A reliable security application will ensure the safety of your computer for sure. If you choose a genuine AV tool, it will warn you about system errors and problems. Moreover, your anti-spyware program will be able to detect computer threats and infected files. On the contrary, if you are tricked and decide to install a fake AV tool, the program will turn your system into a complete mess, and it will lead to many troubles and problems. This is the case with Windows Protection Master. This is a malicious tool that hackers have created. The only intention of this attacker is to penetrate into targeted computers, and mislead their users into thinking their machines are in danger and they are infected. Furthermore, Windows Protection Master will imitate the actions of a reliable security program and will try to trick the users into thinking they can rely on this useless tool to protect their computers from malicious attackers. Despite its reliable name, Windows Protection Master cannot protect your system and is not able to detect computer infections that are trying to penetrate into your machine.
Figure 1. Windows Protection Master screenshot
Windows Protection Master is reported to be a member of the Rogue.VirusDoctor family. As all the other members of this rogueware family, this attacker uses two ways to penetrate into targeted PCs. Windows Protection Master can use compromised web pages. If a user visits such a page, he will be offered a free system scan. After the online scan is completed, the user will be told that there are many compromised files on his PC, and he needs to download some file that is able to solve the problems. However, if the file is downloaded, it will automatically transfer the fake AV application Windows Protection Master to the PC of the user. The attacker will not inform the owner of the computer about its true nature and deceitful intentions. Windows Protection Master will not disclose its plan, and it will hide the truth about the services it can provide. There will be no problem for Windows Protection Master to enter into the system. Windows Protection Master does not need the approval of the user. Another way Windows Protection Master uses to gain access to targeted computers is via malicious web pages that can exploit vulnerabilities in programs that are running on targeted PCs. After the vulnerabilities are detected, they are used to transfer Windows Protection Master to the machine without the knowledge of its owner.
Windows Protection Master is loaded automatically on system start up. After that, the malicious attacker starts showing annoying messages that will not stop even if you are trying to close them. The messages will pop up again and again and will tell you that there are many system errors and problems. If these problems are not fixed, you may lose the information stored on your PC. Moreover, the whole system may crash. The warnings include the following information:
Warning! Spambot detected!
Attention! A spambot is sending viruses from your e-mail has been detected on your PC.
Yes, protect my PC and remove spambot now (Recommended)
Error
Keylogger activity detected. System information security is at risk.
It is recommended to activate protection and run a full system scan.
Torrent Alert
Recommended: Please use secure encrypted protocol for torrent links.
Torrent link detected!
Receiving this notification means that you have violated the copyright laws. Using Torrent for downloading movies and licensed software shall be prosecuted and you may be sued for cybercrime and breach of law under the SOPA legislation.
Please register your copy of the AV to activate anonymous data transfer and protocol through the torrent link.
Warning! Virus Detected
Threat detected: FTP Server
Infected file: C:\Windows\System32\dllcache\wmploc.dll
Meanwhile, the attacker will create many infected files. After that, the same files will be reported as threats in the scan that Windows Protection Master imitates. The attacker will make this fake scan of the system to make you believe that there are many infected files that need to be removed immediately. However, even if you try to delete the files, you will not be allowed to do that unless you buy the full version of Windows Protection Master.
Do not be tricked by any of these empty threats and remove Windows Protection Master as soon as you can.
*SpyHunter’s free scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter’s malware suite to remove the malware threats.