Windows Active Defender Removal: Remove Windows Active Defender Forever

Information provided by: Alexey Abalmasov

Let our support team solve your problem with Windows Active Defender and repair Windows Active Defender right now!

Leave the detailed description of your Windows Active Defender problem in the form below. Our support team will contact you in several minutes and give a step-by-step instruction on how to fix Windows Active Defender problem. Please be specific. Do your best describing the problem. This will help us recommend right and complete Windows Active Defender problem removal solution.

Describe your problem here and we'll contact you in several minutes:

* Name:
* E-mail:
* Problem summary:
* Detailed description:
Attach suspicious file:
	Here you can attach file you suspect to be virus or source of problem. If you want to attach several files, put them into one archive and attach it instead.

We'll contact you back in 10 minutes or less after you click on this button.

Individual solution guaranteed!

 

It is important:

1. We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you Windows Active Defender removal solution.
2. All fields of this form are obligatory.

Guaranteed Problem Solution

If you want to make problem with Windows Active Defender and Protector-(random 4 letters).exe solved with the automated fix created by our professionals right now, click here (download of fix will start immediately):

Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

What is Windows Active Defender? Technical details of Windows Active Defender problem and Windows Active Defender removal tool.

Methods for manual Windows Active Defender removal.

Instant download of a program that will solve your problem automatically.

Instant professional support in solving Windows Active Defender error from our Security Support Team.

Threat's profile

Windows Active Defender, being installed on your computer, pretends to be one of the most powerful legal antiviruses, but it is just a lie. The user should remember that no one legal program (and antivirus also) cannot be installed without his direct participation in the process of installation. So, the user must not trust the program that was created to deceive him! Windows Active Defender was invented to fund the creation of the similar fake antivirus products. This fake antivirus program can spread through the social networks and through the suspicious websites. The user should remove Windows Active Defender from his computer as soon as possible.

Autorun of Windows Active Defender can be fixed in Hijackthis by fixing the line:

O4 - HKCU\..\Run: [Inspector] %AppData%\Protector-(random 4 letters).exe

To unlock your PC and get rid of alerts use following code:

0W000-000B0-00T00-E0020

Windows Active Defender intrusion method

Windows Active Defender copies its file(s) to your hard disk. Its typical file name is Protector-(random 4 letters).exe. Then it creates new startup key with name Windows Active Defender and value Protector-(random 4 letters).exe. You can also find it in your processes list with name Protector-(random 4 letters).exe or Windows Active Defender.

If you have further questions about Windows Active Defender, please fill in the form above and we'll contact you shortly.

Download program to remove Windows Active Defender (Windows Active Defender Removal Tool)

Recommended Solution

If you are not sure what to delete, use our award winning program - Windows Active Defender Removal Tool.

Windows Active Defender Removal Tool will find and fully remove Windows Active Defender and all problems associated with Windows Active Defender virus.

Fast, easy, and handy, Windows Active Defender Removal Tool protects your computer against Windows Active Defender that does harm to your computer and breaks your privacy. Windows Active Defender Removal Tool scans your hard disks and registry and destroys any manifestation of Windows Active Defender. Standard anti-virus software can do nothing against malicious programs like Windows Active Defender. Remove Windows Active Defender straight away!

Download Windows Active Defender Removal Tool now

	Please take 1 second to show that you like our solution - click on this Facebook button:

How to fix Windows Active Defender?

This problem can be solved manually by deleting all registry keys and files connected with Windows Active Defender, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by Windows Active Defender.

To get rid of Windows Active Defender, you should:

1. Kill the following processes and delete the appropriate files:

• %AppData%\NPSWF32.dll
• %AppData%\Protector-(random 4 letters).exe
• %AppData%\result.db
• %AppData%\1st$0l3th1s.cnf
• Windows Active Defender.lnk

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use Windows Active Defender Removal Tool for safe problem solution.

2. Delete the following malicious folders:

no information

3. Delete the following malicious registry entries and\or values:

• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
  Value: WarnOnHTTPSToHTTPRedirect
  Data: "0"
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
  Value: DisableRegedit
  Data: "0"
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
  Value: DisableRegistryTools
  Data: "0"
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
  Value: DisableTaskMgr
  Data: "0"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
  Value: ConsentPromptBehaviorAdmin
  Data: "0"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
  Value: ConsentPromptBehaviorUser
  Data: "0"
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
  Value: EnableLUA
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  Value: Inspector
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings
  Value: net
  Data: 2012-6-14
• Key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings
  Value: UID
  Data: (random)
• Key: HKEY_CURRENT_USER\Software\ASProtect
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\alevir.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bipcpevalsetup.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\gbmenu.exe
• Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msdm.exe

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use Windows Active Defender Removal Tool for safe problem solution.

Next threat: click.get-answers-fast.com »

Learn more about Windows Active Defender and Protector-(random 4 letters).exe »

« Back to catalog