Remove Windows Protection Suite [Removal Guide]

This guide will give you easy instructions on how to remove Windows Protection Suite for free.


What is Windows Protection Suite? (Information)

Windows Protection Suite is a fake security software which uses fraudulent strategies by displaying false or exaggerated security issues on your computer rather than any legitimate ones to coerce you into purchasing their software.

Windows Protection Suite is a new malicious specimen from the same malware author; dreamakerlab. They earlier produced a similar rouge anti-spyware known as Windows System Suite.


Windows Protection Suite Files, Processes and Registry Entries:

---

Follow these instructions to continue:

1. Please download this removal tool: Malwarebytes' Anti-Malware.




2. Install Malwarebytes' Anti-Malware.

3. Follow the prompts. Make sure that Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are checked. Then click finish.

4. Malwarebytes' Anti-Malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program as shown below.

If you are having problems with the updater, you can use this link to manually update Malwarebytes' Anti-Malware with the latest database



5. Close ALL open Windows, Programs, File or Folders.

6. Make sure you are on the Scanner tab. Select Perform quick scan then click the Scan button as shown above.

7. Malwarebytes' Anti-Malware will now start scanning your computer for infected files as shown below.



8. When the scan is finished a message box will appear, click Ok to continue.

9. Click Show Results.


10. You will now be presented with a screen showing you the malware infections like shown below. Yours may look different depending on the infection you have.

11. Click on Remove seletced


12. When removing the files, Malwarebytes' Anti-Malware may require you to restart the computer in order to do a complete removal. If it dȋsplay a message stating that it needs to restart, please allow it to do so.

13. After that you can close the Malwarebytes' Anti-Malware window, your computer is now cleaned.

To protect your computer from future threats like this, you may want to consider purchasing the Pro version of Malwarebytes' Anti-Malware with real-time protection from this link.

---

If you are still experiencing problems or difficulties following this guide or require any assistance removing this software, please post your questions in our Virus, Spyware & Malware Removal forums for free help.

You have to be logged in to post questions. Registration is free. By registering you are privileged to other virus removal resources in future.

Last edited by Doctor Inferno on 13th July 2010, 4:39 am; edited 6 times in total (Reason for editing : Information Update)

I began following the removal guide but the download button directs me to a different anti- malware site than as described. Like many others I am now out of my comfort zone and wonder whether or not I should proceed.
In short, any advice about the risks of following this link rather than the expected link to Malwarebytes' Anti-Malware?

Update ......... I decided to take the plunge and proceed. Eventually got to the screen shots as per advice and no longer have the endless Windows Protection Suite messages and associated issues. Much appreciated.

Thank you so much!! The removal guide worked! Windows protection suite is now gone.

I normally don't register to forums, but I specially registered here just thank you guys for providing the information. Thank you once again!

Lucy

OMG! Thank you thank you thank you so much the windows protection suite is removed... The Geek Police removal guide is the only one which works.

i am having the same problem of this windows protection suite...anybody help me

please do send my fastest way to remove this windows protection suite that pestring my computer system

Just posting a note to say

You guys are the best....I tried everything to get rid of the awful windows suite and then in desperation happened on this site and followed the instructions above and Hey Presto no more annoying Windows Suite!!
To anyone who got the awful Windows Suite virus just follow the instructions above it works
P.S. I know nothing about computers so if I can do it so can you!

Love love you guys xxxxxxxxxx

Thank you so much, the annoyng virus is gone. I tried so many websites, but they all asked me to pay. You made me do it free of cost!!!!
A zillion thanks to you.

thank you! You save me <3

Ok installed Malware to remove WPS once started scan it turn off then cannot restart? What next?

Eluna wrote:

Ok installed Malware to remove WPS once started scan it turn off then cannot restart? What next?

Hello,

Please do not quote large piece of text. Some forms of the of Windows Protection Suite can cause more harm than others, or there are multiple problems on the computer.

Please try to boot the PC again, if you cannot try to boot in Safe Mode (using F8)
Follow these instructions on how to make a new topic in the Virus, Spyware & Malware Removal section to include a HijackThis log: http://www.geekpolice.net/-t3821.htm

hey im new here n i cant download this program...it said that i must be an administrator in order to download this program..cAn somebody help me??

[b]Yay Thanx Guys .....U R The Best Guys In tHe World!!!the windows protection suite Is nOw Out Of System!!!!n thats make m e feel sooo freee n cool now....THANX AGAIN,.. :Clapping:

Last edited by killer123 on 15th September 2009, 1:04 pm; edited 1 time in total

This worked... THANK YOU!

Windows protection suite is bogus and the creators are liers and thieves. Why hasn't somebody arrested these guys!

By the way, I put the Malwarebytes link in my favs to sign up next time. I'm sure I'll need it again since my kid is allways on those nasty free sites.

I've done all as instructed and tried 3x to get the files removed. Am I to highlight each file and hit remove selected or just hit remove selected to get rid of all the files listed?

I tried the latter technique 3 times and WPS blanketed over my screen and evidently disable the Malware Bytes from removing files.

Now the bastard is back! I have to down load and start all over!

What am I doing wrong?

Hello,

Open a new topic here:

http://www.geekpolice.net/virus-spyware-malware-removal-f11/

We will help you from there.

When Malwarebyte's finishes the scan it shows all the files checked in the box. As instructed, just click the "remove" button at the bottom and they are all gone. Windows protection suite will continue to try a run, "screaming noises and bogus pop up windows" as Malwarebyte's deletes it. (nasty!) "x" out of any window that pops up to continue the process.
This bugger was kicking and screaming as it was dying! My kid's laptop needed to reboot to finally burn this sucker.

I had Windows Suite Protection virus on my computer and was freaking out at first because it kept shutting me out of my internet and then kept telling me I have all these viruses and my computer gonna crash. So I literally was thinking my computer was gonna just crash soon but I wasn't going to pay for anything because I thought these were just scams and nothing good can come out of viruses being on your computer. So then I put the two together and when i finally got my internet to work a lil bit I googled windows protection suite and a page referenced me to this and how to get rid of it. So Thank you very much. I made/joined the forum just so I could say my thanks to whoever it is will read this/posted this helpful information. What you guys do is awesome and I might never use it again but I greatly appreciated it. Keep up the good work.

I'm new to this and a bit unsure of the process for asking a question. I followed your Removal Guide and it worked great in getting rid of Windows Protective Suite. However, I now have a problem I didn't have before: Task Manager no longer opens, either by keyboard (ctr/alt/delete) or task bar methods. My friend sent me a taskmgr.exe file which is on my desktop, and it will not open Windows Task Manager but WILL open it when I change its name (ie: schmo.exe). So I know the Windows Task Manager works, but I suppose there's something in my registry blocking the name. I am not comfortable going into the Registry without guidance.

I was able to fix the above described problem by performing an edit to my Windows Registry as follows.

- Open regedit.exe and begin, of course, by making a backup copy the Registry.

- Then navigate to: HKey_Local_Machine\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options

- Under the "Image File Execution Options" section, scroll down until you find a registry key for "taskmgr.exe" (without the quotes)

- Highlight that entry (taskmgr.exe) and hit the delete key on your keyboard. Confirm that you wish to delete the taskmgr.exe entry, and exit the registry editor.


For those curious about the technical aspects behind this fix, please go to:
http://www.avertlabs.com/research/blog/index.php/2008/12/09/image-file-execution-options/

Malwarebytes' Anti-Malware did most of the repairing for me, but not all of it. In my case, Windows Task-Manager did still not open, and some URLs were still deviated. I had to do the following in addition to running Anti-Malware to get a complete repair:
1. Open the file C:\Windows\System32\drivers\etc\hosts in some editor. Delete all the entries except:
127.0.0.1 localhost
::1 localhost
Save the file under some new name, e.g., hoststemp.
Open Anti-Malware, and use the File-Assassin Function to delete C:\Windows\System32\drivers\etc\hosts.
Rename hoststemp as hosts.

2. Download Process Explorer at http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
Run procexp.exe
Menu Options-->Replace Task-Manager. Close the program. When calling task-manager, Process Explorer should now be opened.
Again Menu Options-->Uncheck "Replace Task-Manager". The original task manager is back!

Hi - i have successfully downloaded and followed the on line instructions to delete WPS but I still have it....any other suggestions PLEASE ?