dll

This rogue anti-spyware won't stop its annoying activity  until it is not eliminated. It may start continuous redirections to  other fraudulent websites, hijack your browser and make your computer  very hard to use. While running, Windows Protection Master was noticed to be blocking  legitimate programs running. Even your browsers become very hard to  launch when Windows Protection Master is secretly on your computer, so  never leave this scamware on your PC. If you have already bought Windows  Security Master, contact your credit card company to dispute the  charges. And finally, remove Windows Protection Master from your  computer using a reputable antispyware program.

Remember  that only an upgraded version of a legitimate program, such as SpyHunter, STOPzilla or Malwarebytes Anti Malware can do the job properly.

The latest parasite names used by FakeVimes:
Windows Internet Guard, Windows Web Watchdog, Windows AntiBreach Patrol, Windows Antivirus Patrol, Windows Pro Defence Kit  

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
SpyHunter - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Webroot SecureAnywhere AntiVirus SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.
SpyHunter is recommended to uninstall Windows Protection Master. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of SpyHunter malware removal tool.

More information about this program can be found in SpyHunter review.

If you decided to select another anti-spyware, uninstall SpyHunter from your computer.
more than 40.000.000 downloads!
Webroot SecureAnywhere AntiVirus is recommended remover to uninstall Windows Protection Master. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Alternate Software
Alternate Software
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2012-02-14 04:10)
Reimage
We are testing Reimage's efficiency
Windows Protection Master screenshot
Windows Protection Master snapshot

Windows Protection Master manual removal

Kill processes:
Inspector[random].exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adaware.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\belt.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deputy.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\icload95.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lnetinfo.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mpftray.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\netscanpro.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nssys32.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ozn695m5.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\perswf.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PskSvc.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafetyKeeper.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoler.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vbcons.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winservn.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonealarm.exe "Debugger"
Unregister DLLs:
NPSWF32.dll

Delete files:
%AppData%\Inspector-[random].exe
%AppData%\NPSWF32.dll
%AppData%\result.db
%UserProfile%\Desktop\Windows Protection Master.lnk
%StartMenu%\Programs\Windows Protection Master.lnk

Information updated:

Comments on Windows Protection Master

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)
Like us on Facebook