A rogue antivirus application related to Virus Protector, Software Protector uses scare tactics to trick users into purchasing a software license. Software Protector reaches user systems via Trojan viruses that get downloaded from malicious websites advertising fake online scanners and along with fake video codec packs. Once installed, Software Protector proceeds to load itself at startup and to disable essential Windows services such as Task Manager and Registry Editor. Software Protector performs an endless stream of fake security scans on the system and reports that it is under threat from a large number of non-existent viruses. This rogue program also redirects the user’s web browser via a proxy setting to its own promotional website. It also generates fake warning pop-ups from the Windows taskbar. Meanwhile, Software Protector repeatedly requests the user to purchase a license to the ‘full’ version of the software, claiming that the currently installed ‘trial’ version is incapable of removing the detected ‘threats’ properly. However, the so-called ‘full’ version of Software Protector is just as ineffective at removing these ‘threats’ as the ‘trial’ version, therefore, you should never allow yourself to be tricked into paying for it. This site Remove Software Protector has all the infos you need to remove this threat.

Software Protector

It is important to delete Software Protector as soon as you find a copy on your computer. Software Protector removal involves the deletion of files and folders and removal of registry entries.

File Removal Procedures

The first step you must take in order to remove Software Protector is to delete the following files and folders:

Windows XP:

  • %Documents and Settings%\UserName\Application Data\random.exe
  • %Documents and Settings%\UserName\Application Data\random.dll
  • %Documents and Settings%\UserName\Local Settings\Temp\random.exe
  • %Documents and Settings%\UserName\Local Settings\Temp\random.dll
  • %Program Files%\Internet Explorer\random.exe
  • %Program Files%\Internet Explorer\random.dll
  • %WINDOWS%\random.exe
  • %WINDOWS%\random.dll
  • %WINDOWS%\system32\random.exe
  • %WINDOWS%\system32\random.dll
  • %WINDOWS%\system32\drivers\random.exe
  • %WINDOWS%\system32\drivers\random.dll

Windows Vista/7:

  • %Users%\UserName\AppData\random.exe
  • %Users%\UserName\AppData\random.dll
  • %Users%\UserName\AppData\Local\Temp\random.exe
  • %Users%\UserName\AppData\Local\Temp\random.dll
  • %Program Files%\Internet Explorer\random.exe
  • %Program Files%\Internet Explorer\random.dll
  • %WINDOWS%\random.exe
  • %WINDOWS%\random.dll
  • %WINDOWS%\system32\random.exe
  • %WINDOWS%\system32\random.dll
  • %WINDOWS%\system32\drivers\random.exe
  • %WINDOWS%\system32\drivers\random.dll

Once this step has been completed, Software Protector no longer resides on your hard disk. At this point it is recommended to scan the entire PC using genuine antivirus software such as Spyware Doctor with Antivirus.

Registry Removal Procedures

File removal alone is not sufficient to completely remove Software Protector. It is necessary to delete the following keys and settings from the registry as well:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Software Protector”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows “LoadAppInit_DLLs” = “1?
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows “AppInit_DLLs” = “random.dll”

Once the above steps are complete, you have successfully completed Software Protector removal.

Conclusion

Manual Software Protector removal is not recommended for inexperienced users as any mistake made due to inexperience could cause damage to the computer. Inexperienced users are advised to use a web-based repair service such as www.onlinecomputerrepair.org or a legitimate antivirus application such as Spyware Doctor with Antivirus for safe and efficient Software Protector removal.

Be Sociable, Share!