Windows Virtual Protector is yet another rogue anti-spyware from FakeVimes. Just like previously released Windows Accelerator Pro, Windows Premium Shield, Windows Efficiency Console and many other rogues from the same family, it relies on identical alerts that typically report about tens of different viruses. Of course, this malware is designed for money, so after announcing for its victims how hardly-infected their computers are, it offers to purchase its licensed version. In this situation, you should never spend your money on Windows Virtual Protector or other anti-virus that you didn't install. If you want to check your PC, scan it with a reliable anti-spyware and see what it detects. We can guarantee that it will report about Windows Virtual Protector. In this case, you should delete this virus.
How can Windows Virtual Protector infiltrate my computer?
Windows Virtual Protector can easily infiltrate computer unnoticed. That's because it relies on trojan horse, which can hide in various places. If you tend to use unlicensed programs, open spam or visit illegal websites, you can increase the possibility of downloading this trojan horse on your computer. As soon as it enters the system, it modifies it and downloads malicious files that belong to Windows Virtual Protector. After that, it starts showing how it scans computer for viruses and then displays such and similar alerts:
System data security is at risk!
To prevent potential PC errors, run a full system scan.
Warning! Identity theft attempt detected
Hidden connection IP: xx.xxx.xxx.xxx
Target: Microsoft Corporation keys
Your IP: XXXXXXXXXXXX
Please, avoid Windows Virtual Protector because it's just another rogue from FakeVimes. If you see its ads, it means that your computer was infected with rogue anti-spyware. In this case, you should waste no time and use these instructions:
How to remove Windows Virtual Protector?
Windows Virtual Protector is a dangerous virus, which must be eliminated ASAP. That's why we recommend using these programs for fixing your computer: Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus. If you can't launch any of them, use these instructions:
1. Reboot your computer to Safe Mode with Networking. Just reboot your PC and, as soon as it starts booting up, start pressing F8 repeatedly.
2. Loggin as the same user as you were in normal Windows mode.
3. Now click on IE or other browser and select 'Run As' or 'Run As administrator', enter your Administrator account password (if needed).
4. Enter this link to your address bar: http://www.2-spyware.com/download/hunter.exe and download a program on your desktop. Launch it to kill the malicious processes and remove its files.
The latest parasite names used by FakeVimes:
Windows Virtual Protector manual removal:
Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "GuardSoftware" = "%AppData%guard-toiy.exe"
HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWinlogon "Shell"="C:\Users\User\AppData\Roaming\guard-fvtb.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsseces.exe "Debugger"="svchost.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsmpeng.exe "Debugger"="svchost.exe"