1 of 10
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
Windows Background Protector , WindowsSimpleProtector

Windows Simple Protector

Another day brings another computer threat from a huge group of rogue system optimization applications. Windows Simple Protector is a new parasite from Microsoft Security Essentials scam. This malicious software application pretends to be a good security tool so it could steal your money, consequently damaging your computer. It performs the same damage and uses the same despicable methods as its forerunners Windows Lowlevel Solution, Windows Background Protector, Windows Emergency System and alike. As a rogue antispyware application Windows Simple Protector tries to steal your money, before you can figure out that something is being plotted against you.

You must always be wary of a possible infection, because Windows Simply Protector is also able to enter your system without your consent. Therefore, you are strongly recommended to download the suggested malware scanner and check your computer for any possible errors.

Download Spyware Removal Tool to Remove* Windows Simple Protector
  • Quick & tested solution for Windows Simple Protector removal.
  • 100% Free Scan for Windows

The reason why it is hard to tell the exact moment when you get infected is that Windows Simple Protector does not announce its presence at once. Sometimes when you roam the Internet, you may encounter browser hijackers which redirect you to websites, hosting the download file for the rogue. You don't download the exact rogue at once, sometimes only a transfer of download agent might be initiated. And these download agents would pull in attacks some time later.

When Windows Simple Protector does launch its attack on you, it starts with a fake system scan, and before it spams you with error notifications, you can already see the words "error" written in bold in the application's interface. Windows Simple Protector lets you know that there are License and Update errors present, and you will "need" to address them if you wish to protect your computer. Of course, you must ignore the messages from Windows Simple Protector, if you wish to go through this infection with a minimal damage. Pay no heed to any of these messages:

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Name: firefox.exe
Name: c:\program files\firefox\firefox.exe
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click 'show details' to learn more.

Threat prevention solution found
Security system analysis has revealed critical file system vulnerability caused by severe malware attacks.
Risk of system files infection:
The detected vulnerability may result in unauthorized access to private information and hard drive data with a seriuos possibility of irreversible data loss and unstable PC performance. To remove the malware please run a full system scan. Press 'OK' to install the software necessary to initiate system files check. To complete the installation process please reboot your computer.

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

Also, Windows Simple Protector can block your desktop, in attempt to remain in your computer for a longer period of time. You will not be able to access your icons and your taskbar will be blocked as well. To recover your desktop, please follow these instructions:

1. Restart your computer, and wait for it to load. When you see the rogue's application on your screen, click "OK" to make it go away.
2. Windows Simple Protector will start a fake system scan. Wait for it to be done, and when another notification pops up, click the "OK" button again.
3. To close the notification, click on the red "X" at the right top of it.
4. The notification will disappear and you will have your desktop back.

With your desktop back, you must now take care of Windows Simple Protector. Don't provide it with your credit card number, because that will allow the criminals behind this rogue access your bank account anytime. Your best choice in this situation would be investing in a reliable security tool and then removing Windows Simple Protector for good.

Download Spyware Removal Tool to Remove* Windows Simple Protector
  • Quick & tested solution for Windows Simple Protector removal.
  • 100% Free Scan for Windows

How to manually remove Windows Simple Protector

Files associated with Windows Simple Protector infection:


Windows Simple Protector processes to kill:


Remove Windows Simple Protector registry entries:

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell “%AppData%\[random].ex


  1. chrissy montgomery Mar 25, 2011

    help!!!! my laptop has this Window simple protector! i am using my husband laptop trying to get info on how to get rid of it off my laptop!!!!!!!! HOW?

    my email is chrissy.ftonworks@nb.aibn.com

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.