Windows Virtual Protector
Written by Tomas Meskauskas
Damage level: High
Windows Virtual Protector removal instructions
Windows Virtual Protector is a fake antivirus program that block user's desktop and reports non existent security infections to scare PC users into purchasing it's full version. This rogue software is created by Cyber criminals who are distributing it using infected email messages, malicious or hacked websites, and exploit kits. After successful infiltration this bogus program modifies the registry entries of an infected operating system and disables execution of installed programs, task manager and sets itself to start automatically on every system startup. To scare PC users into believing, that their computers are infected with high risk malware Windows Virtual Protector generates various fake security warning messages.
While this program may look as a legitimate antivirus program in reality, it's an empty software that doesn't have a virus definition database or a virus scan engine - it only pretend to scan user's computer and none of the detected security threats are actually present on user's PC. Paying for the full version of this rogue antivirus software would equal to sending one's money to Cyber criminals - users would lose their money and their operating systems would remain infected with this fake security scanner. Windows Virtual Protector is a scam, don't trust it's security scans and don't activate it's "ultimate protection," the right way of treating this program is it's elimination from one's operating system.
Windows Virtual Protector originates from a family of rogue security scanners called FakeVimes, previous it's variants were named Windows Accelerator Pro, Windows Premium Shield and Windows Efficiency Console. To avoid installation of such rogue security scanners computer users should keep their operating systems and all of the installed programs up-to-date, moreover it's important to use legitimate antivirus and anti-spyware programs. PC users should also avoid clicking on online pop-up messages that inform about supposedly detected security infections and offer installation of antivirus programs. Such fake online security scanners are widely used in fake antivirus distribution. If your computer is already infected with Windows Virtual Protector use this removal guide and eliminate this scam from your operating system.
Windows Virtual Protector blocking execution of installer programs:
Windows Virtual Protector removal:
Complete these steps to access your desktop:
1. Wait until Windows Virtual Protector finishes it's fake security scan and click "Settings" (at the top of the main window).
2. Select "Allow unprotected Startup."
3. After selecting "Allow unprotected Startup," close Windows Virtual Protector.
4. Access "My Computer". Double click on "My Computer" icon.
5. Navigate to C:\Users\[YOUR USER NAME]\AppData\Roaming
6. Locate a file named "proto-[random letters].exe" and click your right mouse button over this file.
7. In the opened menu select "Rename". Change the file name of "proto-[random letters].exe" to "fake.exe".
8. After renaming "proto-[random letters].exe" file restart your computer. Next time the operating system boots Windows Virtual Protector will be inactive and won't block access to Internet.
6. Download legitimate anti-spyware software to completely remove this rogue antivirus program from your computer.
If you can't download or run the spyware remover try running registry fix (link below). It enables execution of programs. Download registryfix.reg file, double click it, click YES and then OK.
Windows Virtual Protector removal using a registry key:
1. Click on a question mark icon (at the top of the main window of Windows Virtual Protector) and select "Register".
2. In the opened window enter this registry key: 0W000-000B0-00T00-E0001
3. After entering this registry key Windows Virtual Protector will pretend to remove the previously detected security threats and will allow execution of installed programs. Notice that entering this registration key will not remove this rogue antivirus program - it will make the removal process less complicated.
4. Download legitimate anti-spyware software to completely remove Windows Virtual Protector from your computer.
Windows Virtual Protector removal using Safe Mode with Networking:
Windows XP and Windows 7 users: During your computer starting process press F8 key on your keyboard multiple times until Windows Advanced Options menu shows up, then select Safe mode with networking from the list and press ENTER.
Video showing how to start Windows 7 in "Safe Mode with Networking":
Video showing how to start Windows XP in "Safe Mode with Networking":
Remove proxy settings from Internet Explorer. This rogue antivirus adds a proxy to user's Internet connection settings to show various errors when user tries accessing the Internet. To remove proxy settings: Open Internet Explorer and click on the gear icon. In the opened menu select "Internet Options."
In the opened window select "Connections" tab.
In the "Connections" tab, click on "LAN settings".
If "Use a proxy server for your LAN" is checked, uncheck it and click OK.
Download legitimate anti-spyware software to completely remove this fake antivirus program from your computer.
After removing this rogue software, you should reset one's Hosts file. Don't skip this step, Windows Virtual Protector modifies your Hosts files, and you will encounter browser redirect problems if malicious entries will not be eliminated.
Hosts file is used to resolve some canonical names of websites to IP addresses. When it's modified users may be redirected to malicious websites while still seeing a good URL in the address bar. To fix this, please download Microsoft Fix It tool, it restores one's hosts file to Windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:
Other tools known to remove Windows Virtual Protector: