Remove Windows Protection Suite [Removal Guide]

This guide will give you easy instructions on how to remove Windows Protection Suite for free.


What is Windows Protection Suite? (Information)

Windows Protection Suite is a fake security software which uses fraudulent strategies by displaying false or exaggerated security issues on your computer rather than any legitimate ones to coerce you into purchasing their software.

Windows Protection Suite is a new malicious specimen from the same malware author; dreamakerlab. They earlier produced a similar rouge anti-spyware known as Windows System Suite.


Windows Protection Suite Files, Processes and Registry Entries:

Spoiler:

• %UserProfile%\Recent\energy.dll
  
• %UserProfile%\Recent\kernel32.dll
  
• %UserProfile%\Recent\runddl.dll
  
• %UserProfile%\Recent\std.exe
  
• %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
  
• %UserProfile%\Recent\dudl.sys
  
• %UserProfile%\Recent\grid.sys
  
• %UserProfile%\Recent\PE.dll
  
• %UserProfile%\Recent\snl2w.exe
  
• %UserProfile%\Desktop\WindowsProtectionSuite.exe
  
• %Documents and Settings%\All Users\Application Data\345d567\WI345d.exe
  
• %UserProfile%\Recent\CLSV.exe
  
• %UserProfile%\Recent\grid.dll
  
• %UserProfile%\Recent\tempdoc.dll
  
• %UserProfile%\Recent\SM.dll
  
• %Program Files%\WindowsProtectionSuite\WindowsProtectionSuite.exe
  
• %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
  
• %UserProfile%\Recent\kernel32.dll
  
• %UserProfile%\Recent\runddl.dll
  
• %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
  
• %UserProfile%\Recent\grid.dll
  
• %UserProfile%\Recent\PE.dll
  
• %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
  
• %UserProfile%\Recent\energy.dll
  
• %UserProfile%\Recent\tempdoc.dll
  
• %UserProfile%\Recent\SM.dll
  
• %UserProfile%\Application Data\Windows Protection Suite\cookies.sqlite
  
• %UserProfile%\Recent\ANTIGEN.drv
  
• %UserProfile%\Recent\dudl.sys
  
• %UserProfile%\Recent\grid.sys
  
• %UserProfile%\Recent\PE.dll
  
• %UserProfile%\Recent\SM.dll
  
• %Program Files%\WindowsProtectionSuite\WindowsProtectionSuite.exe
  
• %UserProfile%\Start Menu\Programs\WindowsProtectionSuite
  
• %UserProfile%\Start Menu\Programs\WindowsProtectionSuite\WindowsProtectionSuite Website.lnk
  
• %UserProfile%\Start Menu\Programs\Windows Protection Suite 2009.lnk
  
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Protection Suite 2009.lnk
  
• %Documents and Settings%\All Users\Application Data\345d567\WINSSSys
  
• %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
  
• %Documents and Settings%\All Users\Application Data\345d567\WINSS.ico
  
• %Documents and Settings%\All Users\Application Data\WINSSSys\winss.cfg
  
• %UserProfile%\Application Data\Windows Protection Suite
  
• %UserProfile%\Desktop\Windows Protection Suite.lnk
  
• %UserProfile%\Recent\DBOLE.drv
  
• %UserProfile%\Recent\grid.dll
  
• %UserProfile%\Recent\tempdoc.dll
  
• %UserProfile%\Recent\runddl.dll
  
• %UserProfile%\Recent\std.exe
  
• %Program Files%\Mozilla Firefox\searchplugins\search.xml
  
• %UserProfile%\Start Menu\Programs\WindowsProtectionSuite\WindowsProtectionSuite.lnk
  
• %UserProfile%\Start Menu\Windows Protection Suite 2009.lnk
  
• %UserProfile%\Application Data\Windows Protection Suite 2009\Instructions.ini
  
• %Documents and Settings%\All Users\Application Data\345d567
  
• %Documents and Settings%\All Users\Application Data\345d567\26.mof
  
• %Documents and Settings%\All Users\Application Data\345d567\WI345d.exe
  
• %Documents and Settings%\All Users\Application Data\345d567\WINSSSys\vd952342.bd
  
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Protection Suite.lnk
  
• %UserProfile%\Application Data\Windows Protection Suite\Instructions.ini
  
• %UserProfile%\Recent\CLSV.exe
  
• %UserProfile%\Recent\energy.dll
  
• %UserProfile%\Recent\kernel32.dll
  
• %UserProfile%\Recent\PE.tmp
  
• %UserProfile%\Recent\snl2w.exe
  
• %Program Files%\WindowsProtectionSuite\WindowsProtectionSuite.url
  
• %UserProfile%\Start Menu\WindowsProtectionSuite.lnk
  
• %UserProfile%\Desktop\WindowsProtectionSuite.exe
  
• %UserProfile%\Application Data\Windows Protection Suite 2009
  
• %UserProfile%\Desktop\Windows Protection Suite 2009.lnk
  
• %Documents and Settings%\All Users\Application Data\WINSSSys
  
• %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
  
• %Documents and Settings%\All Users\Application Data\345d567\working.log
  
• %UserProfile%\Start Menu\Programs\Windows Protection Suite.lnk
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “WindowsProtectionSuite”
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “WindowsProtectionSuite”

---

Follow these instructions to continue:

1. Please download this removal tool: Malwarebytes' Anti-Malware.

If you are having problems downloading from the link above, click here:


Spoiler:

Download from here only if you have problems downloading from the link above.

2. Extract the file and install Malwarebytes' Anti-Malware by double clicking on winlogon.exe

3. Follow the prompts. Make sure that Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are checked. Then click finish.

4. Malwarebytes' Anti-Malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program as shown below.

If you are having problems with the updater, you can use this link to manually update Malwarebytes' Anti-Malware with the latest database

Spoiler:

• Malwarebytes' Anti-Malwares' latest database
  

Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that Malwarebytes' Anti-Malware is closed before installing the update.

5. Close ALL open Windows, Programs, File or Folders.

6. Make sure you are on the Scanner tab. Select Perform quick scan then click the Scan button as shown above.

7. Malwarebytes' Anti-Malware will now start scanning your computer for infected files as shown below.



8. When the scan is finished a message box will appear, click Ok to continue.

9. Click Show Results.


10. You will now be presented with a screen showing you the malware infections like shown below. Yours may look different depending on the infection you have.

11. Click on Remove seletced


12. When removing the files, Malwarebytes' Anti-Malware may require you to restart the computer in order to do a complete removal. If it dȋsplay a message stating that it needs to restart, please allow it to do so.

13. After that you can close the Malwarebytes' Anti-Malware window, your computer is now cleaned.

To protect your computer from future threats like this, you may want to consider purchasing the Pro version of Malwarebytes' Anti-Malware with real-time protection from this link.

---

If you are still experiencing problems or difficulties following this guide or require any assistance removing this software, please post your questions in our Virus, Spyware & Malware Removal forums for free help.

You have to be logged in to post questions. Registration is free. By registering you are privileged to other virus removal resources in future.

I began following the removal guide but the download button directs me to a different anti- malware site than as described. Like many others I am now out of my comfort zone and wonder whether or not I should proceed.
In short, any advice about the risks of following this link rather than the expected link to Malwarebytes' Anti-Malware?

Update ......... I decided to take the plunge and proceed. Eventually got to the screen shots as per advice and no longer have the endless Windows Protection Suite messages and associated issues. Much appreciated.

Thank you so much!! The removal guide worked! Windows protection suite is now gone.

I normally don't register to forums, but I specially registered here just thank you guys for providing the information. Thank you once again!

Lucy

OMG! Thank you thank you thank you so much the windows protection suite is removed... The Geek Police removal guide is the only one which works.

i am having the same problem of this windows protection suite...anybody help me

please do send my fastest way to remove this windows protection suite that pestring my computer system

Just posting a note to say

You guys are the best....I tried everything to get rid of the awful windows suite and then in desperation happened on this site and followed the instructions above and Hey Presto no more annoying Windows Suite!!
To anyone who got the awful Windows Suite virus just follow the instructions above it works
P.S. I know nothing about computers so if I can do it so can you!

Love love you guys xxxxxxxxxx

Thank you so much, the annoyng virus is gone. I tried so many websites, but they all asked me to pay. You made me do it free of cost!!!!
A zillion thanks to you.

thank you! You save me <3

Ok installed Malware to remove WPS once started scan it turn off then cannot restart? What next?

Eluna wrote:Ok installed Malware to remove WPS once started scan it turn off then cannot restart? What next?

Hello,

Please do not quote large piece of text. Some forms of the of Windows Protection Suite can cause more harm than others, or there are multiple problems on the computer.

Please try to boot the PC again, if you cannot try to boot in Safe Mode (using F8)
Follow these instructions on how to make a new topic in the Virus, Spyware & Malware Removal section to include a HijackThis log: http://www.geekpolice.net/-t3821.htm

hey im new here n i cant download this program...it said that i must be an administrator in order to download this program..cAn somebody help me??

[b]Yay Thanx Guys .....U R The Best Guys In tHe World!!!the windows protection suite Is nOw Out Of System!!!!n thats make m e feel sooo freee n cool now....THANX AGAIN,..

This worked... THANK YOU!

Windows protection suite is bogus and the creators are liers and thieves. Why hasn't somebody arrested these guys!