Windows Privacy Extension

Windows Privacy Extension Description

The suitably-titled Windows Privacy Extension, instead of being an independent program unto itself, can be considered a clone of other FakeVimes-based rogue anti-malware programs. As a faux security product, Windows Privacy Extension can display fake alerts and system scans, but Windows Privacy Extension’s real abilities at malware detection and removal are completely lacking.

SpywareRemove.com malware researchers also note that the probability of other attacks in any Windows Privacy Extension infection is also high and that these malfunctions can include browser redirects or even attacks against real security-related applications. Therefore, it should be conspicuously evident that Windows Privacy Extension must be deleted ASAP to ensure your PC’s continued well-being, although it’s recommended for you to use anti-malware software to delete Windows Privacy Extension and its system modifications.

Windows Privacy Extension: More of a Peril to Your Privacy Than Anything Else

Windows Privacy Extension, like all members of FakeVimes, pretends to be a general-purpose security and anti-malware product, even though all of its security-related features are hoaxes. System scans by Windows Privacy Extension always display Trojans and other PC threats without any attempt to corroborate with reality, and warning messages by Windows Privacy Extension will use various means to trick you into believing that your PC is under attack. Of course, the irony that your PC is under attack – by Windows Privacy Extension, which will not stop until you give in to its purchase requests or banish Windows Privacy Extension from your hard drive. SpywareRemove.com malware researchers recommend the latter, since criminals connected with scamware like Windows Privacy Extension are known for exploiting financial information (such as credit card numbers) in illegal and highly-damaging ways.

The fake security ‘features’ of Windows Privacy Extension, as noted above, can be considered its most obvious symptoms, but other symptoms that SpywareRemove.com malware analysts consider highly probable in any Windows Privacy Extension infection are also noted below:

Search engine hijacks that redirect you to untrustworthy, malicious or advertisement-based search engines (regardless of what brand of browser you may be using at the time).
Unrelated programs being blocked, such as Task Manager, the Registry Editor, the UAC or popular brands of anti-malware scanners. Windows Privacy Extension may also display pop-ups to convince you that the aforementioned applications have been compromised or damaged.
Registry-based system settings being changed in ways that make your PC vulnerable to attacks by other PC threats, particularly regarding file-downloading settings.

Wrenching Your Real Privacy Back from Windows Privacy Extension’s Grasp

As long as you avoid spending money on Windows Privacy Extension and remove Windows Privacy Extension as soon as possible, your PC shouldn’t suffer long-lasting harm from its attacks. SpywareRemove.com malware researchers recommend similar actions for all other PC threats from Windows Privacy Extension’s family, including Windows AntiHazard Center, Windows Performance Adviser, Total Anti Malware Protection, Best Antivirus Software, Windows Private Shield, Smart Internet Protection 2011, Windows Performance Catalyst, Windows Antivirus Rampart, Windows Activity Debugger, Windows Defence Counsel, Windows Interactive Safety, Windows Protection Master, Windows Efficiency Accelerator, Windows Pro Web Helper, Windows Internet Booster, Windows Protection Maintenance, Windows Secure Workstation, Windows Safety Toolkit, Smart Anti-Malware Protection, Windows Pro Rescuer, Windows Premium Defender, Windows Secure Workshop, Windows Shielding Utility, Windows Maintenance Guard, Windows Antivirus Machine, Additional Guard, Windows Warding System, Smart Internet Protection 2012, Antivirus Smart Protection, PC Live Guard, Internet Security Essentials, Windows Basic Antivirus, Windows Safety Maintenance, Personal Internet Security 2011, Live Enterprise Suite, Windows Guard Tools, Windows High-End Protection, Windows Advanced Security Center, Windows Smart Warden, Windows No-Risk Center, Windows Instant Scanner, Windows Security System, Windows Safety Series, Windows Safety Wizard, System Protection Tools, Windows Ultimate Safeguard, Extra Antivirus, Windows Software Keeper, Windows Malware Sleuth, Windows Premium Guard, Windows Home Patron, Best Malware Protection, Windows Proactive Safety, Enterprise Suite, CleanUp Antivirus, Strong Malware Defender, Windows Safety Manager, Windows Control Series, PrivacyGuard PRO, Fast Antivirus 2009, Volcano Security Suite, Windows Maintenance Suite, Windows Telemetry Center, Virus Doctor, Windows Ultimate Security Patch, Windows Process Director, Windows Secure Surfer, Windows Threats Destroyer, Windows Virtual Angel, Windows Tools Patch, Windows Software Saver, Windows Secure Web Patch, Windows Crucial Scanner, Windows PC Aid, XP Smart Security, Windows Firewall Constructor, Windows First-Class Protector, Windows Pro Safety Release, Windows Trouble Taker, Windows Interactive Security, Home Safety Essentials, Smart Security, Windows Daily Adviser, Windows Security Renewal, Windows Safety Checkpoint, Windows Pro Safety, Home Malware Cleaner, Windows Custom Management, Windows Defending Center, Windows Safety Module, Windows Turnkey Console, Windows Care Taker, Windows Profound Security, Windows Virtual Security, Windows Smart Partner, VirusSecurity, Windows Health Keeper, My Security Wall, Windows No-Risk Agent, Windows Custodian Utility, Windows Stability Guard, Windows AntiHazard Helper, Security Master AV, Windows ProSecurity Scanner, Windows Enterprise Defender, Windows Guard Solutions, Windows Pro Defence, Security Antivirus, Windows Abnormality Checker, Windows Active Guard, Windows Pro Solutions, Windows Virus Hunter, Windows Guardian Angel, Windows Virtual Firewall, Live PC Care, Smart Engine, Windows Antihazard Solution, Windows Be-on-Guard Edition, Keep Center Keeper, Windows Expert Series, Windows Security Suite, Windows Privacy Module, Windows Web Combat, Windows PRO Scanner, Personal Security Sentinel, Windows Debug Center, Windows Enterprise Suite, My Security Engine, Windows System Defender, Windows ProSecure Scanner, Windows Premium Console, Windows Web Commander, Windows Functionality Checker, Activate Ultimate Protection, Windows Active Defender, Windows Advanced Toolkit, Internet Security Suite, Windows Personal Doctor, Windows Multi Control System, Anti-Malware Lab, Windows Custom Safety, Windows Managing System, Smart Virus Eliminator, Windows Problems Stopper, Windows Antivirus Patch, My Security Shield, Windows Shield Tool, Windows Protection Unit, Windows Antivirus Care, Windows Advanced User Patch, Windows Privacy Counsel, Windows Safeguard Upgrade, Windows Antivirus Release, Windows Anti-Malware Patch, Windows Risk Minimizer, Windows Proprietary Advisor and Windows Sleek Performance. While purchasing Windows Privacy Extension’s registration is discouraged, using a free code for this process, such as ’0W000-000B0-00T00-E0020,’ is safe, and may even alleviate issues with removing Windows Privacy Extension.

As a routine part of its behavior, Windows Privacy Extension changes some Windows components, including the Registry. Since these changes can damage your OS if removed improperly, SpywareRemove.com malware research team encourages using anti-malware software for this purpose whenever it’s available.

Windows Privacy Extension Automatic Detection Tool (Recommended)

Is your PC infected with Windows Privacy Extension? To safely & quickly detect Windows Privacy Extension, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Windows Privacy Extension What happens if Windows Privacy Extension does not let you open SpyHunter or blocks the Internet?

Visual & GUI Characteristics

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	%APPDATA%\ Protector-yagp.exe	696
2	Windows Privacy Extension.lnk	658
3	npswf32.dll	N/A
4	Protector-[rnd].exe	N/A
5	%AppData%\Protector-[rnd].exe	N/A

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.

The following newly produced Registry Values are:
HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnHTTPSToHTTPRedirect" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegedit" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "ID" = 0HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "net" = "2012-2-17_2"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings "UID" = "rudbxijemb"HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Inspector"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe

Additional Information

The following messages's were detected:

#	Message
1	Error Software without a digital signature detected. Your system files are at risk. We strongly advise you to activate your protection.
2	Error There’s a suspicious software running on your PC. For more details, run a system file check.
3	Warning! Identity Theft attempt detected! Hidden connection IP: 210.1.58.100 Target: Microsoft corporation keys Your IP: 127.0.0.1