Windows Privacy Extension is a bogus and fake virus released by malware creators. Just like other scamwares it is also designed to make money for hackers using rogue tactics. This program is a threat for your PC but it will pretend to be an effective security tool.
Windows Privacy Extension is distributed through bad websites that drop it into security vulnerable computers. One its secret installation has done which is already made without user consent, “Windows Privacy Extension” will struggle to appears to be your anti-virus software. When you reboot your infected PC, Windows PrivacyExtension will come up on screen and will perform some fake tasks like its scanning your system for malwares. After a few minutes, it will generate a very scary report about your computer stating that your computer is in danger of serious virus threats. You will be told that some Identity theft attempts have blocked by Windows Privacy Extension. moreover it will display some fake IP Address to you as the hacker who attempted to steal your data. From now on, you will continuously get popup warnings from Windows Privacy Extension alerting about system security. After a while, it will display promotional offers, i.e, you could get rid of these viruses if you activate the full protection mode of Windows Privacy Extension software. If you try to get the full protection, you will be asked to pay registration fee for the full version op this program. Infact that is the target of Windows Privacy Extension that somehow trick people into paying for its useless license and registered version. If unfortunately a person buys this program, he gets no help from it but loses his money and time, and then this software will ruin his PC.
Please remember, Windows Privacy Extension is not a real program to help you protect your privacy and private stuff but it is a malicious program came to steal your money. Moreover, it can steal your private information like bank accounts, credit cards for misuse. This malware can also block you current anti-spyware program, it may block your several windows useful programs including task manager and registry editing tool REGEDIT. We recommend you to take an immediate action to clean your PC by removing Windows Privacy Extension virus as soon as possible.
How to uninstall Windows Privacy Extension virus manually:
To remove this virus manually, complete the following set of tasks. Do not forget to create a backup before getting started to the manual removal guide.
To prform manual removal steps, you may need to learn,
How to stop a process
How to delete registry entries
Stop Windows Privacy Extension processes:
Protector.exe
Disable Windows Privacy Extension DLL files:
npswf32.dll
Remove Windows Privacy Extension Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
Delete Windows Privacy Extension files:
%AppData%\Protector.exe
Auto Removal
To remove this virus Automatically, We suggest following tools:
Malware Bytes Anti-Malware (Download)
HitMan Pro Anti-Malware (Download)
