Remove Windows Antivirus Pro

Windows Antivirus Pro Removal

»Download Windows Antivirus Pro Removal Software

Windows Antivirus Pro seems to be from the same makers as Windows Police Pro.  This is a bogus security product and should not be purchased.  The makers of this program are simply out to scam people out of their money. What makes this program harder to remove then most is it blocks many programs from being able to run and can disable many security clients out there.  If you find the manual removal guide below is too hard to follow then we do suggest getting an expert to remove this for you.  www.pcninja.com is were we send most people because they have low price points and great customer service.  Normally we do not flat out tell people to go there in the description area but I myself had some trouble removing this so you should take a deep breathe and expect to be at this a little while if you are manually removing this threat. Safe mode was also disabled for the strain we had and this can make the removal process that much harder. KEY TIP FOR REMOVAL !!!!!!!!!!!!!  Yes it's a must tip 🙂 The thing that makes this very hard to remove is it blocks any and all executable s from running except for the needed malware that it installs.  So another words you can not open up any programs. You need to isolate and delete the desot.exe and dddesot.dll.  Once those are deleted you can then re-boot and you should be able to run security programs again.  Also know that

Some symptoms of Windows Antivirus Pro:

• Bogus Scan results
• Auto Scans on Start-up
• Warning coming out of a fake shield in the system tray
• pop-ups and re-directs to the fake software's website
• constant warnings of being infected as well as false statements of other trojans
• Blocks other programs from running to make it harder to remove threat

Manual removal instructions for Windows Antivirus Pro ( Please read our disclaimer below )

Kill Windows Antivirus Pro processes: ( Learn How to Kill a Process Here. Opens in new Window )

• Windows Antivirus Pro.exe
• ANTI_files.exe
• dbsinit.exe
• svchast.exe
• desot.exe  ( This is the main file that will be blocking other program from running it's root location is below )

We do recommend you run a full scan using SpyHunter. Even if you do not intend on purchasing the product it will help to stop the virus from re-installing and re-activating while you manually remove it. Also it will inform you of any new changes to the file names. You may need this if it mutates. Because this virus strain blocks almost every program from running you may need to enter through safe mode.  If safe mode is disabled then you Delete Windows Antivirus Pro registry values: ( Learn How to Edit Registry Here. Opens in new Window )

• HKEY_CURRENT_USER\Software\Softimer
• HKEY_CURRENT_USER\Software\Windows Antivirus Pro
• HKEY_CLASSES_ROOT\CLSID\{76DC0B63-1533-4ba9-8BE8-D59EB676FA02}
• HKEY_CLASSES_ROOT\clsid\{76dc0b63-1533-4ba9-8be8-d59eb676fa02}\inprocserver32
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F54AF7DE-6038-4026-8433-CC30E3F17212}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Win Antivirus Pro
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AntipPro2009_100
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AntipPro2009_100

Delete files: ( Hint ) Most of these files will be in the c:\Program Files\Windows Antivirus Pro\ directory.

• Windows Antivirus Pro.lnk
• ANTI_files.exe
• msvcm80.dll
• msvcp80.dll
• msvcr80.dll
• Windows Antivirus Pro.exe
• dbsinit.exe
• wispex.html
• %System%\dddesot.dll
• %System%\desot.exe
• %System%\bennuar.old
• %System%\sysnet.dat
• %Windows%\svchast.exe
• %Windows%\ppp3.dat
• %Windows%\ppp4.dat
• <Path trojan is executed from>\tmp\dbsinit.exe
• <Path trojan is executed from>\tmp\images

Note: %System% and %Windows% are variable locations. The true file path will depend on were your operating system is installed.  For most it is c:\windows\ and the system file is c:\windows\system32\ Delete directories: ( Please note that in most cases everything in the c:\Program Files\Windows Antivirus Pro\  can be deleted. Just be sure it's the correct folder 😉

• %UserProfile%\Start Menu\Programs\Windows Antivirus Pro
• c:\Program Files\Windows Antivirus Pro\
• C:\Program Files\Windows Antivirus Pro\tmp\
• C:\Program Files\Windows Antivirus Pro\tmp\images\

Outside Resources:

http://www.bleepingcomputer.com/virus-removal/remove-windows-antivirus-pro

http://www.wiki-security.com/wiki/Parasite/WindowsAntivirusPro/