Remove System Doctor 2014

Remove System Doctor 2014

Removal Guide

System Doctor 2014 is a fake antivirus program that produce fake alert that there are several vulnerabilities are detected in the computer which System Doctor 2014 is installed. System Doctor 2014 installs into the computer and will configure itself to start automatically (in registry) when Windows boot. System Doctor 2014 will scan the computer and WILL SURELY detect many malwares in the computer. In fact, it is just a fake alert. The intention of System Doctor 2014 is to urge the user to register System Doctor 2014 by purchasing the full version of System Doctor 2014 so that to earn some money from the user. System Doctor 2014 cannot detect and remove any malware / virus / trojan.

System Doctor 2014 provide  fake features such as Scan PC, Quarantine, Updates, Log, Configuration, Memory Protection, File System, Anti-spyware, firewall etc. All of them cannot help protect the computer at all! 

System Doctor 2014 can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by System Doctor 2014 shown in the removal guide below. All files related to System Doctor 2014 must be deleted. 

System Doctor 2014 should be removed immediately!

System Doctor 2014 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SD2014" = "%AppData%\[random]\[random].exe"

Remove Folders and Files

%AppData%\[random]
%Desktop%\System Doctor 2014 support.url
%Desktop%\System Doctor 2014.lnk
%StartMenu%\Programs\System Doctor 2014

Remove Windows 7 Home Protection 2013

Remove Windows 7 Home Protection 2013

Removal Guide

Windows 7 Home Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Windows 7 Home Protection 2013 to purchase the full version of Windows 7 Home Protection 2013. Windows 7 Home Protection 2013 produces fake alert in order to cheat the user. Windows 7 Home Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Windows 7 Home Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Windows 7 Home Protection 2013 to remove all the malwares. Windows 7 Home Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Windows 7 Home Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Windows 7 Home Protection 2013 according to the removal guide stated below.

Windows 7 Home Protection 2013 should be removed immediately!

Windows 7 Home Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Windows 8 Home Protection 2013

Remove Windows 8 Home Protection 2013

Removal Guide

Windows 8 Home Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Windows 8 Home Protection 2013 to purchase the full version of Windows 8 Home Protection 2013. Windows 8 Home Protection 2013 produces fake alert in order to cheat the user. Windows 8 Home Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Windows 8 Home Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Windows 8 Home Protection 2013 to remove all the malwares. Windows 8 Home Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Windows 8 Home Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Windows 8 Home Protection 2013 according to the removal guide stated below.

Windows 8 Home Protection 2013 should be removed immediately!

Windows 8 Home Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Windows 7 Protection 2013

Remove Windows 7 Protection 2013

Removal Guide

Windows 7 Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Windows 7 Protection 2013 to purchase the full version of Windows 7 Protection 2013. Windows 7 Protection 2013 produces fake alert in order to cheat the user. Windows 7 Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Windows 7 Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Windows 7 Protection 2013 to remove all the malwares. Windows 7 Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Windows 7 Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Windows 7 Protection 2013 according to the removal guide stated below.

Windows 7 Protection 2013 should be removed immediately!

Windows 7 Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Windows 8 Protection 2013

Remove Windows 8 Protection 2013

Removal Guide

Windows 8 Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Windows 8 Protection 2013 to purchase the full version of Windows 8 Protection 2013. Windows 8 Protection 2013 produces fake alert in order to cheat the user. Windows 8 Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Windows 8 Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Windows 8 Protection 2013 to remove all the malwares. Windows 8 Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Windows 8 Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Windows 8 Protection 2013 according to the removal guide stated below.

Windows 8 Protection 2013 should be removed immediately!

Windows 8 Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Vista Home Protection 2013

Remove Vista Home Protection 2013

Removal Guide

Vista Home Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Vista Home Protection 2013 to purchase the full version of Vista Home Protection 2013. Vista Home Protection 2013 produces fake alert in order to cheat the user. Vista Home Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Vista Home Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Vista Home Protection 2013 to remove all the malwares. Vista Home Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Vista Home Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Vista Home Protection 2013 according to the removal guide stated below.

Vista Home Protection 2013 should be removed immediately!

Vista Home Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Win Vista Home Protection 2013

Remove Win Vista Home Protection 2013

Removal Guide

Win Vista Home Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Win Vista Home Protection 2013 to purchase the full version of Win Vista Home Protection 2013. Win Vista Home Protection 2013 produces fake alert in order to cheat the user. Win Vista Home Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Win Vista Home Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Win Vista Home Protection 2013 to remove all the malwares. Win Vista Home Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Win Vista Home Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Win Vista Home Protection 2013 according to the removal guide stated below.

Win Vista Home Protection 2013 should be removed immediately!

Win Vista Home Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Win XP Home Protection 2013

Remove Win XP Home Protection 2013

Removal Guide

Win XP Home Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Win XP Home Protection 2013 to purchase the full version of Win XP Home Protection 2013. Win XP Home Protection 2013 produces fake alert in order to cheat the user. Win XP Home Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Win XP Home Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Win XP Home Protection 2013 to remove all the malwares. Win XP Home Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Win XP Home Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Win XP Home Protection 2013 according to the removal guide stated below.

Win XP Home Protection 2013 should be removed immediately!

Win XP Home Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove XP Home Protection 2013

Remove XP Home Protection 2013

Removal Guide

XP Home Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by XP Home Protection 2013 to purchase the full version of XP Home Protection 2013. XP Home Protection 2013 produces fake alert in order to cheat the user. XP Home Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. XP Home Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of XP Home Protection 2013 to remove all the malwares. XP Home Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

XP Home Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by XP Home Protection 2013 according to the removal guide stated below.

XP Home Protection 2013 should be removed immediately!

XP Home Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Win 8 Home Protection 2013

Remove Win 8 Home Protection 2013

Removal Guide

Win 8 Home Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Win 8 Home Protection 2013 to purchase the full version of Win 8 Home Protection 2013. Win 8 Home Protection 2013 produces fake alert in order to cheat the user. Win 8 Home Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Win 8 Home Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Win 8 Home Protection 2013 to remove all the malwares. Win 8 Home Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Win 8 Home Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Win 8 Home Protection 2013 according to the removal guide stated below.

Win 8 Home Protection 2013 should be removed immediately!

Win 8 Home Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Win 8 Protection 2013

Remove Win 8 Protection 2013

Removal Guide

Win 8 Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Win 8 Protection 2013 to purchase the full version of Win 8 Protection 2013. Win 8 Protection 2013 produces fake alert in order to cheat the user. Win 8 Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Win 8 Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Win 8 Protection 2013 to remove all the malwares. Win 8 Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Win 8 Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Win 8 Protection 2013 according to the removal guide stated below.

Win 8 Protection 2013 should be removed immediately!

Win 8 Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Win XP Protection 2013

Remove Win XP Protection 2013

Removal Guide

Win XP Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Win XP Protection 2013 to purchase the full version of Win XP Protection 2013. Win XP Protection 2013 produces fake alert in order to cheat the user. Win XP Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Win XP Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Win XP Protection 2013 to remove all the malwares. Win XP Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Win XP Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Win XP Protection 2013 according to the removal guide stated below.

Win XP Protection 2013 should be removed immediately!

Win XP Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Vista Protection 2013

Remove Vista Protection 2013

Removal Guide

Vista Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Vista Protection 2013 to purchase the full version of Vista Protection 2013. Vista Protection 2013 produces fake alert in order to cheat the user. Vista Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Vista Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Vista Protection 2013 to remove all the malwares. Vista Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Vista Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Vista Protection 2013 according to the removal guide stated below.

Vista Protection 2013 should be removed immediately!

Vista Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove Win 7 Protection 2013

Remove Win 7 Protection 2013

Removal Guide

Win 7 Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by Win 7 Protection 2013 to purchase the full version of Win 7 Protection 2013. Win 7 Protection 2013 produces fake alert in order to cheat the user. Win 7 Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. Win 7 Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of Win 7 Protection 2013 to remove all the malwares. Win 7 Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

Win 7 Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by Win 7 Protection 2013 according to the removal guide stated below.

Win 7 Protection 2013 should be removed immediately!

Win 7 Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe

Remove XP Protection 2013

Remove XP Protection 2013

Removal Guide

XP Protection 2013 is a fake antivirus program which intend to urge the user whose computer is infected by XP Protection 2013 to purchase the full version of XP Protection 2013. XP Protection 2013 produces fake alert in order to cheat the user. XP Protection 2013 installs into the computer without the confirmation of the user and configure itself to start automatically when windows boot. XP Protection 2013 will then scan the computer and state that there are many malware in the computer and ask the user to purchase full version of XP Protection 2013 to remove all the malwares. XP Protection 2013 is highly likely to block genuine scanning software and hijack your web browser through a proxy server.

XP Protection 2013 can be remove by stopping the process hee.exe and remove the file by using Emsisoft HiJackFree. Then the user should remove the registries entries added and modified by XP Protection 2013 according to the removal guide stated below.

XP Protection 2013 should be removed immediately!

XP Protection 2013 Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "pezfile"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | IsolatedCommand = ""%1? %*"
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command | @ = ""%AppData%\hee.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open
HKEY_CURRENT_USER\Software\Classes\pezfile\shell
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\start
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\pezfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\pezfile

Remove Folders and Files
%AppData%\[random].exe