Spyware Techie

Do you know what VirProtect is?

DESCRIPTION

VirProtect is a rogue anti-spyware program that may display fake system alerts getting a user to purchase a full version of the program. Clicking on this system alert may redirect you to the www.virprotect.com website to download a rogue anti-spyware program. Do not under any circumstances download or purchase this program since it is not a legitimate spyware removal program. VirProtect may also be installed from Zlob.Trojan.

Do you get a system alert message like this?

System Alert!
System has detected a number of active spyware applications that may impact the performance of your computer. Click the icon to get rid of unwanted spyware by download and up-to-date antispyware solution.

In non-techie terms: www.virprotect.com may look like a real website and offer what seems to be legitimate spyware removal software but it is not. Many websites are set up for the sole purpose of misleading a user into purchasing a product that may cause harm to your system. It is always a good practice to check the credentials of a products website before purchase. VirProtect.com website may resemble the image below.

www.VirProtect.com OVERVIEW
Name: vrp_setup.exe
Type: Rogue Anti-spyware program
Size: 3.11MB
From: dl1.virprotect.com
VirProtect .com WHOIS Information:
Registration Service Provided By: ESTDOMAINS INC
Contact: +1.3027224217
Website: http://www.estdomains.com
Domain Name: VIRPROTECT.COM
Registrant:
ODS ltd
Robyn Turner (turnrobyn@gmail.com)
Level 11 Toowong Tower
9 Sherwood Road
Toowong
null,Qld 4006
AU
Tel. +61.38761200
Creation Date: 23-Oct-2007
Expiration Date: 23-Oct-2008
Domain servers in listed order:
ns4.amigobore.com
ns3.amigobore.com
ns2.amigobore.com
ns1.amigobore.com

VirProtect Automatic Removal Instructions

This automatic removal method is for non-techie computer users. If you’re too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.

1. Download and save SmitFraudFix to your desktop.
2. Restart your computer in Safe Mode (how to do safe mode). Once the
   desktop appears, double click on the SmitfraudFix.exe on your desktop.
3. After the credits screen, you’ll see a menu. Select the option number 2, which is ‘Clean (safe mode recommended)’, and then
   press Enter to delete infect files.
4. SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.
5. Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
6. SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
   file?’ Answer by typing Y (Yes) and hit Enter.
7. Reboot your computer to complete the cleaning process.
8. After reboot, a Notepad screen may appear containing a log of all the files
   removed from your computer. If it doesn’t appear, a file will be created called
   rapport.txt in the root of your drive, (Local Disk C:).
9. Restart your computer in Safe Mode (how to do safe mode).
10. Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
    click Yes to confirm that you want all the items to go to the Recycle Bin.
11. Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
    you want all the items to go to the Recycle Bin.
12. Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.

VirProtect Manual Removal Instructions

This manual removal method is for techie computer users. VirProtect manual removal may be difficult and time consuming to remove. There’s no guarantee that VirProtect will be removed completely. So read the VirProtect removal steps carefully and good luck.

Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.

1. Uninstall VirProtect Program
   Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall VirProtect if found.

Right-click on the VirProtect folder and select Delete.

A message will appear saying ‘Are you sure you want to remove the folder VirProtect and move all its contents to the Recycle Bin?’, click Yes.
Another message will appear saying ‘Renaming, moving or deleting VirProtect could make some programs not work. Are you sure you want to do this?’, click Yes.

2. To remove VirProtect icons on your Desktop, drag and drop them to the Recycle Bin.

You’ve completed the VirProtect manual removal instructions!
I hope this article has helped you solve your VirProtect problems. If you want to contribute to this article, post your comment below.

Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There’s no guarantee that VirProtect will be completely removed from your computer. Seek professional help if your computer continues to experience problems.

Did You Find this Article Helpful?

Subscribe to Spyware Techie for more!

Or get latest articles to your via email:

Read Other Random Posts

• Trojan-Downloader.Matcash Removal Guide
• WinXSecurityCenter Removal Guide
• CNN.com Malspam Revolution: msnbc.com Breaking News Message
• Killspy.net Removal Guide