Home Blog

How to Remove Windows Premium Defender Rogue Program safely

Posted by in Blog Rogue Program
on January 30th, 2013 | Leave a comment

Windows Premium Defender is classified as rogue antispyware program that tries to promote the registered version by fake security alerts. The program imitates a professional virus removal program and claims itself to be able to scan computer, pick up virus and cure infected system. Usually, Windows Premium Defender displays a fake security warning, run a scan much faster than a normal security program and then informs users that the computer is infected severely. You may be unable to find out the detected files since they do not exist at all. If you choose to trust the program and click remove button you will be redirected to the page for purchasing the registered version. At last, you will find it is totally a waste of money and time. What you need to do is to remove Windows Premium Defender completely from the computer.

How to remove Windows Premium Defender manually
Manual way is one of the possible solutions, but it is only practical for users who know how to kill process, delete files and modify windows registry. Moreover, it will cost much time.
Step1. Run task manager, find out the process and end it completely
Protector-[rnd].exe
Step2. According the shortcut icon of Windows Premium Defender on the desktop, you can find out the location of the rogue program. Meanwhile, the following files should be removed.
%AppData%\Protector-[rnd].exe
Step3. Run registry editor and delete the malicious entries

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe

How to remove Windows Premium Defender easily
Easy way needs the help from a professional virus removal program which can detect the rogue program and remove all components thoroughly from the system. However, not all security programs can remove Windows Premium Defender, since the rogue program has ability to affect or block the security program. If you have an antivirus program, you can try to launch a scan in safe mode with networking.

At last, we recommend Spyware Cease, a professional antispyware program which has detection on Windows Premium Defender and can wipe it off without being blocked. This is surely a quicker and safer solution than manual way.

Comments are closed.