Windows Problems Stopper

Last Updated on Thursday, 26 July 2012 20:23 Saturday, 05 May 2012 14:25

Rogue - App

Here is the analysis report of a fake software by the name Windows Problems Stopper

%AppData%\NPSWF32.dll
%AppData%\Protector-qxl.exe
%AppData%\result.db
C:\windows\system32\d3d9caps.dat

(Full path for the short folder names)

This program creates a file Protector-####.exe,
# can be any random character or a number

There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of any of the files mentioned above, and after that, search the hard disk for other files created on that date or onward. See image

Necessary steps required to remove this virus program

• To remove processes created by the virus program from the Task Manager
• To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found
• To remove obsolete registry keys using CCleaner