Remove Windows Protection Master

Removal instructions

Severity scale:  (87 / 100)

Windows Protection Master is a program that should be avoided because it's a malware which relies on Trojan viruses and its creators are trying to get some money illegally by using this malicious threat. This rogue anti-spyware is promoted with a help of fake online anti-malware scanners, misleading sites and other fraudulent software. To make it easier to understand, you have to know that Windows Protection Master is basically a clone of Think Point application which also belongs to the same Rogue.VirusDoctor family.

Just after getting on board Windows Protection Master won't sit peacefully and will start appearing on your computer with scary notifications from Windows task bar. 
It also uses a fake scanner after each system reboot. After Windows Protection Master finishes its fake scan, it will claim that your computer is infected with numerous viruses but won't let remove them until you purchase its certain modules that are not included in a trial version. However, Windows Protection Master only pretends scanning actions and it won't remove any real virus even after being purchased. In order to trick its victims, this scamware claims:

Warning! Identity theft attempt detected
Hidden connection ip: XXXX
Target: Your bank account details.
Your IP: XXXX

Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Warning! Spambot detected!
Attention! A spambot is sending viruses from your e-mail has been detected on your PC.
Yes, protect my PC and remove spambot now (Recommended)

Torrent Alert
Recommended: Please use secure encrypted protocol for torrent links.
Torrent link detected!
Receiving this notification means that you have violated the copyright laws. Using Torrent for downloading movies and licensed software shall be prosecuted and you may be sued for cybercrime and breach of law under the SOPA legislation.
Please register your copy of the AV to activate anonymous data transfer and protocol through the torrent link.

Warning! Virus Detected
Threat detected: FTP Server
Infected file: C:\Windows\System32\dllcache\wmploc.dll

This rogue anti-spyware won't stop its annoying activity until it is not eliminated. It may start continuous redirections to other fraudulent websites, hijack your browser and make your computer very hard to use. While running, Windows Protection Master was noticed to be blocking legitimate programs running. Even your browsers become very hard to launch when Windows Protection Master is secretly on your computer, so never leave this scamware on your PC. If you have already bought Windows Security Master, contact your credit card company to dispute the charges. And finally, remove Windows Protection Master from your computer using a reputable antispyware program.

Remember that only an upgraded version of a legitimate program, such as SpyHunter, Spyware Doctor or Malwarebytes Anti Malware can do the job properly.

Automatic Windows Protection Master removal:

Malwarebytes Anti Malware

Download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Windows Protection Master (2012-02-13 09:51:56)

Spyware Doctor

Download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Windows Protection Master (2012-02-13 09:51:56)

STOPzilla

Download | review

We are testing STOPzilla's efficiency at removing Windows Protection Master (2012-02-13 09:51:56)

XoftSpySE Anti Spyware

Download | review

Windows Protection Master manual removal:

FORUM:
Discuss Windows Protection Master in
spyware removal forum

Kill processes:
Inspector[random].exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adaware.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\belt.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deputy.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\icload95.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lnetinfo.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mpftray.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\netscanpro.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nssys32.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ozn695m5.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\perswf.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PskSvc.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafetyKeeper.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spoler.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vbcons.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winservn.exe "Debugger"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zonealarm.exe "Debugger"

HELP:
how to remove registry entries

Unregister DLLs:
NPSWF32.dll

HELP:
how to unregister malicious DLLs

Delete files:
%AppData%\Inspector-[random].exe
%AppData%\NPSWF32.dll
%AppData%\result.db
%UserProfile%\Desktop\Windows Protection Master.lnk
%StartMenu%\Programs\Windows Protection Master.lnk

HELP:
how to remove harmful files

QR code for Windows Protection Master removal instructions:

QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Windows Protection Master are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Windows Protection Master right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

Additional resources:

Post Comment:

Attention: Use this form only if you have additional information about Windows Protection Master parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«


* All field required