Title: Windows Protection Master
Also known as: WindowsProtectionMaster

Remove Windows Protection Master
Removal instructions

 
Severity scale:Windows Protection Master severity is 87  (87 / 100)
 

Windows  Protection Master is a program that should be avoided because it's a  malware which relies on Trojan viruses and its creators are trying to  get some money illegally by using this malicious threat. This rogue  anti-spyware is promoted with a help of fake online anti-malware  scanners,  misleading sites and other fraudulent software. To make it easier to  understand, you have to know that Windows Protection Master is basically  a clone of Think Point application which also belongs to the same Rogue.VirusDoctor family.

Just  after getting on board Windows Protection Master won't sit peacefully  and will start appearing on your computer with scary notifications from  Windows task bar. 
It also uses a fake scanner after each system reboot.  After Windows Protection Master finishes its fake scan, it will claim  that your computer is infected with numerous viruses but won't let  remove them until you purchase its certain modules that are not included  in a trial version. However, Windows Protection Master only pretends  scanning actions and it won't remove any real virus even after being  purchased. In order to trick its victims, this scamware claims:

Warning! Identity theft attempt detected
Hidden connection ip: XXXX
Target: Your bank account details.
Your IP: XXXX

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Warning! Spambot detected!
Attention! A spambot is sending viruses from your e-mail has been detected on your PC.
Yes, protect my PC and remove spambot now (Recommended)

Torrent Alert
Recommended: Please use secure encrypted protocol for torrent links.
Torrent link detected!
Receiving this notification means that you have violated the copyright  laws. Using Torrent for downloading movies and licensed software shall  be prosecuted and you may be sued for cybercrime and breach of law under  the SOPA legislation.
Please register your copy of the AV to activate anonymous data transfer and protocol through the torrent link.

Warning! Virus Detected
Threat detected: FTP Server
Infected file: C:\Windows\System32\dllcache\wmploc.dll

This rogue anti-spyware won't stop its annoying activity  until it is not eliminated. It may start continuous redirections to  other fraudulent websites, hijack your browser and make your computer  very hard to use. While running, Windows Protection Master was noticed to be blocking  legitimate programs running. Even your browsers become very hard to  launch when Windows Protection Master is secretly on your computer, so  never leave this scamware on your PC. If you have already bought Windows  Security Master, contact your credit card company to dispute the  charges. And finally, remove Windows Protection Master from your  computer using a reputable antispyware program.

Remember  that only an upgraded version of a legitimate program, such as SpyHunterSTOPzilla or Malwarebytes Anti Malware can do the job properly.

The latest parasite names used by FakeVimes:
Windows Internet Guard, Windows Web Watchdog, Windows AntiBreach Patrol, Windows Antivirus Patrol, Windows Pro Defence Kit  

Automatic Windows Protection Master removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Windows Protection Master you agree with our Privacy Policy and Agreement of Use.
SpyHunter is recommended remover to uninstall Windows Protection Master. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

If you failed to remove Windows Protection Master using SpyHunter, submit question to our support team and provide as much details as possible.
dot
STOPzilla
download
manual required
We are testing STOPzilla's efficiency at removing Windows Protection Master (2012-02-13 09:51:56)
dot
Malwarebytes Anti Malware
download
manual required
We are testing Malwarebytes Anti Malware's efficiency at removing Windows Protection Master (2012-02-13 09:51:56)
dot
XoftSpySE Anti Spyware
download
manual required
We are testing XoftSpySE Anti Spyware's efficiency at removing Windows Protection Master (2012-02-13 09:51:56)
dot
Defender Pro Ultimate
download
manual required
We are testing Defender Pro Ultimate's efficiency at removing Windows Protection Master (2012-02-13 09:51:56)

what to do if you failed to remove the infection?
Virus Removal
Phone Support
Help Line to remove Windows Protection Master
Windows Protection Master snapshot:
Windows Protection Master snapshot

Windows Protection Master manual removal:

Kill processes:
Inspector[random].exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adaware.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\belt.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deputy.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\icload95.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lnetinfo.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mpftray.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\netscanpro.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nssys32.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ozn695m5.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\perswf.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PskSvc.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafetyKeeper.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoler.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vbcons.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winservn.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonealarm.exe "Debugger"
Unregister DLLs:
NPSWF32.dll

Delete files:
%AppData%\Inspector-[random].exe
%AppData%\NPSWF32.dll
%AppData%\result.db
%UserProfile%\Desktop\Windows Protection Master.lnk
%StartMenu%\Programs\Windows Protection Master.lnk

QR code for Windows Protection Master removal instructions:

Windows Protection Master qrcode
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Windows Protection Master are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Windows Protection Master right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.
Information added: 2012-02-13 09:51:56
Information updated: 2012-02-14 04:10:11

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Post Comment:

Attention: Use this form only if you have additional information about Windows Protection Master parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Like us on Facebook
Latest spyware news:
Subscribe to spyware news
Please enter your e-mail address:
If you do not want to receive our spyware
newsletter please unsubscribe here
48631 Subscribers
Ask us
I failed to remove Windows Protection Master using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!
add text box
rss feed
help other