Spyware Protection Virus Removal

Were going to tell you Exactly how to remove Spyware Protection virus from your computer 100% free.

Before you jump down to read the manual Spyware Protection removal guide you need to know 2 Important things.

1. Your computer got infected for a reason. You did not have Proper ANTIVIRUS Protection. Even after we show you how to remove Spyware Protection for free your computer will still be un-protected and vulnerable to future attacks!! :O

2. You need to know your computer may have several viruses on your computer besides just Spyware Protection. You need to run a full virus scan using one of the best antivirus clients on the market. We recommend SpyHunter

Remove Spware Protection

» Download Spywre Protection Removal Software

What is Spyware Protection Doing to your Computer Right Now?

  • Blocking legitimate software programs from running
  • Showing false error messages
  • Constantly Bothers You and WILL NOT CLOSE
  • Cannot Un-Install Spyware Protection
  • May be blocking internet access
  • Users may see pop-ups and re-directs

Some General information about Spyware Protection ( The fake client )

Spyware Protection is a fake anti-spyware program which deceives people by providing fake scan results and security alerts. It is from the same rouge family as: Advanced Security Tool 2010, Home Personal Antivirus, IE-Security, Security Central, Total Secure 2009, Win PC Defender, XP Police Antivirus, WinDefender 2009, Win PC Antivirus, and XP Deluxe Protector.
Spyware Protection can invade your system with the help of fake online scanners and Trojans. Insecure websites are also a potential source of this rouge program. Once Spyware Protection is inside your machine, it will perform a fake scan and will inform you that your computer has got infected. In addition to this, Spyware Protection will also display fake security alerts.

After displaying the results, Spyware Protection will suggest you to buy the paid version of the program to remove the so-called threats.

But don’t get scared to see these results and alerts because the threats Spyware Protection is talking about does not exist in reality. It is only trying to scare you so that you purchase the paid version of the application. One major problem with this rouge software is that it can hijack internet explorer and block other programs.

Once running in your system, Spyware Protection may come up with security alerts like this one:

Potentially harmful software detected. To enable the security mode and remove harmful software it is recommended to perform a cleanup.
Name: taskmgr.exe

Location: C:\Windows\system32 The problem may be far worse: You need to understand that your computer may very easily have more than just Spyware Protection installed. You need to run a full virus scan to ensure no other viruses are installed on your computer. Viruses are known to corrupt user data and personal files including pictures, word documents, music and videos.

Spyware Protection Removal Video

Spyware Protection Removal

Remove Spyware Protection, Removal Steps

Step 1. You need to stop the main executable (filename.exe) of this virus.
Virus Exetutables you may need to stop:

  • [random].exe ( Thie means there may be a .exe that is unqiue to your computer
    Spyware Protection.exe

In order to stop this process , one of the following tactics should work
Tactic 1. Open the Task Manager and Terminate the virus executable(s) ( Learn How to Use Task Manager Here )

Tactic 2. Re-name the executable(s) and re-start your computer. ( Learn How to re-name a file here ) The folder path to this executable is

XP

  • File path for XP

Vista / Windows 7: One of the below

  • c:\users\[username]\AppData\local\
  • C:\Users\YOUR USER NAME\AppData\Local\Temp\
  • C:\Users\[Username]\AppData\

Tactic 3. Boot into safe mode so this virus will not load ( Learn How to Boot Into Safe Mode )

Tactic 4. Perform a System Restore to possibly undo the virus installation. This will cause you to lose any software or software updates you have installed after the restore date you pick. However your personal files should not be changed or removed. I HAVE SEEN THIS OPTION DO MORE HARM THAN GOOD SO I PERSONALLY RARLY DO IT WITH VIRUS INFECTIONS. ( Learn How to do a System Restore Here )

REMOVE Spyware Protection Executalbes

Step 2. Once you have used one of the tactics in step one to stop Spyware Protection from running you will need to delete Spyware Protection’s executable. Please note that in option 4 the file traces may already be gone.
You will need to browse to the following file path and delete the main executable of this virus threat.

XP

  • C:\Documents and Settings\[Username]\Application Data\[random].exe or SpywareProtection.exe

    C:\Documents and Settings\YOUR USER NAME\ApplicationData\Local\Temp\[random].exe or SpywareProtection.exe

Vista / Windows 7

  • C:\Users\[Username]\AppData\[random].exe or SpywareProtection.exe
    C:\Users\YOUR USER NAME\AppData\Local\Temp\[random].exe or SpywareProtection.exe

(Please note that if you used tactic 2 of step 1 you will of already re-named this file. Delete the file you re-named.)

CHECK FOR OTHER VIRUSES

Spyware Protection Registry Traces

Step 3. Honestly, in most cases the traces in the registry do not need to be removed or modified. The main executable has been deleted so the path shown in the registry trace is invalid and won’t harm your computers data.

It’s just not worth the risk of you poking around in the registry. Damaging your computer is very easy to do while in the registry. For this reason we really recommend you do not manually go into the registry. Use an antivirus client or registry cleaner like PC Health Advisor to remove those invalid trace. You can download PC Health Advisor Here. I use this as my registry cleaner and PC – optimizer tool.

Step 5. PROVIDE FEEDBACK!. This last step is easy to skip but please take 1 minute and provide any of the following

  • File Paths and traces to keep the guide up to date
  • If you have a better way
  • Let us know anything you like

Outside Resources:

http://www.bleepingcomputer.com/virus-removal/remove-spyware-protection

  • Anonymous

    Any ideas where i can find my /application data/ folder on XP? I’m stuck on step 2

    thanks

  • Anonymous

    I found the application data folder, didn’t think anything was hidden in the folder, but i found it. yay!!

  • Anonymous

    First of all, I cannot open my task manager. But when I tried to remove the virus using your alternate options, I couldn’t because the spyware protection (defender.exe) file itself could not be found on my computer, and I have no way of deleting or disabling it. It is not on my desktop or my start menu. There isn’t even a file in my computer named “appdata” My operating system is Windows 7 and i currently do not have a full anti-virus software installed. Please help!

  • Jacob

    Most people will not be able to use the task manager till they stop the executable from running.

    Your OS is Windows 7 so you do have a folder called AppData. As mentioned in the video it’s a hidden folder so you can either manually type in the path shown in the guide or copy and paste it in from the guide. Just change out the user name.

    So the path would look like C:\Users\Jacob\AppData Take note. Jacob is my user name.

    Now follow the rest of the guide and let us know if you have any other questions. Be sure to scan your computer in the end using a good antivirus client like Spyware Doctor with Antivirus.

  • Anonymous

    Please help me!

    I’m trying over and over but it won’t allow me to start the Task Manager. I search for it and it’s not there. All the recommended pathways for deleting it are blocked. I don’t know what to do but it’s annoying!

  • Jacob

    What is the folder path you are looking in? What is your OS?

  • Anonymous

    On my computer (Windows XP Pro SP2) the executable file was named:
    C:\Documents and Settings\[Username]\Application Data\defender.exe

    Wow who ever made this needs to be dragged through the streets and have salt poured on them!!

    Thanks for the info on how to remove it.

  • Anonymous

    I had a bit of experience with these programs before, so I was lucky, and when I restarted my computer, I deleted all running programs that looked suspicious, and mine was called defender.exe While the programs was running, I couldn’t even open my Firefox so I had no idea where the program was, but your guide helped me find it.

    —Note— Windows Vista OS, mine was in C:\Users\Felixan\AppData\Roaming, not the Local Temp folder. Anyway, my question is, is there a small backup program I can install and run if I get this problem again? I have the free vers. of AVG but that didn’t seem to stop it. I don’t have the money to pay for a anti-virus, is there something I could install in AVG to stop this?

  • Jacob

    Glad we were able to help.

    Free clients do not provide enough protection so that answer is no. All free clients are behind on updates and most have limited features compared to the full version. You would need to purchase an antivirus client to be protected.

  • Anonymous

    I watched your video and I tried every step but my task manager, system configuration, regedit and typing in the file name in computer all failed because they are blocked. Is there another method?

  • hockeyguy

    This guide was pretty easy to follow and it looks like I have removed my threat for now.
    My Spyware exe file was called:
    0.8063996663563485.exe
    and was located at:
    c:\users\{username}\appdata\local

    I am using a win7 32bit

  • Anonymous

    i am currently having problims geting the program off my computer it wont let me open the task manager and when i do open it on safe mode ther is no way of finding the program i have read the full guide and sofar it cant help me i have 2 free anti virus softwars on my computer one is avg and the outher one is supper anti spyware free adiction

  • Jacob

    Manually browse down to the file location shown in the guide or in the user comments and view files by date modified. You should be able to see only a few folders that have been modified in the last few days that you had the infection. From there you will be able to determine the name of the threat from the guide and re-name it. Then re-boot and delete the file.

    FYI: AppData\ is a hidden folder. You will have to show hidden files and folders to view it. That or just manually type the path in and be good.

    Regards,

    Jacob

  • Jacob

    Great Update hockeyguy. The latest file path will be added to the guide.

    Many thanks

  • Anonymous

    This “Spyware Protection” cannot be deleted from my computer, I cannot search it, I cannot exit it or anything. It blocks me from running system restores, Task Manager, anything that could delete it, is there any other way I can get rid of this piece of shit??

  • Jacob

    Follow the guide. That’s the best advice I can offer.

    If you have any questions related to the guide, please state what you have already done and what exactly you are stuck trying to do. Naming your OS and current security client also helps.

  • Fan

    Thanks for your great effort. I am using 64bit windows7 and am not able to:

    1. start task manager.
    2. find the icon on desktop.
    3. search the executable file.

    However, based on your instruction, I located “defender.exe” under “c:\users\{username}\appdata\local\roaming” manually.

    By the way, do you know why I login as another user and am not able to find this virus when I do a full scan with McAfee.

    Thanks,

    Fan

    It works.

  • Jacob

    McAfee is not picking up the trace because it does not know it’s there. Plain and simple it’s not been updated to know how to remove this threat. What I would wonder is why this threat was not blocked in the first place by them. If you had it installed and it got through then that is a clear sign your protection is lacking.

    Regards,

    Jacob

  • Anonymous

    i followed your instructions for vista/7 and found the file in c:\users\(username)\appdata\ it was called “defender” with a shield as an icon. i renamed it in safe mode then rebooted and deleted it. my computer is now virus free.

  • Anonymous

    I know that i am not supposed to do this but last night after this virus first poped up, i restored system to original settings, and it wen’t away. But today the virus poped up again, unfortunately i had only installed the free version of spyware doctor which does not block this. so i got on to this website and followed the steps in the video. there was no desktop icon so i skipped that, there was no start tab(?) icon so i skipped that, then i found the file in the appdata/roaming. but i deleted it without renaming it and removed it deleted it permanently from recycle bin. i also deleted the hkey file that was shown in the video. i scanned now with spyware doctor and nothing was found (paid version). BUT, the virus is still active.

  • Anonymous

    when I start up this program would pop up and it would only give me enough time to end it with the task manager

    my system is the acer mini lap top

    I installed microsoft security essentials free

    and I’m on step 1 tactic 2, but I cannot find the file anywhere besides the hidden icons which disappears after I end the task. how do I locate the actual file if it’s there? and what should I do to remove it?

  • Anonymous

    My OS is windows XP.

    I can’t start task manager, can’t use firefox, AVG won’t load, I can’t download/install new programs.

    The search feature won’t find defender.exe.

    Manually typing in the file path doesn’t work.

    Please help obi-wan kenobee, you are my only hope.

  • Anonymous

    i’m comment number 29. when i was infected with this virus and the webpage poped up requesting that i buy there program, i decided to contact support.
    this is the reply they sent me

    > Szymon F wrote:>> explain to me how to remove this program. i not want this anit-virus and it does not allow me to do anything on my laptop.
    >Hello Dear friend!I am really sorry that your computer has been infected. So, these pop-ups and are not the part of our product,they are a some kind of a virus from the internet and don’t belong to our program. It was done by our advertisingpartner and he’s already banned.This program will be self-removed in 6 days. There would be no problems after it is deleted.Also you can just set date and time setting in your windows control panel 6 days later according to current date. Then restart your system to disable program. let me know please if you have any other problems.Thanks and have a great day!

    i finally got rid of the virus though, I will return to this website in the future if i geet infected.

  • Jacob

    Don’t let them fool you. They are lying about their program.

    However it’s very interesting to hear about setting the clock forward 6 days. I will have to test this out with new rouges and see if that solution works.

    I thank you for your comment and taking the time to help others out.

  • Giles

    First can I just say what a fantastic resource you have created here. I spent an hour or so watching the video and reading all the entries. However, by way of contributing I thought it might be useful if I explained how I solved my XP Anti-Virus problem.

    I did spend a lot of time checking for the files you mentioned but I could find no physical install. Could this be because no one clicked on any of the pop up windows?

    On checking the Task Manager the file that seemed to be controlling the pop ups was snu.exe.

    It had effectively locked me out of and i couldn’t install anything to remove the malware.

    However, by stopping the *.exe file I did manage to set up a restore system run which did remove the infection.

    I am in the middle of a complete scan with Malwarebytes as I write this, but the mere fact that I could install the software seems to indicate a clear computer.

    Once again many thanks for all the work you have done it is a great resource..

  • Anonymous

    I run Vista.

    I watched your video on how to remove “Spyware Protection”. You are a truly wonderful person doing amazing work. I would have been left clueless had I not watched you tutorial.

    Contrary to your video, the executable actually did not leave an icon on my desktop, but i did have sucess in locating it by finding and following the path as you instructed.

    I cannot thank you enough.

  • Bruce

    My friend’s lap-top, running Windows 7, has been infected by Spyware protection. It is running Macafee but since I can’t open Macafee I don’t know the version.
    1 Task Manager is closed immediately
    2 Mozilla Firefox is closed immediately
    3 Regedit is closed immediately
    4 Users>Username>Application data is inaccessible even though I have changed permissions
    5 Defender does not appear in Windows>System32
    6 Scheduled tasks is closed immediately
    7 IE8 will open but will close if I try to download anything
    8 MalwareBytes closes immediately
    9 System Restore closes immediately
    How else can I a) find it and b) disenable it?

  • Jacob

    Follow the guide. Your issues are normal for anyone infected with this threat. Ask specif questions and be sure to let us know what step in the guide you are having troubles with

    Also as the guide shows. There is not folder called “Application data” in Windows 7, that is why you can not go into it. The guide clearly shows the correct folder you should go into. Please read the guide again

  • JoJo_Guzman

    do i have to pay because i dont have the money to pay for it

    • Anonymous

      pay for what?

RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.