Friday, November 28, 2008

VirusProtectPro Ransomware

Removing VirusProtectPro
Categories: Ransomware
A cryptovirus, cryptotrojan or cryptoworm is a type of
malware that encrypts the data belonging to an individual on a computer,
demanding a ransom for its restoration.

The term ransomware is commonly used to describe such software,
although the field known as cryptovirology predates the term "ransomware".

This type of ransom attack can be accomplished by (for example) attaching
a specially crafted file/program to an e-mail message and sending this to the victim.

If the victim opens/executes the attachment, the program encrypts
a number of files on the victim's computer. A ransom note is then left behind for the victim.

The victim will be unable to open the encrypted files without the correct decryption key.
Once the ransom demanded in the ransom note is paid, the cracker may (or may not)
send the decryption key, enabling decryption of the "kidnapped" files.

VirusProtectPro Also known as:

[McAfee]VirusProtectPro;
[Other]VirusProtectPro

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\~nsu.tmp\Au_.exe
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.3.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.4.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.5.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.6.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.7.lnk
[%DESKTOP%]\VirusProtectPro 3.3.lnk
[%DESKTOP%]\VirusProtectPro 3.4.lnk
[%DESKTOP%]\VirusProtectPro 3.5.lnk
[%DESKTOP%]\VirusProtectPro 3.6.lnk
[%DESKTOP%]\VirusProtectPro 3.7.lnk
[%PROFILE_TEMP%]\VPPLanguage.ini
[%PROGRAM_FILES%]\VirusProtectPro 3.3\VirusProtectPro 3.3.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.4\VirusProtectPro 3.4.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.5\VirusProtectPro 3.5.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.6\VirusProtectPro 3.6.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.7\VirusProtectPro 3.7.exe
[%STARTMENU%]\VirusProtectPro 3.3.lnk
[%STARTMENU%]\VirusProtectPro 3.4.lnk
[%STARTMENU%]\VirusProtectPro 3.5.lnk
[%STARTMENU%]\VirusProtectPro 3.6.lnk
[%STARTMENU%]\VirusProtectPro 3.7.lnk
[%DESKTOP%]\VirusProtectPro 3.7.lnk
[%PROFILE_TEMP%]\~nsu.tmp\Au_.exe
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.3.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.4.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.5.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.6.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.7.lnk
[%DESKTOP%]\VirusProtectPro 3.3.lnk
[%DESKTOP%]\VirusProtectPro 3.4.lnk
[%DESKTOP%]\VirusProtectPro 3.5.lnk
[%DESKTOP%]\VirusProtectPro 3.6.lnk
[%DESKTOP%]\VirusProtectPro 3.7.lnk
[%PROFILE_TEMP%]\VPPLanguage.ini
[%PROGRAM_FILES%]\VirusProtectPro 3.3\VirusProtectPro 3.3.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.4\VirusProtectPro 3.4.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.5\VirusProtectPro 3.5.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.6\VirusProtectPro 3.6.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.7\VirusProtectPro 3.7.exe
[%STARTMENU%]\VirusProtectPro 3.3.lnk
[%STARTMENU%]\VirusProtectPro 3.4.lnk
[%STARTMENU%]\VirusProtectPro 3.5.lnk
[%STARTMENU%]\VirusProtectPro 3.6.lnk
[%STARTMENU%]\VirusProtectPro 3.7.lnk
[%DESKTOP%]\VirusProtectPro 3.7.lnk

How to detect VirusProtectPro:

Files:
[%PROFILE_TEMP%]\~nsu.tmp\Au_.exe
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.3.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.4.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.5.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.6.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.7.lnk
[%DESKTOP%]\VirusProtectPro 3.3.lnk
[%DESKTOP%]\VirusProtectPro 3.4.lnk
[%DESKTOP%]\VirusProtectPro 3.5.lnk
[%DESKTOP%]\VirusProtectPro 3.6.lnk
[%DESKTOP%]\VirusProtectPro 3.7.lnk
[%PROFILE_TEMP%]\VPPLanguage.ini
[%PROGRAM_FILES%]\VirusProtectPro 3.3\VirusProtectPro 3.3.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.4\VirusProtectPro 3.4.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.5\VirusProtectPro 3.5.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.6\VirusProtectPro 3.6.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.7\VirusProtectPro 3.7.exe
[%STARTMENU%]\VirusProtectPro 3.3.lnk
[%STARTMENU%]\VirusProtectPro 3.4.lnk
[%STARTMENU%]\VirusProtectPro 3.5.lnk
[%STARTMENU%]\VirusProtectPro 3.6.lnk
[%STARTMENU%]\VirusProtectPro 3.7.lnk
[%DESKTOP%]\VirusProtectPro 3.7.lnk
[%PROFILE_TEMP%]\~nsu.tmp\Au_.exe
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.3.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.4.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.5.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.6.lnk
[%APPDATA%]\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.7.lnk
[%DESKTOP%]\VirusProtectPro 3.3.lnk
[%DESKTOP%]\VirusProtectPro 3.4.lnk
[%DESKTOP%]\VirusProtectPro 3.5.lnk
[%DESKTOP%]\VirusProtectPro 3.6.lnk
[%DESKTOP%]\VirusProtectPro 3.7.lnk
[%PROFILE_TEMP%]\VPPLanguage.ini
[%PROGRAM_FILES%]\VirusProtectPro 3.3\VirusProtectPro 3.3.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.4\VirusProtectPro 3.4.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.5\VirusProtectPro 3.5.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.6\VirusProtectPro 3.6.exe
[%PROGRAM_FILES%]\VirusProtectPro 3.7\VirusProtectPro 3.7.exe
[%STARTMENU%]\VirusProtectPro 3.3.lnk
[%STARTMENU%]\VirusProtectPro 3.4.lnk
[%STARTMENU%]\VirusProtectPro 3.5.lnk
[%STARTMENU%]\VirusProtectPro 3.6.lnk
[%STARTMENU%]\VirusProtectPro 3.7.lnk
[%DESKTOP%]\VirusProtectPro 3.7.lnk

Folders:
[%PROGRAM_FILES%]\VirusProtectPro 3.7
[%COMMON_PROGRAMS%]\VirusProtectPro
[%COMMON_PROGRAMS%]\VirusProtectPro 3.7
[%PROGRAMS%]\VirusProtectPro
[%PROGRAMS%]\VirusProtectPro 3.3
[%PROGRAMS%]\VirusProtectPro 3.4
[%PROGRAMS%]\VirusProtectPro 3.5
[%PROGRAMS%]\VirusProtectPro 3.6
[%PROGRAMS%]\VirusProtectPro 3.7
[%PROGRAM_FILES%]\VirusProtectPro 3(2).6
[%PROGRAM_FILES%]\VirusProtectPro 3.3
[%PROGRAM_FILES%]\VirusProtectPro 3.4
[%PROGRAM_FILES%]\VirusProtectPro 3.5
[%PROGRAM_FILES%]\VirusProtectPro 3.6

Registry Keys:
HKEY_CLASSES_ROOT\CLSID\{45C2FDBE-1D46-B98E-F9A9-9D44B93A9D52}
HKEY_CLASSES_ROOT\Interface\{03F65A7B-6E49-4ACE-848B-4459DDBD3981}
HKEY_CLASSES_ROOT\Interface\{15125718-D196-47C9-8FBF-9889C0C85D67}
HKEY_CLASSES_ROOT\Interface\{21C40A12-3079-4A70-A715-8A44CE0DE829}
HKEY_CLASSES_ROOT\Interface\{2A3E745F-1EAE-441F-A5D5-E53C909CEEC1}
HKEY_CLASSES_ROOT\Interface\{2F6A3DCF-D68F-4663-8C25-312BCDBE4D47}
HKEY_CLASSES_ROOT\Interface\{48129B70-2F29-4DBA-A499-BEB1A1554E10}
HKEY_CLASSES_ROOT\Interface\{484E9A1B-C631-47F3-9BC0-F752CDAAFB9A}
HKEY_CLASSES_ROOT\Interface\{A1886D5E-3508-4109-A8A0-F045AA86F3A3}
HKEY_CLASSES_ROOT\Interface\{A2817460-5C53-4B41-8D01-D3EF255DD41E}
HKEY_CLASSES_ROOT\Interface\{AEEA2138-2168-449E-B995-B56612EEF65E}
HKEY_CLASSES_ROOT\Interface\{AEFD40BB-03E3-4C66-ABFB-B5720ACB833E}
HKEY_CLASSES_ROOT\Interface\{B9C7A624-88E3-4DFA-8D56-438B10BC0149}
HKEY_CLASSES_ROOT\Interface\{D21FBDCE-EF01-417C-A1A1-C1EEDB8D5DB6}
HKEY_CLASSES_ROOT\Interface\{EBA2671E-29BF-42D8-B17E-AB5315CC73C5}
HKEY_CLASSES_ROOT\Interface\{F105F0C9-50E2-44FA-B3EC-92CA7BFE0C0D}
HKEY_CLASSES_ROOT\Interface\{F664EA90-9B91-4825-9B51-5635AC38CCA6}
HKEY_CLASSES_ROOT\TypeLib\{6D7F9517-F134-45E3-BF2E-73414FF15CA1}
HKEY_CLASSES_ROOT\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}
HKEY_CLASSES_ROOT\CLSID\{cfda6372-043c-48d2-ba3c-7bfe1cf71854}
HKEY_CLASSES_ROOT\Interface\{00628C22-6886-439B-AA2E-3639367F02A0}
HKEY_CLASSES_ROOT\Interface\{02910A3C-5D77-4A3E-8A13-FDF81AC7FECD}
HKEY_CLASSES_ROOT\Interface\{0485B9A3-61D4-40A9-82EE-5B8B6BD51A58}
HKEY_CLASSES_ROOT\Interface\{07420914-E5A0-451E-BFD4-AA1B799D39AD}
HKEY_CLASSES_ROOT\Interface\{0A8C61AE-9639-4E4D-AF61-25B0CE935EAB}
HKEY_CLASSES_ROOT\Interface\{0B6C7539-C6D5-4DDE-9632-184F421EF8D7}
HKEY_CLASSES_ROOT\Interface\{14B512A9-25CF-4C90-AE5F-418689DF0A8D}
HKEY_CLASSES_ROOT\Interface\{164913B3-FCDE-45B5-8901-1750F4E3119E}
HKEY_CLASSES_ROOT\Interface\{1BA582C8-6240-4DC4-BB8E-1B764134A47B}
HKEY_CLASSES_ROOT\Interface\{1D52BB09-465C-4AA4-9FBD-71D1690CAED3}
HKEY_CLASSES_ROOT\Interface\{24998748-6E8A-40D1-AA97-E9952EE9ED18}
HKEY_CLASSES_ROOT\Interface\{287FFE0C-15D0-4BFD-BAA9-0582C6361BBB}
HKEY_CLASSES_ROOT\Interface\{29143580-A3E7-4AFB-A8EF-B88F3B56C5A3}
HKEY_CLASSES_ROOT\Interface\{365036EB-87C2-4627-8FBC-EF6E9E8DA5C2}
HKEY_CLASSES_ROOT\Interface\{39D23F6A-E2DE-4F5D-9118-ECDFAAE47E9C}
HKEY_CLASSES_ROOT\Interface\{3B334543-06C2-4B5F-B7CB-8028A4570B39}
HKEY_CLASSES_ROOT\Interface\{3DE68A1C-09C2-4724-BB80-CB5AAFB96D99}
HKEY_CLASSES_ROOT\Interface\{3E79A538-7998-4BB7-B8A7-0E12243D7A99}
HKEY_CLASSES_ROOT\Interface\{3EB2D5E5-AB7C-46DB-950E-878CF812AA1C}
HKEY_CLASSES_ROOT\Interface\{42348314-FC64-4B2E-B314-3F872C321B87}
HKEY_CLASSES_ROOT\Interface\{45973D31-5CE3-4503-BC81-25E525119C48}
HKEY_CLASSES_ROOT\Interface\{46D4D563-1C43-4CEE-AF98-471385F2BC42}
HKEY_CLASSES_ROOT\Interface\{4A2C9DEF-83EB-4575-AD6C-2377FEFC5122}
HKEY_CLASSES_ROOT\Interface\{5596A310-2E54-4B75-ADA3-7EE0AD10E228}
HKEY_CLASSES_ROOT\Interface\{56943D7C-2283-4D73-B2B1-46173B4844B4}
HKEY_CLASSES_ROOT\Interface\{58BD1E88-EFEE-404E-BE17-DF639B57CB56}
HKEY_CLASSES_ROOT\Interface\{5C17F7D3-8460-4488-84EB-986A38BEDD2D}
HKEY_CLASSES_ROOT\Interface\{5CAEB087-AF31-494D-842D-39CF1C7ADADE}
HKEY_CLASSES_ROOT\Interface\{5DF8C005-6E2E-4BD6-A765-304A8E550ECE}
HKEY_CLASSES_ROOT\Interface\{60659361-1C5F-4FA7-AEB0-F39DF2547122}
HKEY_CLASSES_ROOT\Interface\{64D6666F-B95E-4048-9FA5-F68B094EA030}
HKEY_CLASSES_ROOT\Interface\{64D947B2-5505-4347-80A5-E28EEBE38F2A}
HKEY_CLASSES_ROOT\Interface\{69B73AA0-CA0C-4BE6-9811-EB0D951B5B99}
HKEY_CLASSES_ROOT\Interface\{6A97A178-3E84-45AF-8F28-982C22E9A49D}
HKEY_CLASSES_ROOT\Interface\{71C9109D-EB8D-49B9-9211-1CBE8A25A9AA}
HKEY_CLASSES_ROOT\Interface\{71DF187C-DC99-4A35-BDB2-C099821A435D}
HKEY_CLASSES_ROOT\Interface\{720B32BB-73D5-4551-B743-986224487121}
HKEY_CLASSES_ROOT\Interface\{72A238C6-F6A8-41D3-90FD-95F31F02FB33}
HKEY_CLASSES_ROOT\Interface\{74DF3F5E-99D7-4F4D-81C3-95201D4CDA88}
HKEY_CLASSES_ROOT\Interface\{75F32B07-D45F-4D5B-9266-3863C65D5B29}
HKEY_CLASSES_ROOT\Interface\{76C8C569-C4B8-4E0C-AE87-E1166D7FE005}
HKEY_CLASSES_ROOT\Interface\{77345588-AB75-4CDA-873F-AAE78C01EFCD}
HKEY_CLASSES_ROOT\Interface\{79E77B74-D820-4E39-802F-084F9DDCE038}
HKEY_CLASSES_ROOT\Interface\{7D9351B3-4EBE-4F8F-981E-9AF90BA99F54}
HKEY_CLASSES_ROOT\Interface\{7E22E1D0-5AF8-4FB8-A635-BD31B3308C71}
HKEY_CLASSES_ROOT\Interface\{821A05ED-BB06-4444-A1E0-F0AB21FF626D}
HKEY_CLASSES_ROOT\Interface\{84037416-6A70-46E5-9216-CDCC7E2513E7}
HKEY_CLASSES_ROOT\Interface\{886BACAE-E094-4BDE-912E-99C3A3DDD122}
HKEY_CLASSES_ROOT\Interface\{8D3C0252-8850-440E-A386-4A0159C8A4DD}
HKEY_CLASSES_ROOT\Interface\{8F290589-DB12-447F-8F38-D24653CE9F13}
HKEY_CLASSES_ROOT\Interface\{8F7AFA67-ADC0-4227-B799-34F7800EBC96}
HKEY_CLASSES_ROOT\Interface\{91478017-FF82-4C5D-9FFF-7801F8D99CCC}
HKEY_CLASSES_ROOT\Interface\{94E14C33-2473-4185-9FA0-3D881BDB5C0B}
HKEY_CLASSES_ROOT\Interface\{95D963D7-86E3-434E-BFF6-FCDDEA5F9F24}
HKEY_CLASSES_ROOT\Interface\{9B8BE22F-B2BB-472B-8959-C0828C0ADDC7}
HKEY_CLASSES_ROOT\Interface\{9CD68722-9A43-42E4-BD01-2DE85D9CB565}
HKEY_CLASSES_ROOT\Interface\{9DC10DE5-5104-4554-ACA0-D9F2D146CD4C}
HKEY_CLASSES_ROOT\Interface\{9F9C8CF3-EB4A-4851-A4F6-2370F5BC79EE}
HKEY_CLASSES_ROOT\Interface\{A140FE51-3136-4E0D-AFDA-1313B30ADFEF}
HKEY_CLASSES_ROOT\Interface\{A8502478-83BC-48DB-9937-6EEB77CED41E}
HKEY_CLASSES_ROOT\Interface\{AF1B7AB6-9715-472D-B469-74DE8D030EB6}
HKEY_CLASSES_ROOT\Interface\{B1B9C911-CA24-4E1E-9F56-838486218327}
HKEY_CLASSES_ROOT\Interface\{B41DF4F9-0191-46E6-8107-16634FBC7F3C}
HKEY_CLASSES_ROOT\Interface\{B56ED873-C3D3-4202-9EF8-FB31DEE2C207}
HKEY_CLASSES_ROOT\Interface\{BAD16EE0-5134-4DC2-BD33-46A557C93D36}
HKEY_CLASSES_ROOT\Interface\{BB3EBAF2-F4C4-4B66-9A98-EED3B70D1BB3}
HKEY_CLASSES_ROOT\Interface\{BE1C526E-CCCC-449C-A9CB-691B8C5E2769}
HKEY_CLASSES_ROOT\Interface\{BE465556-F79D-476F-9457-74E49F8F400A}
HKEY_CLASSES_ROOT\Interface\{BEB46F7E-CF37-4E8F-BA48-D96F1A434224}
HKEY_CLASSES_ROOT\Interface\{C254C9C5-DE04-49F1-9FC1-72EF4F7F1F6C}
HKEY_CLASSES_ROOT\Interface\{C5CC0894-AD1E-47AD-9265-0F463AE30508}
HKEY_CLASSES_ROOT\Interface\{C7604D71-CD16-4976-9383-D24B6FAD052E}
HKEY_CLASSES_ROOT\Interface\{C78E49C0-AB82-4C79-A189-F1E34980643B}
HKEY_CLASSES_ROOT\Interface\{CA91A4F1-3DC6-4D10-8AE3-8545E86D9DB8}
HKEY_CLASSES_ROOT\Interface\{D0E42329-DCA9-4825-B87D-04B789BBB169}
HKEY_CLASSES_ROOT\Interface\{D2315CDD-4F9A-4DDA-8671-252465FF0B5D}
HKEY_CLASSES_ROOT\Interface\{D2A0598F-FBC4-4721-BC85-F75C0712C100}
HKEY_CLASSES_ROOT\Interface\{D42CF3BB-E79E-4C0B-B434-6841CA9C4593}
HKEY_CLASSES_ROOT\Interface\{D8C36036-2E41-4CE0-9351-99087DD28A29}
HKEY_CLASSES_ROOT\Interface\{D8DFA789-47D3-4197-B187-23AE2D7DCF6A}
HKEY_CLASSES_ROOT\Interface\{D92E0D32-8D1B-4B8B-AF26-0676C5158ADA}
HKEY_CLASSES_ROOT\Interface\{E0277D0D-43C7-4ECA-B8C4-545A2E71485B}
HKEY_CLASSES_ROOT\Interface\{E082EF71-40AF-4A4E-B036-BB773F450B53}
HKEY_CLASSES_ROOT\Interface\{E60A0F09-DD6B-4343-84B0-C33B946D5A9C}
HKEY_CLASSES_ROOT\Interface\{E6369BCA-E4FA-4497-89C5-ECF9268B64B1}
HKEY_CLASSES_ROOT\Interface\{E7B2831E-A25A-430B-B3E3-3D414F9C4288}
HKEY_CLASSES_ROOT\Interface\{EA166DBF-EAC4-4D33-B48D-A40B8C8FDEC1}
HKEY_CLASSES_ROOT\Interface\{EAB5EB70-E2F1-4ADA-B033-151A71B9AA3F}
HKEY_CLASSES_ROOT\Interface\{EC6671FE-7062-4F26-8383-4B887C4CB50B}
HKEY_CLASSES_ROOT\Interface\{EDC652FF-2EA2-4E46-8849-D9041B77B88E}
HKEY_CLASSES_ROOT\Interface\{F040E242-BAD6-46F7-A787-D3AB811E5BC3}
HKEY_CLASSES_ROOT\Interface\{F0ED2F90-DE03-46AD-97C1-709E5A49422C}
HKEY_CLASSES_ROOT\Interface\{FC8DB863-22BC-4382-AC7A-96FABFD95BB8}
HKEY_CLASSES_ROOT\Interface\{FF442B5E-B5C0-4469-85C8-4B0B2A579EE9}
HKEY_CLASSES_ROOT\TypeLib\{049FECE3-18C7-4023-A1BE-CFAA2C4EE387}
HKEY_CLASSES_ROOT\TypeLib\{40331B9F-75E5-4E1E-B511-5AA6638B9ADE}
HKEY_CLASSES_ROOT\TypeLib\{6D88033C-6FD8-4374-9532-7EA301DF08AE}
HKEY_CLASSES_ROOT\TypeLib\{795175C7-3F75-4F45-AB6C-4FFE32A85BCB}
HKEY_CLASSES_ROOT\TypeLib\{8E9D2F33-4585-4404-AA57-15B2B03707F4}
HKEY_CLASSES_ROOT\TypeLib\{CD3A8ECE-6016-469E-9964-C479F9157BCC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{45C2FDBE-1D46-B98E-F9A9-9D44B93A9D52}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa6d4f53-4c8d-4549-84d2-02d584acc4e9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00628C22-6886-439B-AA2E-3639367F02A0}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07420914-E5A0-451E-BFD4-AA1B799D39AD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0B6C7539-C6D5-4DDE-9632-184F421EF8D7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{14B512A9-25CF-4C90-AE5F-418689DF0A8D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{164913B3-FCDE-45B5-8901-1750F4E3119E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D52BB09-465C-4AA4-9FBD-71D1690CAED3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{24998748-6E8A-40D1-AA97-E9952EE9ED18}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{287FFE0C-15D0-4BFD-BAA9-0582C6361BBB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{365036EB-87C2-4627-8FBC-EF6E9E8DA5C2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{39D23F6A-E2DE-4F5D-9118-ECDFAAE47E9C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3B334543-06C2-4B5F-B7CB-8028A4570B39}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3E79A538-7998-4BB7-B8A7-0E12243D7A99}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{42348314-FC64-4B2E-B314-3F872C321B87}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{45973D31-5CE3-4503-BC81-25E525119C48}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46D4D563-1C43-4CEE-AF98-471385F2BC42}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5596A310-2E54-4B75-ADA3-7EE0AD10E228}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{58BD1E88-EFEE-404E-BE17-DF639B57CB56}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5C17F7D3-8460-4488-84EB-986A38BEDD2D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64D6666F-B95E-4048-9FA5-F68B094EA030}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64D947B2-5505-4347-80A5-E28EEBE38F2A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{69B73AA0-CA0C-4BE6-9811-EB0D951B5B99}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{71DF187C-DC99-4A35-BDB2-C099821A435D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{74DF3F5E-99D7-4F4D-81C3-95201D4CDA88}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{77345588-AB75-4CDA-873F-AAE78C01EFCD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8D3C0252-8850-440E-A386-4A0159C8A4DD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{91478017-FF82-4C5D-9FFF-7801F8D99CCC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9B8BE22F-B2BB-472B-8959-C0828C0ADDC7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9CD68722-9A43-42E4-BD01-2DE85D9CB565}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9F9C8CF3-EB4A-4851-A4F6-2370F5BC79EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A8502478-83BC-48DB-9937-6EEB77CED41E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF1B7AB6-9715-472D-B469-74DE8D030EB6}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B1B9C911-CA24-4E1E-9F56-838486218327}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B56ED873-C3D3-4202-9EF8-FB31DEE2C207}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BB3EBAF2-F4C4-4B66-9A98-EED3B70D1BB3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BEB46F7E-CF37-4E8F-BA48-D96F1A434224}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C5CC0894-AD1E-47AD-9265-0F463AE30508}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C7604D71-CD16-4976-9383-D24B6FAD052E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C78E49C0-AB82-4C79-A189-F1E34980643B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D2315CDD-4F9A-4DDA-8671-252465FF0B5D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D2A0598F-FBC4-4721-BC85-F75C0712C100}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D42CF3BB-E79E-4C0B-B434-6841CA9C4593}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D8C36036-2E41-4CE0-9351-99087DD28A29}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E60A0F09-DD6B-4343-84B0-C33B946D5A9C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6369BCA-E4FA-4497-89C5-ECF9268B64B1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E7B2831E-A25A-430B-B3E3-3D414F9C4288}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EDC652FF-2EA2-4E46-8849-D9041B77B88E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F040E242-BAD6-46F7-A787-D3AB811E5BC3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FF442B5E-B5C0-4469-85C8-4B0B2A579EE9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{049FECE3-18C7-4023-A1BE-CFAA2C4EE387}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6D88033C-6FD8-4374-9532-7EA301DF08AE}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CD3A8ECE-6016-469E-9964-C479F9157BCC}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.3.exe 3.3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.4.exe 3.4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.5.exe 3.5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.6.exe 3.6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusProtectPro 3.7.exe 3.7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusProtectPro 3.3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusProtectPro 3.4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusProtectPro 3.5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusProtectPro 3.6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusProtectPro 3.7
HKEY_LOCAL_MACHINE\SOFTWARE\VirusProtectPro 3.3
HKEY_LOCAL_MACHINE\SOFTWARE\VirusProtectPro 3.4
HKEY_LOCAL_MACHINE\SOFTWARE\VirusProtectPro 3.5
HKEY_LOCAL_MACHINE\SOFTWARE\VirusProtectPro 3.6
HKEY_LOCAL_MACHINE\SOFTWARE\VirusProtectPro 3.7
HKEY_CLASSES_ROOT\clsid\{45c2fdbe-1d46-b98e-f9a9-9d44b93a9d52}
HKEY_CLASSES_ROOT\interface\{03f65a7b-6e49-4ace-848b-4459ddbd3981}
HKEY_CLASSES_ROOT\interface\{15125718-d196-47c9-8fbf-9889c0c85d67}
HKEY_CLASSES_ROOT\interface\{21c40a12-3079-4a70-a715-8a44ce0de829}
HKEY_CLASSES_ROOT\interface\{2a3e745f-1eae-441f-a5d5-e53c909ceec1}
HKEY_CLASSES_ROOT\interface\{2f6a3dcf-d68f-4663-8c25-312bcdbe4d47}
HKEY_CLASSES_ROOT\interface\{48129b70-2f29-4dba-a499-beb1a1554e10}
HKEY_CLASSES_ROOT\interface\{484e9a1b-c631-47f3-9bc0-f752cdaafb9a}
HKEY_CLASSES_ROOT\interface\{a1886d5e-3508-4109-a8a0-f045aa86f3a3}
HKEY_CLASSES_ROOT\interface\{a2817460-5c53-4b41-8d01-d3ef255dd41e}
HKEY_CLASSES_ROOT\interface\{aeea2138-2168-449e-b995-b56612eef65e}
HKEY_CLASSES_ROOT\interface\{aefd40bb-03e3-4c66-abfb-b5720acb833e}
HKEY_CLASSES_ROOT\interface\{b9c7a624-88e3-4dfa-8d56-438b10bc0149}
HKEY_CLASSES_ROOT\interface\{d21fbdce-ef01-417c-a1a1-c1eedb8d5db6}
HKEY_CLASSES_ROOT\interface\{eba2671e-29bf-42d8-b17e-ab5315cc73c5}
HKEY_CLASSES_ROOT\interface\{f105f0c9-50e2-44fa-b3ec-92ca7bfe0c0d}
HKEY_CLASSES_ROOT\interface\{f664ea90-9b91-4825-9b51-5635ac38cca6}
HKEY_CLASSES_ROOT\typelib\{6d7f9517-f134-45e3-bf2e-73414ff15ca1}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app paths\virusprotectpro 3.7.exe 3.7
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\virusprotectpro 3.7
HKEY_LOCAL_MACHINE\software\virusprotectpro 3.7

Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing VirusProtectPro:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
W95.Segax Trojan Cleaner
Addictive Adware Removal

No comments: