Comments on: Windows Protection Suite

By: admin

admin — Thu, 24 Nov 2011 15:18:56 +0000

Veerus: This rogue family messes up the registry. You could try creating another user account on infected PC and see if you can execute programs from there,.

By: Veerus

Veerus — Thu, 24 Nov 2011 15:14:26 +0000

my client is having a tough time removing the virus we tried opening the other programes please HELP!!

By: James

James — Mon, 11 Apr 2011 09:52:28 +0000

Hi Admin,

I think i have been another victim of this protection suite. Every time I try to launch an application such as a game (exe),it comes back saying something like, exe file is corrupted, please check you anti virus software.

My question is, does this rogue virus stop applications from running?

Thanks

By: Matt

Matt — Fri, 05 Nov 2010 22:36:01 +0000

Hey so I ran TDSS Killer and it found something and it “cured” it and asked me to reboot and now I cant get her computer to get into windows without getting the blue screen of death. The error I am getting is

Stop: 0x000000008e (0xc0000005, 0x8384acc7, 0x9e40b91c, 0×00000000)

I can get it to boot up in safe mode, however I cannot system restore it gives me this error.

To peform an offline system restore, you must specify which Windows installaion you would like to restore. For example, if the installation located in C:\Windows should be restored, enter teh following commmand:

rstui.exe/offline:C:\windows

I am not sure what it means by offline line because I booted it in safemode with networking. I also ran Hitman Pro and it just found cookies. Thanks in advance

By: admin

admin — Fri, 05 Nov 2010 10:03:04 +0000

Matt:
Try running TDSS Killer on your PC or deleting what Spyware Doctor finds manually. Full version of Spyware doctor is superb protection tool from similar malware. I can also recommend running a scan with hitman Pro.

By: Matt

Matt — Fri, 05 Nov 2010 08:33:17 +0000

So I am working on a clients computer after 2 other chain stores really messed up her computer trying to get this damn thing off. I keep changing the host file but every time I check on it its right back to the way it was with all the redirects…when I save it and keep the name as host it says its a read only file and I cant save it, but when I go to change it to a not read only file it doesn’t exist. The only host file it finds is the one I created ‘hosts’ in hope that it would work. I was following another guide that was using HJT. I do not have any problem with taskmanager. The original files were deleted by the chain store guys so basically all traces except for what Spy Bot Search and Destroy finds, but cant delete, is gone. I do not want to by Spyware Doctor is there anyway that I haven’t tried?

By: jim

jim — Wed, 25 Aug 2010 16:39:12 +0000

I had this problem yesterday. Malwarebytes wouldnt remove it, Spyware DR didnt work, and the manual directions for exes, register entries, etc didnt seem to apply (none found). Eventually I found a strange executable named bpxomqwshdw.exe that was recently installed and starting on startup. I removed that along with tmp.exe and antispy.exe, rebooted, and the Protective Suite was gone. Also had to reset IE to not use a proxy.

By: admin

admin — Sun, 15 Aug 2010 20:51:52 +0000

Justin: Do a scan with Spyware Doctor after the restore. Update it prior scan, that is critical in your case. The virus is not fully gone, So if Spyware Doctor is blocked, reboot into safe mode with networking (reboot, press F8, choose from menu). Or you could try right-clicking on Spyware Doctor executable and choose run as administrator.

By: justin

justin — Sun, 15 Aug 2010 01:42:46 +0000

please help. i just got this yesterday, i had the massive pop ups, but they have gone away after doing a malware bytes scan. Spyware doctor will not work, and it seems everything is working fine after i did a system restore, but something keeps disabling my mcafee real time scanning. PLEASE HELP!!!

By: ignas

ignas — Thu, 24 Jun 2010 07:16:08 +0000

Matt, please follow this removal guide http://www.2-viruses.com/remove-green-av-security-suite

By: MJ

MJ — Wed, 23 Jun 2010 15:58:50 +0000

Please help, I have the ‘Green AV Security Suite’ this and it wont let me open spdoc.exe or task manager or anything but internet and some other things. It says everything else has a vivus and says to fix this buy this product, i cant even open task manager. please what can i do?

By: C.Real

C.Real — Tue, 29 Sep 2009 14:50:31 +0000

@Jeff

I tried removing the debugger line as suggested and it works. I am now able to access task manager routinely.

Many thanks

Now I have to figure out how to get rid of that pesky windows protection suite. and the browser redirect virus.

By: george

george — Sat, 19 Sep 2009 10:38:46 +0000

Whoever is doing this trojan is making money with the credit card scam. This needs a bank to run their transactions. You need to charge this back through you credit card as fraud. If the receiving bank gets enough charge backs maybe they will close them down and it will not be profitable for them to ruin peoples computers.

By: daniela

daniela — Sat, 19 Sep 2009 10:23:31 +0000

my bros laptop has windows protection suite. Everythings stuffed up. It doesnt let you use the internet, only in safe mode with networking. Than when i try ANY of these spyware MAMB downloads a thing comes up saying the security settings will not let you down load this file. then when that comes up there is no option to change settings, even in the control panel. The whole machine has slowed down and there was a pre-installed and working Trend Micro Security system going on but now it wont pick up anything. There is absolutely nothing to do about it.

By: admin

admin — Sat, 19 Sep 2009 10:09:45 +0000

Kris: Try booting is safe mode with networking or download a remover to usb stick.

By: kris

kris — Fri, 18 Sep 2009 23:55:35 +0000

i’m in a real tough situation with windows protection suite. it won’t let me go on the internet and it’s disabled my taskmanager so i can’t open that to get rid of protection suite manually either. what should i do??

By: admin

admin — Fri, 18 Sep 2009 07:54:49 +0000

That depends on how you paid for them. If the payment went through their system, it is highly likely they will sell your CC data or charge again themselves.

By: Dominic

Dominic — Fri, 18 Sep 2009 07:12:17 +0000

ooh okay thanks,
i checked it and it charged me.
so does that mean they can get my info?
or nothing else will happen?

By: Matthew

Matthew — Fri, 18 Sep 2009 02:01:07 +0000

Oh my gosh! I got this hit with this windows protection suite thing and im downloading this removal program you suggested! I am not computer savy in the least! Im only a high schooler who recently got the internet! if i run this program with a full scan in all its glory will it compleatly get rid of this thing or is there something else i should check after? also i downloaded Mcafee after i got this crap and i think it is blocking the use of it…

By: admin

admin — Thu, 17 Sep 2009 12:21:00 +0000

I would check my bank statement for that card, Dominic. Usually the card info goes through their own servers, so they got your CC details