1 of 7
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Blocks internet connection
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Shows commercial adverts
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Infection Video Windows Pro Defence

Windows Pro Defence

Have you just found Windows Pro Defence on your computer? Remove this bogus application from the system as soon as you can, because it is waiting until you exhaust your patience and pay for its fake full version. You should be very persistent and resists the rogue’s intimidation, because it aims to get access to your money and rob you. Do not expose your financial data to Windows Pro Defence but delete it as soon as you can.

If you leave Windows Pro Defence in the system, you will have a great opportunity to see how a rogue might trick you. Windows Pro Defense is a typical example of malware as it will produce fictitious scans of the system, supposedly difficult to delete threats, and confusing warning messages. Moreover, it will simulate some disorders of the system to make you think that the system is heavily infected and, therefore, lead you into purchase a supposedly full version of Windows Pro Defence. Ignore the content of information you get and remove this infection.

Windows Pro Defence can be deleted either manually by an experienced Windows user or automatically by legitimate antimalware. The rogue did not ask your permission to enter your system, and you did not have a chance to say yes or no, but now you have a chance to choose how you want to remove this infection. If you are skilled at removing infections manually, delete Windows Pro Defence on your own, but if you use your computer just for basic needs, you should remove Windows Pro Defense by using a certified antimalware application. You only need to install it, and the removal will be performed automatically.

UPDATE

Windows Pro Defense replicates its old Rogue.VirusDoctor clones Windows Control Series and Windows Advanced Toolkit, and just like its predecessors, the new virus will ask for money, in return of your normal Windows running. Of course, this will be done in such a manner, so that you would think that rogue’s full version is an essential tool for your system’s protection. Below you can see the prices you will find in the rogue’s purchase page:

Subscription term
6 Month $49.95
1 Year $59.95
Lifetime $79.95
+Lifetime support $19.95
Total: 99.90 USD

Do not even think that paying $79.95 for lifetime Windows protection will ensure your system’s security or help you delete malware, as this money will go straight to the schemers, and your PC will become as vulnerable as ever. You should also ignore any of the fictitious notifications, trying to force you to purchase rogue’s licensed malware detection and removal version:

Error
Potential malware detected.
It is recommended to activate protection and perform a thorough system scan to remove the malware.

Warning! Spambot detected!
Attention! A spambot is sending viruses from your e-mail has been detected on your PC.
Yes, protect my PC and remove spambot now (Recommended)

Recommended:
Please click “Remove all” button to erase all infected files and protect your PC

To start Windows Pro Defense removal processes, we recommend activating a license code (0W000-000B0-00T00-E0020), which will remove such Windows symptoms as blocked Internet connection, disabled running of most executables, or restricted access to Task Manager and Registry Editor. You can also use your Internet renewal guide to restore the connection, which will help you install legal, automatic removal software.

Download Spyware Removal Tool to Remove* Windows Pro Defence
  • Quick & tested solution for Windows Pro Defence removal.
  • 100% Free Scan for Windows

How to renew your internet connection:

This rogue antispyware blocks your Internet connection to prevent you from removing the rogue application. To enable the Internet connection, please follow these instructions:
  1. Open Internet Explorer and go to >Tools< select >Internet Options<

  2. Select >Connections<

  3. Select >LAN Settings<

  4. Now you need to uncheck the checkbox labeled >Use a proxy server for your LAN< in Proxy Server section. Then press the >OK< button to close this screen and press the >OK< button to close the Internet Options screen.

  5. Now you can download the SpyHunter scanner and remove the infection.

Download Spyware Removal Tool to Remove* Windows Pro Defence
  • Quick & tested solution for Windows Pro Defence removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Windows Pro Defence

Files associated with Windows Pro Defence infection:

Protector-hrfe.exe
Windows Pro Defence`.lnk
%Desktop%\Windows Pro Defence.lnk
%CommonStartMenu%\Programs\Windows Pro Defence.lnk
%AppData%\1st$0l3th1s.cnf
%AppData%\result.db
%AppData%\Protector-[Random].exe
%AppData%\NPSWF32.dll
Windows Pro Defence.lnk

Windows Pro Defence DLL's to remove:

%AppData%\NPSWF32.dll

Windows Pro Defence processes to kill:

%AppData%\Protector-[Random].exe
Protector-hrfe.exe

Remove Windows Pro Defence registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "otbpxlqhjd"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\alevir.exe
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmdagent.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install[1].exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\npfmessenger.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protector.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\srng.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tsadbot.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\xp_antispyware.exe
Disclaimer

Comments

  1. Morgan Jun 25, 2012

    Thanks for really good info!

  2. Pcthreat Jun 27, 2012

    Glad we could help removing Windows Pro Defence

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.