Aug 12

Windows Protection Suite Description:

Windows Protection Suite is one more program from the same series as Windows Security Suite and Windows System Suite. All the three programs do not only sound very similar; they also share an identical graphical user interface (GUI) and pursue basically the same tactics. Windows Protection Suite finds pathways and backdoors to a potential host computer through the use of stealthy trojan viruses whose basic capability lies in the scope of imperceptible system intrusion methods. Initially, Windows Protection Suite infiltrates as trialware and then gradually makes its way to the user’s conscience in order to make him/her purchase the registered version of the alleged solution. Windows Protection Suite triggers bogus security scanners and fake alerts that report tons of malware found on your PC. After that, Windows Protection Suite recommends the unsuspecting computer user to install and register its commercial version which is supposed to help remove the malicious cyber-neighbors allegedly detected inside one’s computer. Windows Protection Suite may even redirect you to its half-official website at Windowsprotectionsuite.com which offers the entire range of computer security services (well, that’s far from being the truth). Your most sensible reaction to those false ads and phony scanners is removing Windows Protection Suite rogue anti-spyware ASAP. It should save your system from disruption and prevent your privacy violation.

Find out if your PC is infected with Windows Protection Suite:

Windows Protection Suite screenshot:

Windows Protection Suite

How to remove Windows Protection Suite manually:

To perform manual removal of Windows Protection Suite, you should do the following:

Delete Windows Protection Suite corrupt files:

  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Protection Suite.lnk
  • %UserProfile%\Application Data\Windows Protection Suite
  • %UserProfile%\Application Data\Windows Protection Suite\cookies.sqlite
  • %UserProfile%\Application Data\Windows Protection Suite\Instructions.ini
  • %UserProfile%\Desktop\Windows Protection Suite.lnk
  • %UserProfile%\Recent\ANTIGEN.drv
  • %UserProfile%\Recent\CLSV.exe
  • %UserProfile%\Recent\DBOLE.drv
  • %UserProfile%\Recent\dudl.sys
  • %UserProfile%\Recent\energy.dll
  • %UserProfile%\Recent\grid.dll
  • %UserProfile%\Recent\grid.sys
  • %UserProfile%\Recent\kernel32.dll
  • %UserProfile%\Recent\tempdoc.dll
  • %UserProfile%\Recent\PE.dll
  • %UserProfile%\Recent\PE.tmp
  • %UserProfile%\Recent\runddl.dll
  • %UserProfile%\Recent\SM.dll
  • %UserProfile%\Recent\snl2w.exe
  • %UserProfile%\Recent\std.exe
  • %Program Files%\WindowsProtectionSuite\WindowsProtectionSuite.exe
  • %Program Files%\WindowsProtectionSuite\WindowsProtectionSuite.url
  • %Program Files%\Mozilla Firefox\searchplugins\search.xml
  • %UserProfile%\Start Menu\Programs\WindowsProtectionSuite
  • %UserProfile%\Start Menu\WindowsProtectionSuite.lnk
  • %UserProfile%\Start Menu\Programs\WindowsProtectionSuite\WindowsProtectionSuite.lnk
  • %UserProfile%\Start Menu\Programs\WindowsProtectionSuite\WindowsProtectionSuite Website.lnk
  • %UserProfile%\Desktop\WindowsProtectionSuite.exe
  • %UserProfile%\Start Menu\Windows Protection Suite 2009.lnk
  • %UserProfile%\Start Menu\Programs\Windows Protection Suite 2009.lnk
  • %UserProfile%\Application Data\Windows Protection Suite 2009
  • %UserProfile%\Application Data\Windows Protection Suite 2009\Instructions.ini
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Protection Suite 2009.lnk
  • %UserProfile%\Desktop\Windows Protection Suite 2009.lnk
  • %Documents and Settings%\All Users\Application Data\345d567
  • %Documents and Settings%\All Users\Application Data\345d567\WINSSSys
  • %Documents and Settings%\All Users\Application Data\WINSSSys
  • %Documents and Settings%\All Users\Application Data\345d567\26.mof
  • %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
  • %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
  • %Documents and Settings%\All Users\Application Data\345d567\WI345d.exe
  • %Documents and Settings%\All Users\Application Data\345d567\WINSS.ico
  • %Documents and Settings%\All Users\Application Data\345d567\working.log
  • %Documents and Settings%\All Users\Application Data\345d567\WINSSSys\vd952342.bd
  • %Documents and Settings%\All Users\Application Data\WINSSSys\winss.cfg
  • %UserProfile%\Start Menu\Windows Protection Suite.lnk
  • %UserProfile%\Start Menu\Programs\Windows Protection Suite.lnk

Remove Windows Protection Suite associated registry entries:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “WindowsProtectionSuite”

Please, note that manual removal of Windows Protection Suite is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic Windows Protection Suite removal tool below:

Download Windows Protection Suite Removal Tool

2 Responses to “How to Remove Windows Protection Suite – WindowsProtection Suite Removal Guide”

  1. 1. odeny Says:

    i have a potential virus and i need to fix it

  2. 2. Derrek Says:

    Found the issue with taskmgr and any spybot/adaware/AV software not running…..

    Regedit for key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options. Browse for any stuff that is not working. (The key path may not be 100% correct, but the last bit is ‘Image File Execution Options’. This allows to attach a debugger to a program to trouble shoot by redirecting the execution to a ‘debugger’ before the process starts.). I found my Taskmgr.ext being redirected to svchost.exe. This would cause it not to launch at all. EXPORT YOUR KEYS BEFORE DOING THE FOLLOWING!!!! Remove the key then test to see if it works. If it does not work, import (or merge) the key back to the registry!

    I removed the taskmgr key from the Image File Execution Options (which pointed taskmgr to svchost.exe) and task manager came up with no issues!

Leave a Reply