Windows Protection Suite

[neilmc]

Hey, a teacher just brought in a laptop for me to look at, she keeps getting a message from windows protection suite saying her machine is infected. i have ran Nod32 and that has found 30 infections, but this windows protection suite finds 119. does any know if this protection suite genuine?

 

Cheers

[mehball]

Just a quick google and it shows this is spyware

 

windows protection suite - Google Search

[Iain]

Yep, it's fake anti-spyware. Had to clean this off a friends laptop the other day. Very easy to remove.

[neilmc]

Currently using Malwarebytes to try to remove it, is this the right thing to use?

[Iain]

That's what I used. I had to kill the Windows Protection Suite process in task manager before it fully got rid of it though (it was something like WI345d.exe - I can't remember the exact name sorry)

 

Iain.

[Haptic]

Im sure this hides in the registry also

[azrael78]

I love the eerie coincidence here... I hadn't heard of this 'Windows Protection Suite' until today... about an hour ago when my mum rang me in a total panic...

 

Of course, I'm at work and can't exactly deal with it but she was convinced that this 'Windows Protection Suite' was telling her the absolute gospel of truth and light - in that she had viruses, trojans and all manner of nasties EVERYWHERE.

 

Fortunately I've been around the block a few times with this sort of thing so I got her to shut the PC down until I got home.

 

We run NOD32 Smart Security v3, MBAS (MalwareBytes AntiSpyware) and Spybot SD just to be absolutely certain - so I'm not sure how it got in there, then again... the phrase "It just did it... I didn't touch it" springs to mind.

 

Peace.

 

Az