Windows Pro Defence Kit fake antivirus

Windows Pro Defence Kit is a new malicious program currently attacking many PCs in various locations of the world. This is a rogue antivirus that belongs to the FakeVimes virus family. The majority of the representatives of malwares from this rogue family generally don’t last for a very long time. As a matter of fact, in about 2-3 days they’re succeeded by another hoax with a slightly different name. So, the chances are that in the future Windows Pro Defence Kit will be thus substituted by another virus of a similar kind.

Windows Pro Defence Kit virus

Following this tutorial will help you to get rid of Windows Pro Defence Kit from your computer. You will be surprised not to find this malicious applications in the list of programs installed on your PC. So, why don’t you find it there? The question is quite simple, by the way. This is all because Windows Pro Defence Kit is a virus that doesn’t use legal ways of entering computers. So, it will not provide users with legal ways to uninstall it.

Windows Pro Defence Kit gets into PCs by means of fake Microsoft Security Essential Alerts. These alerts generally use various vulnerabilities available with your browser, and thus they might attack your PC from time to time. As a matter of fact, these fake MSE alerts generally report some fake infections to be present on your PC. They also recommend you to download some tool that will supposedly clean up the infection. Clicking this “Download” button of these fake MSE alerts automatically brings Windows Pro Defence Kit into your system.

The main purpose of Windows Pro Defence Kit is to make you waste your funds for nothing good. So, it runs its fake scan each time you turn your PC on. Immediately the hoax reports all sorts of fake infections on your PC and tells you to buy its full version in order to have these bogus threats neutralized. So, as you see, this is the only goal of this scam – to make you waste up your funds for its fake “ultimate protection”. Please don’t buy this hoax, but rather seek for the solution that will help you to get rid of this fake anti-spyware from your system. You may follow our automatic removal instructions as provided below.


Software necessary for Windows Pro Defence Kit virus removal:

Windows Pro Defence Kit removal steps:

  • In Windows Pro Defence Kit click “?” Menu button anc click “Register”:
  • Register FakeVimes virus

  • Paste this product key – 0W000-000B0-00T00-E0022 exactly as shown at the image below, then click “Register“:
  • FakeVimes reg key

    Note! If this product key has been found to be invalid, try one of these keys as well:

    1. 0W000-000B0-00T00-E0001
    2. 0W000-000B0-00T00-E0002
    3. 0W000-000B0-00T00-E0003
    4. 0W000-000B0-00T00-E0021
  • Afer registration download Plumbytes Anti-Malware without any restrictions on the part of the rogue, scan your PC with Plumbytes Anti-Malware and remove all infections detected by clicking “Apply” button at the end of scan.
  • Restart your computer and repeat scan.

Windows Pro Defence Kit similar removal video at YouTube:

Beware of ways how Windows Pro Defence Kit is spread today:

Windows Pro Defence Kit uses various vulnerabilities of browsers like Internet Explorer, Google Chrome, Mozilla Firefox, Opera and many others for the interference into your computer. For example, you might get the following scary alert, supposedly coming from Microsoft Antivirus:

Microsoft Antivirus fake alert
Microsoft Antivirus has found critical process activity on your PC

Microsoft Antivirus has found critical process activity on your PC. You will need to clean your computer to prevent the system breakage.

If you actually click the “OK” button as shown at the image you will have another fake alert, not associated at all to Microsoft Security Essential Alert, but yet claiming to be such:

Microsoft Security Essentials fake alert
Fake MSE Alert

Microsoft Security Essentials Alert
Potential threat details
Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. You need to clean your computer immediately to prevent the system crash.
Detected items:
– Trojan-PSW.Win32.launch
– HackTool:Win32/Welevate.A
– Adware.Win32.Fraud

Associated files and registry entries:

Related files:

%AppData%\svc-[rnd].exe
%CommonAppData%\connector.swf
%Programs%\Windows Pro Defence Kit.lnk
%Desktop%\Windows Pro Defence Kit.lnk

Related registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\PrSft %AppData%\svc-[rnd].exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpUXSrv.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\k9filter.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe\Debugger svchost.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe\Debugger svchost.exe

Fake security alerts, notifications and warnings of Windows Pro Defence Kit scam:

Firewall has blocked a program from accessing the Internet
C:\Program Files\Internet Explorer\iexplore.exe
is suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.

Error
Trojan activity detected. System integrity at risk.
Full system scan is highly recommended.

Error
System data security is at risk!
To prevent potential PC errors, run a full system scan.

Leave a Comment

Your email address will not be published. Required fields are marked *