Thursday, June 3, 2010

Protection Center Removal GuideProtection Center Removal Guide

Protection Center Removal Guide
Protection Center is a fake antivirus program which try to trick the user to purchase the full version of fake antivirus. It infects the computer through installing trojans and start it when computer boot. Protection Center use false scan result to make the users to purchase the fake antivirus. It may also stop the user from using anti-malware programs or antivirus.

Protection Center provide fake features like Antivirus and Antispyware protection, Network shield (Firewall), Automatic Updates, Scheduled Scans and even RAM protection. It acts live a real and good antivirus. Protection Center is installed as unregistered version. It shows the users that the computer is not protected and ask the user to upgrade to full version.

Protection Center must be removed immediately!


Protection Center Removal Guide
Kill Process
(How to kill a process effectively?)
wscsvc32.exe
mswinsck.exe
uninstall.exe
protcen.exe
cntprot.exe

Unregister DLL files
%Program Files%\Protection Center\cntext.dll
%Program Files%\Protection Center\cnthook.dll
%Documents and Settings%\All Users\Application Data\fiosejgfse.dll
%Program Files%\Protection Center\prothook.dll
%Program Files%\Protection Center\protext.dll

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Protection Center"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
HKEY_LOCAL_MACHINE\SOFTWARE\Protection Center
HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection Center
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
HKEY_CLASSES_ROOT\secfile
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CURRENT_USER\Software\Paladin Antivirus
HKEY_CURRENT_USER\Software\Malware Defense
HKEY_CURRENT_USER\Software\Classes\secfile

Remove Folders and Files
%Documents and Settings%\All Users\Application Data\fiosejgfse.dll
%Temp%\wscsvc32.exe
%Temp%\mswinsck.exe
%Temp%\4otjesjty.mof
%Program Files%\Protection Center
%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\Protection Center.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\Protection Center
%Documents and Settings%\[UserName]\Desktop\Protection Center.lnk
%Documents and Settings%\[UserName]\Desktop\Protection Center Support.lnk

No comments:

Post a Comment