Severity scale:  

Windows Virtual Protector. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as WindowsVirtualProtector | Type: Rogue Antispyware

Windows Virtual Protector is yet another rogue anti-spyware from FakeVimes. Just like previously released Windows Accelerator Pro, Windows Premium Shield, Windows Efficiency Console and many other rogues from the same family, it relies on identical alerts that typically report about tens of different viruses. Of course, this malware is designed for money, so after announcing for its victims how hardly-infected their computers are, it offers to purchase its licensed version. In this situation, you should never spend your money on Windows Virtual Protector or other anti-virus that you didn't install. If you want to check your PC, scan it with a reliable anti-spyware and see what it detects. We can guarantee that it will report about Windows Virtual Protector. In this case, you should delete this virus.

How can Windows Virtual Protector infiltrate my computer?

Windows Virtual Protector can easily infiltrate computer unnoticed. That's because it relies on trojan horse, which can hide in various places. If you tend to use unlicensed programs, open spam or visit illegal websites, you can increase the possibility of downloading this trojan horse on your computer. As soon as it enters the system, it modifies it and downloads malicious files that belong to Windows Virtual Protector. After that, it starts showing how it scans computer for viruses and then displays such and similar alerts:

System data security is at risk!
To prevent potential PC errors, run a full system scan.

Warning! Identity theft attempt detected
Hidden connection IP:
Target: Microsoft Corporation keys

Please, avoid Windows Virtual Protector because it's just another rogue from FakeVimes. If you see its ads, it means that your computer was infected with rogue anti-spyware. In this case, you should waste no time and use these instructions:

How to remove Windows Virtual Protector?

Windows Virtual Protector is a dangerous virus, which must be eliminated ASAP. That's why we recommend using these programs for fixing your computer: Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus. If you can't launch any of them, use these instructions:

1. Reboot your computer to Safe Mode with Networking. Just reboot your PC and, as soon as it starts booting up, start pressing F8 repeatedly.
2. Loggin as the same user as you were in normal Windows mode.
3. Now click on IE or other browser and select 'Run As' or 'Run As administrator', enter your Administrator account password (if needed).
4. Enter this link to your address bar: and download a program on your desktop. Launch it to kill the malicious processes and remove its files.

The latest parasite names used by FakeVimes:
[newest id=”fakevimes”]

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Virtual Protector you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Virtual Protector. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Windows Virtual Protector snapshot
Windows Virtual Protector snapshot

Windows Virtual Protector manual removal:

Kill processes:

Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "GuardSoftware" = "%AppData%guard-toiy.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWinlogon "Shell"="C:\Users\User\AppData\Roaming\guard-fvtb.exe"


HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes"=".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAttachments "SaveZoneInformation"=1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsseces.exe "Debugger"="svchost.exe"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsmpeng.exe "Debugger"="svchost.exe"

Delete files:


About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions