Windows Defence Master – scam. Instructions to remove it

Windows Defence Master is not a good program. It’s a scam! Don’t trust it. Don’t treat it as legitimate. Ignore its scary warnings on your PC, all fake reports it displays to frighten you. Do not buy this hoax. This is the total waste of your time and money in particular. Following this tutorial will help you to get rid of Windows Defence Master virus from your system.

Windows Defence Master virus

We do hope that the upper paragraph has been convincing to persuade you in the fact that Windows Defence Master is not a decent program. So, we will explain now why we think so. Windows Defence Master is a computer infection classified as a fake antispyware, also known as rogue, fake AV, or just a bogus antivirus sofware. The only goal of this program is to make you waste your money for its full license, which in reality doesn’t differ from the trial version of this program.

Windows Defence Master gets into PCs illegally, being a computer infection from the FakeVimes rogue antivirus clan. This actually takes place by means of fake Microsoft Security Essentials Alerts. These fake MSE warnings typically use various vulnerabilities available with your browser and manage to display themselves on your screen. You will see a scary warning from these fake MSE alerts that will tell you about your PC being in a horrible condition, full of viruses and all sort of malicious infections. You will be asked by this fake alert to download and install some tool that will supposedly clean your PC from these threats. By actually clicking the “Dowload” button you automatically download and install Windows Defence Master virus into your system

Windows Defence Master, upon successful infiltration into your PC, begins imitation of some system cleanup. So, it runs the fake scanning of your system and later on reports the large number of fake security threats, viruses and malwares supposedly detected on your system. It will tell you that in order to have these fake infections removed you will need to buy its full version (so-called “ultimate protection”), which is absolutely good for nothing when it comes to removal of real malwares from your PC. If you buy this hoax by mistake, it will imitate the cleanup of your system and will claim to remove these fake infections. But, if real threats do come into your PC, this hoax will not save you from them. As you see, buying this hoax is the total waste of your funds.

To summarize the above-said information, Windows Defence Master invents fake threats and unreal infections, pretends to scan your PC, detects these fake infections and then tells you to buy its license to remove them. As you see, this is a real scam. Buying this hoax is the waste of your funds. Instead of doing so please follow these instructions provided below that will help you get rid of this malware from your system.


Software necessary for Windows Defence Master virus removal:

Windows Defence Master removal steps:

  • In Windows Defence Master click “?” Menu button anc click “Register”:
  • Register FakeVimes virus

  • Paste this product key – 0W000-000B0-00T00-E0022 exactly as shown at the image below, then click “Register“:
  • FakeVimes reg key

    Note! If this product key has been found to be invalid, try one of these keys as well:

    1. 0W000-000B0-00T00-E0001
    2. 0W000-000B0-00T00-E0002
    3. 0W000-000B0-00T00-E0003
    4. 0W000-000B0-00T00-E0021
  • Afer registration download Plumbytes Anti-Malware without any restrictions on the part of the rogue, scan your PC with Plumbytes Anti-Malware and remove all infections detected by clicking “Apply” button at the end of scan.
  • Restart your computer and repeat scan.

Windows Defence Masterr similar removal video at YouTube:

Beware of ways how Windows Defence Master is spread today:

Windows Defence Master uses various vulnerabilities of browsers like Internet Explorer, Google Chrome, Mozilla Firefox, Opera and many others for the interference into your computer. For example, you might get the following scary alert, supposedly coming from Microsoft Antivirus:

Microsoft Antivirus fake alert
Microsoft Antivirus has found critical process activity on your PC

Microsoft Antivirus has found critical process activity on your PC. You will need to clean your computer to prevent the system breakage.

If you actually click the “OK” button as shown at the image you will have another fake alert, not associated at all to Microsoft Security Essential Alert, but yet claiming to be such:

Microsoft Security Essentials fake alert
Fake MSE Alert

Microsoft Security Essentials Alert
Potential threat details
Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. You need to clean your computer immediately to prevent the system crash.
Detected items:
– Trojan-PSW.Win32.launch
– HackTool:Win32/Welevate.A
– Adware.Win32.Fraud

Associated files and registry entries:

Related files:

%AppData%\svc-[rnd].exe
%CommonAppData%\connector.swf
%Programs%\Windows Defence Master.lnk
%Desktop%\Windows Defence Master.lnk

Related registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PrSft %AppData%\svc-[rnd].exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe\Debugger svchost.exe

Fake security alerts, notifications and warnings of Windows Defence Master scam:

Firewall has blocked a program from accessing the Internet
C:\Program Files\Internet Explorer\iexplore.exe
is suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.

Error
Trojan activity detected. System integrity at risk.
Full system scan is highly recommended.

Error
System data security is at risk!
To prevent potential PC errors, run a full system scan.