ONLINE ANTIVIRUS REMOVAL

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Tuesday, 18 March 2014

Remove Windows Pro Defence Kit

Posted on 15:49 by Unknown
Remove Windows Pro Defence Kit
Windows Pro Defence Kit is a fake antivirus program that cannot detect and remove any kind of virus, malware or trojan. However, Windows Pro Defence Kit. pretends to be a legitimate antivirus which can protect computers from the attack malwares. Once Windows Pro Defence Kit is installed on the computer, it will start automatically when Windows boot. Then Windows Pro Defence Kit will do a fake scan on the computer and will definitely scare the user with pop ups which shows that the computer has been infected by a lot of malwares. Windows Pro Defence Kit will repeatedly shows the pop ups to urge the user to purchase the full version of Windows Pro Defence Kit so that to remove all the threats. However, Windows Pro Defence Kit cannot detect and remove any kind of virus, malware and trojan.


Windows Pro Defence Kit can be removed by stopping the processes and removing the files ([random].exe) by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Windows Pro Defence Kit shown in the removal guide below. Windows Pro Defence Kit DLL Files should be unregistered too (see removal guide). All files related to Windows Pro Defence Kit must be deleted. 

Windows Pro Defence Kit provide fake feature such as Home, Firewall, Automatic updates, Antivirus Protection, Anti-Phishing, Advanced Process Control, Autorun Manager, Service Manager, All-in-One Suite, Quick Scan, Deep Scan, Custom Scan, History, Settings, etc. All of them cannot protect the computer from any kind of malware.

Windows Pro Defence Kit should be removed immediately!

Windows Pro Defence Kit Removal Guide
Kill Process
(How to kill a process effectively?)
svc-[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MS-SEC" = %AppData%\svc-[random].exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKEY_LOCAL_MACHINE\software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKEY_LOCAL_MACHINE\Software\microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bckd "ImagePath" = 22.sys
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%AppData%\svc-[random].exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableVirtualization" = 0

Remove Folders and Files
%AppData%\svc-[random].exe
%AppData%\data.sec
%UserProfile%\Desktop\Windows Pro Defence Kit.lnk
%AllUsersProfile%\Start Menu\Programs\Windows Pro Defence Kit.lnk
File Location Notes:

%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\[Current User] for Windows 2000/XP, C:\Users\[Current User] for Windows Vista/7/8, and c:\winnt\profiles\[Current User] for Windows NT.

%AllUsersProfile% refers to the All Users Profile folder. By default, this is C:\Documents and Settings\All Users for Windows 2000/XP and C:\ProgramData\ for Windows Vista, Windows 7, and Windows 8.

%AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\[Current User]\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\[Current User]\AppData\Roaming.



Email ThisBlogThis!Share to XShare to Facebook
Posted in Removal Guide | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • Remove Windows Internet Guard
    Windows Internet Guard is a fake antivirus that disguises itself to cheat the user that it can detect and remove trojans, viruses, malwares...
  • Remove XP Smart Defender
    XP Smart Defender is a fake antivirus program created to urge the user to buy the full version of XP Smart Defender in order to earn some p...
  • Windows Antidanger Center Removal Guide
    Windows Antidanger Center is an unwanted application which is a rogue computer security program. Windows Antidanger Center is a fake optimi...
  • Don't disable UAC or your computer will be attacked by malwares!
    UAC or User Account Control is one of the very good features provided by Windows Vista and Windows 7. However, many people try to disable ...
  • Remove Ministry of Public Safety Canada Ransomware
    Ministry of Public Safety Canada Ransomware is a virus, malware, trojan family that infect the computer to cheat the hard-earn money of com...
  • Great News
    All your life you have waited for the good news, and that day has finally come. Very soon you will witness large-scale mass arrests all over...
  • Remove Windows Antipiracy Virus
    Windows Antipiracy Virus is a fake antivirus program which intend to urge the user whose computer is infected by Windows Antipiracy Virus t...
  • Remove Windows Foolproof Protector
    Windows Foolproof Protector is a fake antivirus program that cannot detect and remove any kind of virus, malware or trojan. However, Windo...
  • Remove Vista Antispyware Pro 2013
    Vista Antispyware Pro 2013 is a fake antivirus program created to urge the user to buy the full version of Vista Antispyware Pro 2013 in or...
  • Remove Windows Internet Watchdog
    Windows Internet Watchdog is a fake antivirus program that look like a legitimate antivirus such as Kaspersky Antivirus which can protect t...

Categories

  • facebook
  • Kill Process
  • Removal Guide
  • Removal Tool
  • Remove Virus
  • Repair File
  • RFA
  • security
  • System Tool
  • Task Manager

Blog Archive

  • ▼  2014 (27)
    • ►  April (3)
    • ▼  March (10)
      • Remove Windows Web Watchdog
      • Remove Windows AntiBreach Patrol
      • Remove Windows Antivirus Patrol
      • Remove Futurro Antivirus Software
      • Remove Windows Pro Defence Kit
      • Remove Windows Defence Master
      • Remove Windows Security Master
      • Remove Windows Defence Unit
      • Remove Windows Protection Booster
      • Remove Windows AntiVirus Booster
    • ►  February (8)
    • ►  January (6)
  • ►  2013 (66)
    • ►  December (7)
    • ►  November (2)
    • ►  October (4)
    • ►  September (3)
    • ►  August (12)
    • ►  July (5)
    • ►  June (2)
    • ►  May (15)
    • ►  April (3)
    • ►  March (8)
    • ►  February (3)
    • ►  January (2)
  • ►  2012 (224)
    • ►  December (12)
    • ►  November (9)
    • ►  October (23)
    • ►  September (3)
    • ►  August (11)
    • ►  July (15)
    • ►  June (23)
    • ►  May (29)
    • ►  April (29)
    • ►  March (34)
    • ►  February (25)
    • ►  January (11)
  • ►  2011 (221)
    • ►  December (9)
    • ►  November (11)
    • ►  October (13)
    • ►  September (10)
    • ►  August (19)
    • ►  July (38)
    • ►  June (60)
    • ►  May (30)
    • ►  April (31)
Powered by Blogger.

About Me

Unknown
View my complete profile