Automated removal:
It is critically important to remove Protector.exe, yet there might be a number of other threats to deal with. Without a doubt, presence of one infection on your PC increases the odds of having more than one threat, other things being equal, for every infection definitely weakens computer system.
The tool to get rid of Protector.exe takes the above consideration into account as it detects the infections through entire hard and removable memory submitted in order that it can delete the specified parasites. It is a multi-purpose solution to satisfy the variety of your computer protection needs. In the meantime, its ability to perform the extermination of rogue in question has been tested specifically, and empirical evidence available that it does cope with the task.
Protector.exe manual removal instructions:
Incorrect or incomplete deletion happens when one or more constituents of deleted rogue are omitted and/or harmless files and registry values are abolished instead. Such improper act rather harms than cures. If you stand for the manual procedure and is about to apply it, please completely delete the rogue in a strict accordance with the list below.
Remove Protector.exe files:
%AppData%\Inspector-[rnd].exe
%AppData%\Protector-[rnd].exe
Remove Protector.exe registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ERROR_PAGE_BYPASS_ZONE_CHECK_FOR_HTTPS_KB954312
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnHTTPSToHTTPRedirect” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegedit” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableRegistryTools” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Inspector”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “ID” = 0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “net” = “2012-2-17_2?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Settings “UID” = “rudbxijemb”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avp32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\_avpcc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ashDisp.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\divx.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mostat.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\platin.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tapinstall.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zapsetup3001.exe
source: http://removers.volyn.net/2012/07/05/remove-protector-exe-as-a-main-executable-of-rogue-antispyware-products/
