Windows Premium Defender

Windows Premium Defender Description

Windows Premium Defender seemingly includes features that would make it a broader and more in-depth security program than even popular brands of PC security and anti-malware software, but SpywareRemove.com malware researchers resoundingly verify that these features are fraudulent and, at best, nonfunctional. As one of a multitude of possible variants for FakeVimes scamware, Windows Premium Defender should be considered a danger to your PC’s security rather than its guardian, particularly given that PC threats that are closely linked to Windows Premium Defender have been known to disable security applications and cause browser redirects. As an incentive to remove Windows Premium Defender with appropriate anti-malware software, fake warning messages and faux anti-malware scans are always likely to accompany Windows Premium Defender, as its way of making its fake security services seem needed.

Observing the Counterproductive Nature of Windows Premium Defender’s Guardianship

Examples of close relatives of Windows Premium Defender abound, and include those with similar brand names (such as Windows Premium Console and Windows Premium Guard) as well as those with more disparate naming schemes: Windows Basic Antivirus, Windows Interactive Safety, Windows Guard Solutions, Windows No-Risk Agent, Windows Protection Unit, Fast Antivirus 2009, Windows Safety Manager, Windows Security Suite, Antivirus Smart Protection, Windows Debug Center, Windows Safety Checkpoint, PrivacyGuard PRO, Security Antivirus, Best Antivirus Software, Windows Antivirus Machine, Windows Pro Defence, Additional Guard, Smart Security, Windows Multi Control System, Windows Privacy Module, Windows Virtual Security, Anti-Malware Lab, Windows Turnkey Console, Windows Stability Guard, Windows AntiHazard Helper, Windows Defence Counsel, Windows Warding System, Windows Daily Adviser, Smart Internet Protection 2012, Windows Pro Safety, Windows First-Class Protector, Enterprise Suite, Windows Protection Master, Windows Safety Maintenance, Extra Antivirus, CleanUp Antivirus, VirusSecurity, System Protection Tools, Windows Tools Patch, Windows Privacy Extension, Strong Malware Defender, Windows Guardian Angel, Windows Software Saver, Windows Advanced Security Center, Windows Ultimate Safeguard, Windows Profound Security, Windows Antivirus Care, Windows Safeguard Upgrade, Windows Virtual Firewall, Virus Doctor, Windows Software Keeper, My Security Shield, Home Malware Cleaner, Windows Enterprise Defender, Windows Process Director, Windows Efficiency Accelerator, Windows Malware Sleuth, Windows Internet Booster, Live Enterprise Suite, Windows Maintenance Suite, Windows Web Commander, Windows Home Patron, Windows Virtual Angel, Windows Enterprise Suite, Windows Active Defender, Windows Instant Scanner, Windows Interactive Security, Windows Virus Hunter, Windows Risk Minimizer, Windows Trouble Taker, PC Live Guard, Windows Sleek Performance, Smart Virus Eliminator, Windows Antihazard Solution, Windows Abnormality Checker, Windows Security Renewal, My Security Engine, Total Anti Malware Protection, Activate Ultimate Protection, Windows Secure Web Patch, Live PC Care, Windows Advanced User Patch, Windows Protection Maintenance, Windows System Defender, Windows Privacy Counsel, Windows Advanced Toolkit, Windows Secure Surfer, Windows Security System, Windows Smart Partner, Personal Internet Security 2011, Windows Performance Catalyst, Windows Problems Stopper, Smart Anti-Malware Protection, Windows ProSecurity Scanner, Windows Control Series, Windows Proprietary Advisor, Windows Functionality Checker, Windows Custodian Utility, Windows Shield Tool, Windows Defending Center, Keep Center Keeper, Windows Secure Workstation, Windows No-Risk Center, Windows Care Taker, Windows High-End Protection, Volcano Security Suite, Windows Safety Wizard, Windows Pro Safety Release, Internet Security Suite, Windows Firewall Constructor, Windows Guard Tools, Windows PC Aid, Windows Smart Warden, Windows Premium Guard, Windows Active Guard, Security Master AV, Windows Shielding Utility, Windows ProSecure Scanner, Windows Custom Management, Internet Security Essentials, Windows Activity Debugger, Windows Crucial Scanner, Windows Performance Adviser, Windows Safety Series, Smart Engine, Windows Proactive Safety, Home Safety Essentials, Windows Expert Series, Personal Security Sentinel, Windows Safety Module, Windows Pro Rescuer, Windows Premium Console, Windows PRO Scanner, XP Smart Security, Windows Telemetry Center, Windows Managing System, Windows Personal Doctor, Windows Antivirus Rampart, Windows Custom Safety, Windows Maintenance Guard, My Security Wall, Windows Pro Solutions, Windows Ultimate Security Patch, Windows Threats Destroyer, Windows Web Combat, Windows Antivirus Release, Windows Antivirus Patch, Windows Safety Toolkit, Windows Anti-Malware Patch, Smart Internet Protection 2011, Windows Health Keeper, Windows AntiHazard Center, Windows Secure Workshop, Windows Pro Web Helper, Windows Be-on-Guard Edition, Windows Private Shield and Best Malware Protection. As is also the case with Windows Premium Defender, all of these rogue anti-malware scanners are simply minor spinoffs of the same basic scam by the FakeVimes family. Common means of infection for Windows Premium Defender and similar PC threats include fake online scanners that request for you to download fake security software and Trojan downloaders that disguise themselves as media updates.

Although Windows Premium Defender, like all members of FakeVimes, will try to act like an anti-malware product that’s worth your money, SpywareRemove.com malware experts emphasize that all of Windows Premium Defender’s scans and pop-up alerts include fake security information.

Windows Premium Defender is likely to notify you about the presence of high-level PC threats, including keyloggers, banking trojans and rootkits, but these results won’t be confirmed by other types of security software – because Windows Premium Defender is fabricating them out of thin air. SpywareRemove.com malware researchers especially warn you to avoid spending money on Windows Premium Defender, which, despite its proclamations, is unable to detect or remove any of the infections that it claims are infesting your hard drive.

The Rest of Windows Premium Defender’s Questionable Defenses

Even though security alerts and similar types of fake security features remain Windows Premium Defender’s dominant features, Windows Premium Defender may also endanger your PC with other issues that can be considered more significant compromises of your security than mere pop-ups. SpywareRemove.com malware researchers have defined some particularly relevant attacks that Windows Premium Defender and its relatives have been guilty of utilizing, such as:

Search engine hijacks that alter your search results or redirect you to fake search sites. These sites may promote rogue anti-malware scanners like Windows Premium Defender or expose you to browser-based attacks that could install other PC threats.
Deleted Registry entries for a wide range of applications, particularly security-related ones (such as anti-malware scanners and firewall programs). This causes these programs to become inaccessible and may require that you restore or repair your Registry even after Windows Premium Defender is removed by appropriate software.
Registry settings that are changed to disable different security features. Windows Premium Defender also displays a marked emphasis for attacking baseline security features for Windows like the User Account Control (a feature that prompts the user when unusual or unauthorized system changes are about to be made).

Aliases

Generic Malware [Panda]FakeAV_s.EG [AVG]W32/Kryptik.AIK!tr [Fortinet]Trojan-Dropper.Win32.Dapato [Ikarus]a variant of Win32/Adware.WintionalityChecker.AI [ESET-NOD32]Trojan.Agent/Gen-FakeProtector [SUPERAntiSpyware]Rogue:Win32/FakePAV [Microsoft]TrojanDropper.Dapato.lqx [Jiangmin]Trojan-Dropper.Win32.Dapato!IK [Emsisoft]ApplicUnwnt.Win32.AdWare.WintionalityChecker.AK [Comodo]

More aliases (37)

Windows Premium Defender Automatic Detection Tool (Recommended)

Is your PC infected with Windows Premium Defender? To safely & quickly detect Windows Premium Defender, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Windows Premium Defender What happens if Windows Premium Defender does not let you open SpyHunter or blocks the Internet?

Visual & GUI Characteristics

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	%APPDATA%\ Protector-xsan.exe	73
2	%AppData%\NPSWF32.dll	N/A
3	%AppData%\result.db	N/A
4	%AppData%\1st$0l3th1s.cnf	N/A
5	Protector-[RANDOM 3 CHARACTERS].exe	N/A
6	Protector-[RANDOM 4 CHARACTERS].exe	N/A

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.

The following newly produced Registry Values are:
HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-7-13_7"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "cwhstknlsh"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorAdmin" = 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "ConsentPromptBehaviorUser" = 0HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = 0HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\ASProtectHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AntivirusPlus.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avpupd.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cssurf.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\homeav2010.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mcvsrte.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nvarch16.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Quick Heal.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sweep95.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\win-bugsfix.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wyvernworksfirewall.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"

Additional Information

The following messages's were detected:

#	Message
1	Error Keylogger activity detected. System information security is at risk. It is recommended to activate protection and run a full system scan.
2	Torrent Alert Recommended: Please use secure encrypted protocol for torrent links. Torrent link detected! Receiving this notifications means that you have violated the copyright laws. Using Torrent for downloading movies and licensed software shall be prosecuted and you may be sued for cybercrime and breach of law under the SOPA legislation.
3	Warning Firewall has blocked a program from accessing the Internet C:\program files\internet explorer\iexplore.exe is suspected to have infected your PC. This type of virus intercepts entered data and transmits them to a remote server.