1 of 12
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • System crashes
  • Slow internet connection
  • Slow Computer
  • Installs itself without permissions
  • Connects to the internet without permission
  • Annoying Pop-up's
Other mutations known as:
Windows ProblemsProtector

Windows Problems Protector

In a time where the Internet is flooded by sophisticated fake security tools such as Windows Problems Protector and the like, it can be difficult separating the wheat from the chaff. Windows Problems Protector, which forms part of the Fake Microsoft Security Essentials Infection, is cleverly marketed at naïve consumers who value their PCs’ health and security. Due to the seemingly user friendly GUIs and its seemingly user friendly applications many users are mistakenly convinced of Windows Problems Protector bogus legitimacy and will fall prey to this rogue antispyware treacherous lies. The simple truth is Windows Problems Protector was designed to rip its victims off, and will not deliver on any of its over embellished promises.

Windows Problems Protector enters the system surreptitiously through Trojans which are spread in a variety of ways, the most popular being through browser hijackers. These browser hijackers forcefully redirect users’ browsing and search sessions to their corrupted domains, where they employ various techniques including drive-by downloads to infect the user’s PC with the Windows Problems Protector Trojan. Fake online malware scanners and bundled software obtained from third party websites also form part of Windows Problems Protector’s online marketing strategy.

Once the Windows Problems Protector Trojan roots itself in the system, it won’t be easy to get rid of it. The user will remain oblivious to the presence of Windows Problems Protector on the system until the rogue starts its attack by spamming the user with various false security alerts. These bogus notifications are meant to panic the user into thinking his system has been compromised, and that Windows Problems Protector has the ability to fix it. This is simply not true. The first notification the user will receive from Windows Problems Protector will read as follows:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

Windows Problems Protector will then prompt the PC owner to scan his system with its fake scanner, and will inform the user that various files are infected with Trojan.Horse.Win32.PAV.64.a. This is a fake threat which does not exist, and all forms part of Windows Problems Protector’s attack on the system. The following fake alert will then prompt the user to install Windows Problems Protector in an effort to get rid of the falsely reported on threat:

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a seriuos possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

Windows Problems Protector will go on to further attack the PC by generating various fake alerts which are meant to exacerbate the user and force him into paying for its worthless software. Some of these fake alerts will read as follows:

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Name: firefox.exe
Name: c:program filesfirefoxfirefox.exe
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.
Just like the fake scan results, these alerts are also fake and are only being used to scare you into purchasing the program. Therefore, please ignore them.

Obviously none of these false alerts can be trusted as Windows Problems Protector is only out to fool the user and unnecessarily scare him into thinking his system has been compromised. This Windows Problems Protector is not a genuine security tool and will not yield any of the positive results it purports to be capable of. Take the required action to permanently get rid of Windows Problems Protector and take back what is rightfully yours.

Download Spyware Removal Tool to Remove* Windows Problems Protector
  • Quick & tested solution for Windows Problems Protector removal.
  • 100% Free Scan for Windows

How to manually remove Windows Problems Protector

Files associated with Windows Problems Protector infection:


Windows Problems Protector processes to kill:


Remove Windows Problems Protector registry entries:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell “%AppData%\[random].exe”


  1. Ranbaxy Feb 3, 2011


  2. kati Feb 3, 2011

    Thank u i had this virus in my pc & after using your advise it has gone so

  3. kree Feb 3, 2011

    Thank you VERY much for this guide! Exelent job! It helped me to prevent this

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.