How to remove Windows Premium Defender

Monday, July 16th, 2012 at 12:08 am
Home » Rogue Antispyware » Windows Premium Defender

Windows Premium Defender description

Windows Premium Defender is a rogue imitation of a security tool. Its design resembles Windows Firewall and it fabricates infection warnings but that don’t make Windows Premium Defender a useful thing. Do not expect it to protect a PC: Windows Premium Defender itself is a computer parasite.

Windows Premium Defender spreads with help of trojans and fraudulent websites. Once installed, it brings tons of security related pop-ups. Trust none of those since all of them are falsified. The goal of Windows Premium Defender is intimidating its victims into paying for non-existent antimalware.

Here are a few examples of Windows Premium Defender pop-ups:

Firewall has blocked a program from accessing the Internet
Internet Explorer
C:\program files\internet explorer\iexpolre.exe
C:\program files\internet explorer\iexpolre.exe
is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.
Recommended:
Please click “Prevent attack” button to prevent all attacks and protect your PC

Warning! Virus Detected
Threat Detected: Trojan-Downloader.Win32.Agent
Security Risk:
Infected File: regedit.exe
Description: Programs classified as Trojan download and install new versions of malicious programs, including Trojans and AdWare, on victim computers.
Recommended:
Please click “remove All” button to erase all infected files and protect your PC

Error
Potential malware detected.
It is recommended to activate protection and perform a thorough system scan to remove the malware.

Windows Premium Defender is a Rogue Antispyware software

How to manually remove Windows Premium Defender

To remove Windows Premium Defender spyware you must block Windows Premium Defender sites, stop and remove processes, unregister DLL files, search and delete all other Windows Premium Defender files and registry utility. Follow the Windows Premium Defender detection and removal instructions below.

The most typical software removal method is to remove Windows Premium Defender by using "Add or Remove Programs" service. However there may be hidden Windows Premium Defender files, running processes and registries in your computer, so Windows Premium Defender may recreate all other files after reboot.

Windows Premium Defender manual removal instructions

Locate and delete Windows Premium Defender registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-7-13_7"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "cwhstknlsh"
HKEY_CURRENT_USER\Software\ASProtect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avpupd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cssurf.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\homeav2010.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mcvsrte.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvarch16.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quick Heal.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sweep95.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\win-bugsfix.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wyvernworksfirewall.exe Read more how to delete Windows Premium Defender registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Premium Defender

Search and unregister Windows Premium Defender DLL libraries:
NPSWF32.dll Read more how to unregister Windows Premium Defender DLL files

Detect and delete other Windows Premium Defender files:
%AppData%\NPSWF32.dll
%AppData%\Protector-[3 random symbols].exe
%AppData%\Protector-[4 random symbols].exe
%AppData%\result.db
%AppData%\1st$0l3th1s.cnf

We strongly recommend you to use spyware remover to track Windows Premium Defender and automaticaly remove Windows Premium Defender processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , ,

Leave a Reply

Download does not start? Try a mirror download here
«
»