Welcome to remove-malware.net

How to remove Windows Security Suite rogue anti-spyware

Malware Description:
Windows Security Suite (aka WindowsSecuritySuite) is a scareware program that hails from the same group of rogues as its predecessors called Malware Catcher 2009, Fast Antivirus 2009, Malware Destructor 2009. Windows Security Suite is usually installed through the use of auxiliary malicious applications such as trojans whose backdoor essence enables them to infiltrate a random computer without the users’s knowledge and consent. When Windows Security Suite is installed, it tends to issue exaggerated malware detection reports and run its bogus scanners that report loads of infections when through. The truth is – all the “parasites” detected by Windows Security Suite when it’s running on your PC are mostly legitimate and absolutely normal Windows files which are wrongfully labelled malicious. Windows Security Suite returns those fake scan results to attempt getting you to purchase its full commercial version to protect your cyber-environment against the reported malware. Therefore, it’s strongly advised to refrain from installing Windows Security Suite licensed software because it’s anything but legit antivirus program. When operating inside one’s system, Windows Security Suite interferes with the web browsing activity by redirecting the search results to insecure and misleading online resources that display multiple deceptive ads. In addition, Windows Security Suite is known to reconfigure the system registry so that a number of well-known legitimate security programs will be disabled in the context of accurate detection and removal of the rogue under consideration. Windows Security Suite may also trigger the following phony alerts: “Unauthorized remote connection!” and “Windows Security Suite Process Control” which also encourage the unsuspecting user to eventually install and purchase the license for this malicious product. It’s highly recommended to remove Windows Security Suite in order to rescue your system integrity and keep your privacy secure.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Windows Security Suite Free Scanner and Remover: Download Now

Windows Security Suite Fake Scanner Screenshot:

How to remove Windows Security Suite manually:
Manual removal of Windows Security Suite is feasible if you have sufficient expertise in working with program files, system processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Documents and Settings%\All Users\Application Data\345d567
• %Documents and Settings%\All Users\Application Data\345d567\WINSSSys
• %Documents and Settings%\All Users\Application Data\WINSSSys
• %Documents and Settings%\All Users\Application Data\345d567\26.mof
• %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
• %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
• %Documents and Settings%\All Users\Application Data\345d567\WI345d.exe
• %Documents and Settings%\All Users\Application Data\345d567\WINSS.ico
• %Documents and Settings%\All Users\Application Data\345d567\working.log
• %Documents and Settings%\All Users\Application Data\345d567\WINSSSys\vd952342.bd
• %Documents and Settings%\All Users\Application Data\WINSSSys\winss.cfg
• %UserProfile%\Application Data\Windows Security Suite
• %UserProfile%\Application Data\Windows Security Suite\cookies.sqlite
• %UserProfile%\Application Data\Windows Security Suite\Instructions.ini
• %UserProfile%\Desktop\Windows Security Suite.lnk
• %UserProfile%\Recent\ANTIGEN.drv
• %UserProfile%\Recent\CLSV.exe
• %UserProfile%\Recent\DBOLE.drv
• %UserProfile%\Recent\dudl.sys
• %UserProfile%\Recent\energy.dll
• %UserProfile%\Recent\grid.dll
• %UserProfile%\Recent\grid.sys
• %UserProfile%\Recent\kernel32.dll
• %UserProfile%\Recent\PE.dll
• %UserProfile%\Recent\PE.tmp
• %UserProfile%\Recent\runddl.dll
• %UserProfile%\Recent\SM.dll
• %UserProfile%\Recent\snl2w.exe
• %UserProfile%\Recent\std.exe
• %UserProfile%\Recent\tempdoc.dll
• %UserProfile%\Start Menu\Windows Security Suite.lnk
• %Program Files%\Mozilla Firefox\searchplugins\search.xml
• %UserProfile%\Start Menu\Programs\Windows Security Suite.lnk
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Security Suite.lnk

The associated registry entries to be removed are as follows:

• HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
• HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows Security Suite”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “698909210803″

Please, be informed that manual removal of Windows Security Suite is a cumbersome procedure and does not always ensure complete deletion of the malware, since some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Windows Security Suite which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove Malware Destructor 2009 rogue anti-spyware
How to remove Privacy Protection Suite rogue anti-spyware
How to remove Malwaresdestructor.com hijacker
How to remove Win-pc-defender.com hijacker