Call Toll Free in the US and Canada!
Remove Windows Attacks Defender. Removal instructions
Windows Attacks Defender is a rogue anti-spyware program that is promoted via trojans and hacked websites. This rogue starts a fake system check and states that your computer in infected with malicious software. In order to remove the supposedly found infection and remove viruses you have to pay for a full version of Windows Attacks Defender. Of course, you shouldn’t do that because this program is a scam and won’t protect your computer for malware. Fake scan results is a vert common method used by scammers to scare users into purchasing rogue programs. You should remove Windows Attacks Defender from your computer manually or use an automatic removal tool below as soon as possible because the rogue program may later downlaod and install additional malware onto your computer.
Windows Attacks Defender will constantly display fake security alerts claiming that your computer in infected with spyware, trojans and other viruses.
Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Error
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
The rogue program can not detect any problem, so in reality it blocks programs on your computer randomly and states that they are infected or potentially harmful. As you can see, Windows Attacks Defender is nothing more but a scam. It displays fake security alerts to make you think that your computer in infected. Then it prompts to pay for a full version of the program to clean up the computer. Do not buy. Instead, use our removal instructions below to remove Windows Attacks Defender from the system as soon as possible. If you can’t download or install malware removal tools, reboot your computer in safe mode with networking and try running removal tool once again.
Windows Attacks Defender snapshot:
Automatic Windows Attacks Defender removal:
(2012-03-02 07:43:45)
(2012-03-02 07:43:45)
(2012-03-02 07:43:45)
Windows Attacks Defender manual removal:
Kill processes:
Inspector-[rnd].exe
how to kill malicious processes
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
how to unregister malicious DLLs
Delete files:
%appdata%\npswf32.dll %appdata%\Inspector-[3 random characters].exe %desktopdir%\Windows Attacks Defender.lnk %appdata%\result.db %StartMenu%\Programs\Windows Attacks Defender.lnk
how to remove harmful files
Information updated: 2012-03-02 07:43:45