Personal Protector is another misleading security program that will conquer computer with the help of a Trojan and unscrupulous security websites. Personal Protector Trojan can penetrate a computer unknown to users by exploiting various software vulnerabilities found on the target system. Personal Protector also uses a rootkit technology which decrypts itself to the point that it will be unrecognized by legit antivirus programs as a threat. Once on the computer, it will instantly run its own version of virus scan and will alert user of numerous virus infections even though the computer was free of threats. This was done by Personal Protector to mislead user and be intimidated and later convince to buy the registered version to be able to clean the affected computer.
Always remember that before downloading or buying security programs, one must see to it that it has proven capability to fight and remove viruses and other sorts of threats. This was not seen on Personal Protector, its components were purely a simple executable files that can run a virus scan as if playing a video file. No database and components to remove virus and computer protection was found during security experts analysis. With this, Personal Protector was tagged as another rogue security application.
What are the Symptoms of Personal Protector Infection?
It will modify Windows Registry and add the following entries:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run “personalprotector”
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\RunOnce “suicide”
- HKEY_USERS\.DEFAULT\Printers\DevModePerUser
- HKEY_USERS\S-1-5-18\Printers\DevModePerUser
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Uninstall\Personal Protector
- HKEY_LOCAL_MACHINE\SOFTWARE\Personal Protector
The threat will drop the following malicious files:
- c:\Program Files\Personal Protector\base.wdb
- c:\Program Files\Personal Protector\baseadd.wdb
- c:\Program Files\Personal Protector\conf.wcf
- c:\Program Files\Personal Protector\personalprotector.exe
- c:\Program Files\Personal Protector\quarant.wdb
- c:\Program Files\Personal Protector\queue.wdb
- c:\Program Files\Personal Protector\un.exe
- c:\Program Files\Personal Protector\q
- c:\Documents and Settings\All Users\Microsoft PData\inetprovider.dll
- c:\WINDOWS\tempfile2.bat
How to Remove Personal Protector Manually
1. Restart your computer in SafeMode
– After Power-On the computer, just before Windows start, press F8
– From the selections, Select SafeMode
2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
– Click Start > Run
– Type in the field, regedit
– Navigate and look for the registry entries mentioned above and delete if necessary
3. Delete malicious files that the threat added:
– Base on the given location above, browse and delete the file
– If no location is given, click Start>Search> and search for the files.
– If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.
4. Scan computer with Antivirus Program
– Update antivirus program
– Scan computer and delete all detected threats.
How to Easily Remove Personal Protector
1. Download and run Removal Tool to remove Personal Protector
