Windows Attacks Defender

Call Toll Free in the US and Canada!

Title: Windows Attacks Defender
Type: Rogue Antispyware

Remove Windows Attacks Defender. Removal instructions

Also known as: WindowsAttacksDefender
Severity scale:  (74 / 100)


Windows Attacks Defender is a rogue anti-spyware program that is promoted via trojans and hacked websites. This rogue starts a fake system check and states that your computer in infected with malicious software. In order to remove the supposedly found infection and remove viruses you have to pay for a full version of Windows Attacks Defender. Of course, you shouldn’t do that because this program is a scam and won’t protect your computer for malware. Fake scan results is a vert common method used by scammers to scare users into purchasing rogue programs. You should remove Windows Attacks Defender from your computer manually or use an automatic removal tool below as soon as possible because the rogue program may later downlaod and install additional malware onto your computer.

Windows Attacks Defender will constantly display fake security alerts claiming that your computer in infected with spyware, trojans and other viruses.  

Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.

Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.

The rogue program can not detect any problem, so in reality it blocks programs on your computer randomly and states that they are infected or potentially harmful. As you can see, Windows Attacks Defender is nothing more but a scam. It displays fake security alerts to make you think that your computer in infected. Then it prompts to pay for a full version of the program to clean up the computer. Do not buy. Instead, use our removal instructions below to remove Windows Attacks Defender from the system as soon as possible. If you can’t download or install malware removal tools, reboot your computer in safe mode with networking and try running removal tool once again. 

Windows Attacks Defender snapshot:

Automatic Windows Attacks Defender removal:

remover for Windows Attacks Defender

SpyHunter is recommended remover to uninstall Windows Attacks Defender.
You should confirm using free trial that it detects current version of parasite.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention,
please read manul removal instructions below.

If you failed to remove Windows Attacks Defender using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.


We are testing STOPzilla’s efficiency at removing Windows Attacks Defender
(2012-03-02 07:43:45)

Malwarebytes Anti Malware

We are testing Malwarebytes Anti Malware’s efficiency at removing Windows Attacks Defender
(2012-03-02 07:43:45)

Spyware Doctor

We are testing Spyware Doctor’s efficiency at removing Windows Attacks Defender
(2012-03-02 07:43:45)

XoftSpySE Anti Spyware

Windows Attacks Defender manual removal:

Kill processes:

how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe

how to unregister malicious DLLs

Delete files:
%appdata%\npswf32.dll %appdata%\Inspector-[3 random characters].exe %desktopdir%\Windows Attacks Defender.lnk %appdata%\result.db %StartMenu%\Programs\Windows Attacks Defender.lnk

how to remove harmful files
Information added: 2012-03-02 07:43:45
Information updated: 2012-03-02 07:43:45