Warning: include_once(/home/windowvi/public_html/VistaBlog/wp-content/plugins/wp-affiliate-pro.php) [function.include-once]: failed to open stream: Permission denied in /home/windowvi/public_html/VistaBlog/wp-settings.php on line 215

Warning: include_once() [function.include]: Failed opening '/home/windowvi/public_html/VistaBlog/wp-content/plugins/wp-affiliate-pro.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/windowvi/public_html/VistaBlog/wp-settings.php on line 215
Windows Vista Repair | Vista and XP repair guides

Windows Vista Blog

Windows Vista Repair and Resource site

AV Security Suite

With so many people getting infected with AV Security Suite I wanted to do a shout out to a few sites that have some very solid information on how to remove this threat.

www.removeavsecuritysuite.com : This website is by far the leading resource for removing this threat. They have detailed guides and videos that cover XP, Vista and Windows 7

The other resource out there that has many user comments is from the same makers as the above site but only it’s dedicated to all viruses and not just specific threats.� This www.removevirus.org/av-security-suite site was the original guide and still works great.� They do not go into as much detail but most users will still find it helpful.

How To Remove Defense Center

Defense Center is a malicious anti-spyware application that has been derived from a number of rogue programs, namely, Digital Protection, Dr. Guard, Your Protection , Data Protection and Protection Center, and tries to trick users into purchasing its license. This malicious application reaches the user’s computer via Trojans that get downloaded from malicious websites. Once established on the user’s system, Defense Center loads itself as a startup service at boot time. Defense Center proceeds to perform a large number of fake security scans on the system, returning results that state that the computer is dangerously infected with a number of non-existent viruses. It also generates fake warning pop-ups from the Windows taskbar. Finally Defense Center urges the user to purchase a license to the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is incapable of cleaning the detected false ‘threats’. However, all users should be aware that this is a trick aimed at swindling their money, as no version of Defense Center can scan or clean any computer.

Defense Center

The following chapters will show you how to remove Defense Center. Defense Center removal involves the stopping of processes, the unregistering of DLL files, the removal of files and folders and the deletion of registry entries.

File Removal Procedures

The first step you must take in order to delete Defense Center is to stop the following processes:

  • mswinsck.exe
  • wscsvc32.exe
  • defcnt.exe
  • uninstall.exe

Next, it is necessary to unregister the following DLL files to continue with Defense Center removal:

  • fiosejgfse.dll
  • defext.dll
  • defhook.dll

The next step in Defense Center removal is the deletion of the following files and folders:

  • %documents and settings%\all users\application data\fiosejgfse.dll
  • %temp%\mswinsck.exe
  • %temp%\wscsvc32.exe
  • %appdata%\microsoft\internet explorer\quick launch\Defense Center.lnk
  • %desktop%\Defense Center support.lnk
  • %desktop%\Defense Center.lnk
  • %commonprograms%\Defense Center\about.lnk
  • %commonprograms%\Defense Center\activate.lnk
  • %commonprograms%\Defense Center\buy.lnk
  • %commonprograms%\Defense Center\Defense Center support.lnk
  • %commonprograms%\Defense Center\Defense Center.lnk
  • %commonprograms%\Defense Center\scan.lnk
  • %commonprograms%\Defense Center\settings.lnk
  • %commonprograms%\Defense Center\update.lnk
  • %programfiles\Defense Center\about.ico
  • %programfiles\Defense Center\activate.ico
  • %programfiles\Defense Center\buy.ico
  • %programfiles\Defense Center\def.db
  • %programfiles\Defense Center\defext.dll
  • %programfiles\Defense Center\defhook.dll
  • %programfiles\Defense Center\defcnt.exe
  • %programfiles\Defense Center\help.ico
  • %programfiles\Defense Center\scan.ico
  • %programfiles\Defense Center\settings.ico
  • %programfiles\Defense Center\splash.mp3
  • %programfiles\Defense Center\uninstall.exe
  • %programfiles\Defense Center\update.ico
  • %programfiles\Defense Center\virus.mp3

After the above steps have been completed, your hard disk is free from files and folders belonging to Defense Center.

Registry Removal Procedures

Removing files and folders alone is not sufficient for complete Defense Center removal. In order to remove Defense Center completely, the following keys and settings should be removed from the Windows Registry:

  • hkcr\CLSID\5E2121EE-0300-11D4-8D3B-444553540000
  • hklm\SOFTWARE\Defense Center
  • hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Defense Center
  • hklm\SOFTWARE\Paladin Antivirus
  • hkcu\Software\Microsoft\Windows\CurrentVersion\Run “Defense Center”
  • hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved “5E2121EE-0300-11D4-8D3B-444553540000”

Now it is safe to say that your computer is completely safe from Defense Center. In order to make sure that no other infections are present in the system it is recommended to scan the entire PC using genuine antivirus software such as Spyware Doctor with Antivirus.

Conclusion

Even though an inexperienced computer user may have full knowledge on how to remove Defense Center, it is not recommended that they attempt it as any mistake made during removal could cause damage to the system. Therefore inexperienced users are advised to make use of a web-based malware scanning/cleaning service such as www.onlinecomputerrepair.org or legitimate antivirus software such as Spyware Doctor with Antivirus to remove Defense Center.

How To Remove AV Security Suite

AV Security Suite is a rogue anti-spyware that aggressively sells itself to users by showing fake threat reports and scan results. It is related to the notorious rogue programs known by the names of Antivirus Soft and Antispyware Soft. AV Security Suite gets installed on a user’s computer through fake PDF files that install a Trojan by exploiting security loopholes. Once installed, AV Security Suite immediately disables essential Windows utilities such as Task Manager and Registry Editor to prevent the user from attempting to manually remove it. Then, AV Security Suite starts to display fake pop-ups, claiming that the integrity of the system has been compromised due to the presence of dangerous spyware. Its GUI is extremely authentic-looking, and starts conducting fake scans as soon as it is open, flagging legitimate user programs as viruses and spyware. It also tries to convince the user that the currently installed ‘trial’ version is not sufficient to remove these threats, and that the user should pay for ‘activation’ of AV Security Suite. It should be noted that the ‘full’ version of AV Security Suite, once purchased, has no capability whatsoever to clean your computer and this is a trick that you should never fall for.

AV Security Suite

The following sections outline how to remove AV Security Suite. AV Security Suite removal involves the stopping of processes, removal of files and folders and the deletion of registry entries. However, before attempting this you should restart your computer in Safe Mode, preferable with Networking to receive remote help if you get into trouble.

File Removal Procedures

The first step you need to take in order to remove AV Security Suite from your computer is to kill the following processes:

  • [random characters]tssd.exe
  • [random characters].exe

Next, it is necessary to remove the following files and folders from the hard disk in order to continue with AV Security Suite removal:

Windows XP:

  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random characters ]\[random characters]tssd.exe
  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random characters ]\[random characters].exe

Windows Vista/7:

  • %USER%\AppData\[random characters ]\[random characters]tssd.exe
  • %USER%\AppData \[random characters ]\[random characters].exe

Once the above steps have been completed, it is safe to say that there are no more files belonging to AV Security Suite on your hard disk. While cleaning your computer, it is, however, important to know that a complete scan using genuine antivirus software such as Spyware Doctor with Antivirus may proof to be extremely beneficial.

Registry Removal Procedures

File deletion alone is not sufficient to completely remove AV Security Suite. The following keys and settings should be removed from the Windows Registry for complete AV Security Suite removal:

  • HKEY_CURRENT_USER\Software\AvScan
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random characters]“
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random characters]“
  • HKEY_CURRENT_USER\Software\avsoft
  • HKEY_CURRENT_USER\Software\avsuite
  • HKEY_LOCAL_MACHINE\SOFTWARE\avsoft
  • HKEY_LOCAL_MACHINE\SOFTWARE\avsuite
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” =”1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1”

After the registry cleaning portion of AV Security Suite removal has been completed, your computer is safe from this rogue software.

Conclusion

Even if you have a good knowledge on how to remove AV Security Suite, you should not attempt to do it manually if you are an inexperienced computer user. Any mistake made during removal could cause untold damage to the operating system. Therefore it is recommended to use a legitimate antivirus application such as Spyware Doctor with Antivirus or web-based repair service such as www.onlinecomputerrepair.org for safe AV Security Suite removal.

AV 7 Removal

AV 7 is a malicious anti-spyware application that imitates legitimate anti-malware programs. AV 7 uses scare tactics the same as other rogue antimalware applications to trick users into purchasing a license to its full version. This malicious application reaches the user’s computer via Trojans that get downloaded from malicious websites which claim to be able to help you with your security. Once established on the computer, AV 7 then proceeds to perform a large number of fake security scans on the system, returning results that state that the computer is dangerously infected with a number of non-existent viruses. It also generates fake warning pop-ups from the Windows taskbar. Finally AV 7 urges the user to purchase a license to the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is incapable of cleaning the detected false ‘threats’. However, all users should be aware that this is a trick aimed at swindling their money, as no version of System Security can scan or clean any computer.

AV 7 Removal

As soon as you detect a copy of this rogue software on your computer, you should initiate the process of AV 7 removal. In order to delete AV 7, you need to stop its processes, unregister its DLLS, delete its files and folders and remove its registry entries.

File Removal Procedures

The first step you need to take in order to remove AV 7 is to stop the following process from executing:

  • antivirus7.exe

Next, it is necessary to unregister the following DLL:

  • UpdateExplorer.dll

The next step in AV 7 removal is to delete the following files and folders:

  • %Documents and Settings%\All Users\Start Menu\AV7
  • %Documents and Settings%\All Users\Start Menu\AV7\Antivirus7.lnk
  • %Documents and Settings%\All Users\Start Menu\AV7\Uninstall.lnk
  • %Program Files%\AV7
  • %Program Files%\AV7\antivirus7.exe
  • %WINDOWS%\SoftwareDistribution\DataStore\Logs\tmp.edb
  • %WINDOWS%\system32\UpdateExplorer.dll
  • %UserProfile%\Desktop\Antivirus7.lnk

After the above steps have been completed, AV 7 no longer resides on your file system.

Registry Removal Procedures

File deletion alone is not sufficient to completely remove AV 7. The following keys and settings should be removed from the registry for complete AV 7 removal:

  • HKEY_CURRENT_USER\Software\EVA246
  • HKEY_CLASSES_ROOT\CLSID\E2BFE352-A303-4EA8-88FE-CE35361D7E8B
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\E2BFE352-A303-4EA8-88FE-CE35361D7E8B
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “AV7?
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “WinNT-EVI 12.03.2010?

At this point it is recommended to conduct a full system scan using genuine antivirus software such as Spyware Doctor with Antivirus and clean any additional malicious traces that are found as being present.

Conclusion

Manual AV 7 removal is not recommended for inexperienced users as any wrong move made during the removal process could cause irreversible damage to the operating system of the computer. Therefore inexperienced users are strongly advised to use a web-based repair service such as www.onlinecomputerrepair.org or legitimate antivirus software such as Spyware Doctor with Antivirus to safely remove AV 7.

Security Master AV Removal

Security Master AV is fake anti-spyware program which imitates a legitimate antimalware application and is related to My Security Engine and Cleanup Antivirus. It acts in the same manner as any other rogue software by trying to convince users to buy a license for the software. Security Master AV enters a user’s computer via Trojans that get downloaded from websites which promote fake audio/video codec packs. Once it has been installed, Security Master AV blocks any legitimate antivirus software that the user may have installed on the system as well as disabling essential Windows utilities such as Task Manager and Registry Editor. Then it starts performing fake system scans at regular intervals, returning results that claim that the user’s system is under serious threat. It also creates a number of harmless files that it later detects as dangerous viruses. Security Master AV uses a Windows-style GUI and pop-ups generated from the Windows taskbar to convince users that this is the real thing. Then it claims that the currently installed ‘trial’ version is inadequate to remove the previously detected false ‘threats and urges the user the pay for the ‘full’ version of the software. However, the ‘full’ version is no more capable of cleaning a user’s system than the ‘trial’ version; therefore no user should ever purchase the false license to this rogue software.

Security Master AV

As soon as you find a copy of this malicious software installed on your computer, you should take steps to delete Security Master AV. Security Master AV removal involves the stopping of processes, unregistering of DLLs, removal of files and folders and the deletion of registry entries. However, before attempting this you should restart your computer in Safe Mode.

File Removal Procedures

The first in Security Master AV removal is the stopping of the following processes:

  • SM8d7c.exe
  • ANTIGEN.exe
  • std.exe
  • SM345d.exe

Next, it is necessary to unregister the following DLL files to continue with Security Master AV removal:

  • cid.dll
  • ddv.dll
  • runddlkey.dll
  • sqlite3.dll
  • mozcrt19.dll

The next step that has to be taken to remove Security Master AV is the deletion of the following files and folders:

Windows XP:

  • %CommonAppData%\8d7ca11\25.mof
  • %CommonAppData%\8d7ca11\SM8d7c.exe
  • %CommonAppData%\8d7ca11\SMAV.ico
  • %CommonAppData%\8d7ca11\SMAVSys\vd952342.bd
  • %AppData%\Microsoft\Internet Explorer\Quick Launch\Security Master AV.lnk
  • %AppData%\Security Master AV\cookies.sqlite
  • %Desktop%\Security Master AV.lnk
  • %UserProfile%\Recent\ANTIGEN.drv
  • %UserProfile%\Recent\ANTIGEN.exe
  • %UserProfile%\Recent\cid.dll
  • %UserProfile%\Recent\CLSV.drv
  • %UserProfile%\Recent\DBOLE.sys
  • %UserProfile%\Recent\ddv.dll
  • %UserProfile%\Recent\ddv.sys
  • %UserProfile%\Recent\energy.tmp
  • %UserProfile%\Recent\FS.drv
  • %UserProfile%\Recent\gid.drv
  • %UserProfile%\Recent\PE.drv
  • %UserProfile%\Recent\PE.exe
  • %UserProfile%\Recent\PE.sys
  • %UserProfile%\Recent\PE.tmp
  • %UserProfile%\Recent\std.exe
  • %UserProfile%\Recent\tjd.drv
  • %UserProfile%\Recent\tjd.sys
  • %UserProfile%\Recent\runddlkey.dll
  • %StartMenu%\Security Master AV.lnk
  • %StartMenu%\Programs\Security Master AV.lnk
  • c:\Documents and Settings\All Users\Application Data\345d567\
  • c:\Documents and Settings\All Users\Application Data\345d567\16.mof
  • c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
  • c:\Documents and Settings\All Users\Application Data\345d567\SM345d.exe
  • c:\Documents and Settings\All Users\Application Data\345d567\SMAV.ico
  • c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
  • c:\Documents and Settings\All Users\Application Data\345d567\Quarantine Items\
  • c:\Documents and Settings\All Users\Application Data\345d567\SMAVSys\
  • c:\Documents and Settings\All Users\Application Data\345d567\SMAVSys\vd952342.bd
  • c:\Documents and Settings\All Users\Application Data\SMNPCTCAV\
  • c:\Documents and Settings\All Users\Application Data\SMNPCTCAV\SMMPIBBZGHAV.cfg
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Master AV.lnk
  • Windows Vista / Windows 7:
  • %CommonAppData%\8d7ca11\25.mof
  • %CommonAppData%\8d7ca11\SM8d7c.exe
  • %CommonAppData%\8d7ca11\SMAV.ico
  • %CommonAppData%\8d7ca11\SMAVSys\vd952342.bd
  • %AppData%\Microsoft\Internet Explorer\Quick Launch\Security Master AV.lnk
  • %AppData%\Security Master AV\cookies.sqlite
  • %Desktop%\Security Master AV.lnk
  • %UserProfile%\Recent\ANTIGEN.drv
  • %UserProfile%\Recent\ANTIGEN.exe
  • %UserProfile%\Recent\cid.dll
  • %UserProfile%\Recent\CLSV.drv
  • %UserProfile%\Recent\DBOLE.sys
  • %UserProfile%\Recent\ddv.dll
  • %UserProfile%\Recent\ddv.sys
  • %UserProfile%\Recent\energy.tmp
  • %UserProfile%\Recent\FS.drv
  • %UserProfile%\Recent\gid.drv
  • %UserProfile%\Recent\PE.drv
  • %UserProfile%\Recent\PE.exe
  • %UserProfile%\Recent\PE.sys
  • %UserProfile%\Recent\PE.tmp
  • %UserProfile%\Recent\std.exe
  • %UserProfile%\Recent\tjd.drv
  • %UserProfile%\Recent\tjd.sys
  • %UserProfile%\Recent\runddlkey.dll
  • %StartMenu%\Security Master AV.lnk
  • %StartMenu%\Programs\Security Master AV.lnk
  • c:\Users\%USER%\AppData\345d567\
  • c:\ Users\%USER%\AppData \345d567\16.mof
  • c:\ Users\%USER%\AppData \345d567\mozcrt19.dll
  • c:\ Users\%USER%\AppData \345d567\SM345d.exe
  • c:\ Users\%USER%\AppData \345d567\SMAV.ico
  • c:\ Users\%USER%\AppData \345d567\sqlite3.dll
  • c:\ Users\%USER%\AppData \345d567\Quarantine Items\
  • c:\ Users\%USER%\AppData \345d567\SMAVSys\
  • c:\ Users\%USER%\AppData \345d567\SMAVSys\vd952342.bd
  • c:\ Users\%USER%\AppData \SMNPCTCAV\
  • c:\ Users\%USER%\AppData \SMNPCTCAV\SMMPIBBZGHAV.cfg
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Master AV.lnk

Registry Removal Procedures

File deletion alone is not sufficient to completely remove Security Master AV. The following keys and settings should be removed from the Windows Registry for complete Security Master AV removal:

  • HKEY_CURRENT_USER\Software\3
  • HKEY_CLASSES_ROOT\SMAVSys.DocHostUIHandler
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Security Master AV”
  • HKEY_CLASSES_ROOT\CLSID\3F2BBC05-40DF-11D2-9455-00104BC936FF
  • HKEY_CLASSES_ROOT\SM345d.DocHostUIHandler
  • HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q=searchTerms”
  • HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q=searchTerms”
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1”
  • HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://findgala.com/?&uid=7&q=searchTerms”
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”

Now it is safe to say that Security Master AV will no longer affect the security of your computer system, however, it is still recommended to conduct a full system scan using genuine antivirus software such as Spyware Doctor with Antivirus.

Conclusion

Manual Security Center AV removal is not recommended for inexperienced users as any wrong move made during removal could cause damage to the system. The best tactic that inexperienced users can employ is to make use of web-based computer scanning/cleaning service such as www.onlinecomputerrepair.org or legitimate antivirus software such as Spyware Doctor with Antivirus to ensure complete and safe Security Master AV removal.

Protection Center Removal

Protection Center is a malicious program that is related to the notorious rogue programs Digital Protection, Dr. Guard, Your Protection and Data Protection. It tries to trick users into paying for a license to its ‘full’ version. Protection Center gets installed on user systems via Trojan viruses that get downloaded from malicious websites which claim to contain malware scanning services. Once installed, it immediately blocks any legitimate security software that the user may have installed on their computer. Protection Center also runs endless fake virus scans and reports that the user’s system is infected with dangerous malicious software. It also displays fake warning pop-ups from the Windows taskbar. Meanwhile it constantly requests the user to upgrade to the ‘full’ version of Protection Center by paying for a software license, claiming that the currently installed ‘trial’ version is incapable of properly removing the detected false ‘threats’. However, users should not allow themselves to be tricked into buying this software, as the ‘full’ version of Protection Center is just as incapable of cleaning a computer system as the ‘trial’ version is.

Protection Center

As soon as you find a copy of this malicious software installed on your computer, you should take steps to delete Protection Center. Protection Center removal involves the stopping of processes, the unregistering of DLL files, the removal of files and folders and the deletion of registry entries.

File Removal Procedures

The first step in Protection Center removal is the stopping of the following processes:

  • cntprot.exe
  • Uninstall.exe

Next, it is necessary to unregister the following DLL files which belong to Protection Center:

  • cntext.dll
  • cnthook.dll

The final step in the file deletion phase of Protection Center removal is the actual deletion of the following files and folders:

  • c:\Program Files\Protection Center\about.ico
  • c:\Program Files\Protection Center\activate.ico
  • c:\Program Files\Protection Center\buy.ico
  • c:\Program Files\Protection Center\cnt.db
  • c:\Program Files\Protection Center\cntext.dll
  • c:\Program Files\Protection Center\cnthook.dll
  • c:\Program Files\Protection Center\cntprot.exe
  • c:\Program Files\Protection Center\help.ico
  • c:\Program Files\Protection Center\scan.ico
  • c:\Program Files\Protection Center\settings.ico
  • c:\Program Files\Protection Center\splash.mp3
  • c:\Program Files\Protection Center\Uninstall.exe
  • c:\Program Files\Protection Center\update.ico
  • c:\Program Files\Protection Center\virus.mp3
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Protection Center.lnk
  • %UserProfile%\Desktop\Protection Center Support.lnk
  • %UserProfile%\Desktop\Protection Center.lnk
  • %UserProfile%\Start Menu\Programs\Protection Center\
  • %UserProfile%\Start Menu\Programs\Protection Center\About.lnk
  • %UserProfile%\Start Menu\Programs\Protection Center\Activate.lnk
  • %UserProfile%\Start Menu\Programs\Protection Center\Buy.lnk
  • %UserProfile%\Start Menu\Programs\Protection Center\Protection Center Support.lnk
  • %UserProfile%\Start Menu\Programs\Protection Center\Protection Center.lnk
  • %UserProfile%\Start Menu\Programs\Protection Center\Scan.lnk
  • %UserProfile%\Start Menu\Programs\Protection Center\Settings.lnk
  • %UserProfile%\Start Menu\Programs\Protection Center\Update.lnk

Now no instances of Protection Center reside on your hard disk any longer. Even if in most cases your system should be clean at this point it is still a good idea to make sure of this fact by scanning the entire PC using legitimate antivirus software such as Spyware Doctor with Antivirus.

Registry Removal Procedures

In order to completely remove Protection Center, it is necessary to remove the following keys and settings from the Windows Registry:

  • HKEY_CURRENT_USER\Software\Classes\secfile
  • HKEY_CURRENT_USER\Software\Malware Defense
  • HKEY_CURRENT_USER\Software\Paladin Antivirus
  • HKEY_CLASSES_ROOT\CLSID\5E2121EE-0300-11D4-8D3B-444553540000
  • HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
  • HKEY_CLASSES_ROOT\secfile
  • HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection Center
  • HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus
  • HKEY_LOCAL_MACHINE\SOFTWARE\Protection Center
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = “1”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Protection Center”

Conclusion

Manual Protection Center removal is not recommended for inexperienced users, as any mistake made during removal could potentially damage the operating system of the computer. Therefore inexperienced users are advised to use a legitimate antivirus program such as Spyware Doctor with Antivirus or a web-based system scanner such as www.onlinecomputerrepair.org to ensure safe Protection Center removal.