How to remove “Windows Protection Booster” virus (Removal Guide)

Problem

There’s something on my computer. I never heard of it before, it’s called Windows Protection Booster. Like always I was surfing the internet, and then, suddenly, my computer restarted, and after restart I found this new program on my computer. The most irritating part is that every 5 seconds it says “your computer is infected” and starts “virus scan” without my permission. I am sure this is fake, any idea how do I remove it? How to get rid of Windows Protection Booster? How to completely remove Windows Protection Booster from my computer?

Windows-Protection-Booster

Windows Protection Booster Infection Symptoms

Windows Protection Booster is a fake anti-spyware tool from the Rogue.FakeVimes family of computer infections. It was created by hackers with the only goal to pilfer money from trusting computer users. This program is classified as a rogue because it pretends to be an anti-virus program, but instead it displays fake scan results, reports of non-existing computer infections, and does not allow you to run your normal applications.

As mentioned before Windows Protection Booster will interfere with the normal operation of your computer and also it’s going to try and trick you into making a purchase using your credit card.
Windows Protection Booster’s messages appear in the form of fake Windows warnings on your computer. The objective is to scare the user with number of viruses on your computer (usually in the hundreds) and that this software has detected all of those viruses. To get rid of them there is no other way but to purchase the full-version of Windows Protection Booster. The price of the licensed program varies from $49.95 to $99.9, and also, during purchase procedure you will be submitting your personal information that may end up being a victim of credit card or identity fraud or theft. But you shouldn’t worry, there is no need to waste your money on something like this fake program.

Windows Protection Booster protects itself from being removed. The program will terminate any application you try to run on your computer. It does this to protect itself from being removed by antivirus programs and to scare you into thinking that all of your programs are being infected. The message that you will see when you attempt to run a program will look like this:

Firewall has blocked a program from accessing the Internet
c:\windows\system32\taskmanger.exe
is suspected to have infected your PC.
This type of virus intercepts entered data and transmits them
to a remote server.

When you see this fake message please ignore it as your programs are not infected and will continue work normally after Windows Protection Booster is removed from your system.

On the screenshots below you can see some examples of the interface, fake scanning results, fake alerts and pop-ups displayed by Windows Protection Booster virus. Remember, all of these warnings are fake and can be ignored.

Windows-Protection-Booster

 

windows-protection-booster-virus2

 

Solution

Windows Protection Booster is a typical rogue anti-spyware program. It is associated with a dangerous computer virus that attempts to violate your privacy and stealing your confidential information or harm your system. Sometimes it harasses you with endless pop-ups and fake notifications and forces you to perform a scan of the system and mislead you to pay for Windows Protection Booster. Sometimes a presence of Windows Protection Booster doesn’t indicate that your computer is infected. In any case, you should NOT perform scan or pay for this utility.

How to remove Windows Protection Booster (Virus Removal Guides)

On this page you will find an all-inclusive guide, which will help you to remove Windows Protection Booster virus. Below you can find three automatically methods to clean up an infected computer and one manual method for advanced users. Please keep in mind, in order to successfully clean your computer you have to follow the steps and perform them in the correct order. If you are unsure about something or in doubt at any point, please stop and ask for our assistance in the comments below.

Step 1. Stop Windows Protection Booster operation by entering valid activation key.
Step 2. Fixing your Windows system registry in order to remove Windows Protection Booster virus records.
Option 1. Removal of Adware Windows Protection Booster with Malwarebytes Anti-Malware
Option 2. Removal of Adware Windows Protection Booster with Emsisoft Anti-Malware
Option 3. Removal of Adware Windows Protection Booster with HitmanPro

Step 1. Stop Windows Protection Booster operation by entering valid activation key

1. Open Windows Protection Booster interface and find the question mark button, it should be somewhere in the right top corner. Click on it and then click on Register button. (Look on the image below)

booster_reg1

 

2. The Windows Protection Booster Registration window now should pop-up. Introduce the below registration key to activate this fake antivirus program. (Look on the image below)
Windows Protection Booster Product Key: 0W000-000B0-00T00-E0021

booster_reg2

 

3. After the registration is completed Windows Protection Booster should now allow Windows to startup, and you should be able to launch your programs.

Please bear in mind that introducing the above registration key will NOT remove Windows Protection Booster from your computer, instead it will just stop the scans and fake alerts so that you’ll be able to complete this removal guide without being interrupted by this infection.

Step 2. Fixing your Windows system registry in order to remove Windows Protection Booster virus records

Windows Protection Booster has invaded your system registry to launch itself before any application and to prevent you from running any other program. Follow the steps below to fix your system registry.

1. First you need to boot your computer in safe mode. For that you need to remove all floppy disks, CDs and DVDs, and then restart the computer. When the computer restarts, press and hold F8. You must press F8 before the Windows logo appears. Using the arrow keys select Advanced Boot Options and hit enter. After that select to start your computer in Safe Mode with Command Prompt. Command Prompt allows you to type and execute commands.

safemode1

2. When Command Prompt window appears, please type explorer.exe and then press Enter on your keyboard as shown on the image below.

safemode2

3. This command will launch Windows desktop. When the desktop appears feel free to close the Command Prompt window by clicking on the X in the right top corner of the window.

4. Make sure you are using a clean (non-infected) computer and download onto USB flash drive or burn to CD the program below to fix your Windows Registry:
REGFIX DOWNLOAD LINK (Clicking on this link will automatically start the download of the registry fix for the Windows Protection Booster virus).

5. Now you can plug in your USB flash drive or insert your CD into the infected computer. Go to your computer and open up the drive associated with your inserted media. You can access this drive by clicking on the Computer icon on your desktop or from the Start Menu.  Once you opened the drive, double-click on the regfix.reg file and allow the data to be merged when you are prompted. Once the data has been merged, you can click on the OK button and then remove the removable media from your computer. (Look on the image below).

regfix1

 

6. Please reboot your computer into the normal Windows mode and login to your infected account. Windows Protection Booster shouldn’t bother you anymore with it’s fake alerts since we registered it and fixed our system registry. Please keep in mind that the virus itself is still on your computer. When your computer is booted please perform a full system scan with Malwarebytes Anti-Malware or Emsisoft Anti-Malware or HitmanPro as described below:

Option 1. Removal of Windows Protection Booster with Malwarebytes Anti-Malware:

1.1. Download Malwarebytes Anti-Malware Free(click on the banner below), double click on it to start the installation process. Keep following the prompts to continue with the setup process and press Finish when it is completed.

download_mbytes

mbytes1

mbytes2

1.2. Virus Definition Updates – After the launch of Malwarebytes Anti-Malware the program may suggest you to update the virus definition database. However, if that didn’t happen we advise you to manually update the virus definition database. Follow the image below to proceed with updates.

mbytes3

mbytes4

mbytes5

1.3. On the Scanner tab, select “Perform full scan” option and then click on the Scan button, as you can see on the image below. Now Malwarebytes Anti-Malware will start scanning your computer for infections.

mbytes6

mbytes7

1.4. When the Malwarebytes scan will be completed, click on Show Result to see the list of threats that has been found.

mbytes8
1.5. After clicking on Show Results you will see the screen with all malware infections that Malwarebytes Anti-Malware has detected. Please note that the infections found may be different than what is shown on the image. Make sure all of the infections are selected and click on Remove Selected to clean up your computer.
mbytes9

Option 2. Removal of Windows Protection Booster with Emsisoft Anti-Malware:

2.1. Download Emsisoft Anti-Malware(click on the banner below), then double click on it to start the installation process. Read the license agreement and select “I accept the agreement” and click on install in order to continue setup. Keep following the prompts to continue with the setup process and press Finish when it is completed.

download_emsisoft

emsis1

2.2. After installation is completed EmniSoft Anti-Malware will be launched automaticaly. You will be prompted to choose between 30 days free trial period or order a full version. Choose your option and click Next.

emsis2

emsis3

2.3. Now Emsisoft Anti-Malware will begin to update it’s virus definitions and you will need to wait few minutes until the process is completed. In the dialog window you can see the progress of updating.

emsis4

emsis5

2.4. When the updates are completed you will be at screen asking if you want to enable PUPs (Potentially Unwanted Programs) detection. This option will help you to prevent a lot of problems in future. Select Yes and click on Next.

emsis6

2.5. Next step is to select the Deep Scan option and then click on the Scan button. The Deep Scan option allows the program to deeply scan your computer for any kind of infections.

emsis7

2.6. Now you will see the scan dialog box. It might take a few minutes but you are here to clean infections, it is worth the wait to make sure your computer is properly scanned. Please wait until the scan process is fully completed.

emsis8

2.7. When the scan has finished, you’ll be able to see the list of all infections that were found. Make sure you have selected all of the objects and click on Delete selected objects to delete them permanently or Quarantine selected objects if you are not sure about first option.

emsis9

2.8. Sometimes to delete the infection reboot might be required. Click OK to reboot the system. Emsisoft Anti-Malware will clean up all the infection from your computer during reboot process.

emsis10

Option 3. Removal of Windows Protection Booster with HitmanPro:

3.1. Download HitmanPro(click on the banner below), then double-click on it to start the program. Below you can find links to download the program for different versions of Windows, if you don’t know your Windows version we advise you to download 32-bit version of HitmanPro.

download_hitman32 download_hitman64hitman1

3.2. Now, after HitmanPro is launched you’ll need to follow the prompts (by clicking on the Next button) to perform a system scan.

hitman2

3.3. On the next screen make sure that option “Yes, create a copy of HitmanPro so I can regularly scan this computer (recommended)” is selected and press Next.

hitman3

3.4. HitmanPro will start scanning your computer and will search for any Adware or other malicious files as seen on the image below.

hitman43.5. Once the scan is done, you will see a screen with a list of the infected files that has been detected. Simply click on Next to remove these malicious files.

hitman5

3.6. You will be prompted to choose between free 30 days trial period or purchase the full version of the program. Click on Activate free license to continue with 30 days trial or click on Buy Now to purchase the full version of HitmanPro to protect your computer.

hitman6