The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Windows Police Pro - input please

    Discussion in 'Security and Anti-Virus Software' started by hankaaron57, Aug 31, 2009.

  1. hankaaron57

    hankaaron57 Go BIG or go HOME

    Reputations:
    534
    Messages:
    1,642
    Likes Received:
    2
    Trophy Points:
    56
    So, I have Windows Police Pro on my computer. It appears to be a combination of a rootkit and rogue antivirus software. McAfee was running, but wasn't working, so that's how I got it. Really just scared me - it loaded up after a couple hours of playing a Steam game - minimized my game for me to tell me it's running and stuff. I was perusing pornography websites a couple hours beforehand, so I'm going to guess that's where the program came from.

    In any event, the program is pretty awful. I deleted a folder of it from C:/Program Files, but it appears to be in the registry and system32 folder still. I searched for windows police pro, desote.exe, bsinit.exe files as per a google search telling me these are common names it manifests itself. I restarted in Safe mode several times to do more system searches, and of course it made System Restore eff itself in the butt and all my prior restore points are gone, so that's out of the question. I have an old Acronis Image of my drive saved, but I really don't want to have to do that because it's outdated, and formatting is also out of the question because I'd lose too much good data, and I'm out of room on my external drives to currently back up the software on here now, so basically my only option is to arduously save my system as is and delete all the files associated with this program.

    It's to the point now where when I double-click any file/shortcut, it says: "This file does not have a program associated with it for performing this action. Create an association in the Folder Options control panel." What does this mean? Well, I can't run CCleaner like I planned; McAfee just stopped working entirely; I can't access Disk Defragmenter or System restore, OR Regedit.exe now. The only reason I got onto internet explorer and thusly this website is because I double-clicked an IE shortcut to a random website on my desktop. Also, when I open a link or type in a URL, I get the program popping up talking about fake viruses/trojan attacks and taking me to the Windows Police Pro website to buy the software and stuff. I look in task manager but the .exe is no longer running for Windows Police Pro.exe in the processes. So, it's no longer running from C:/Program Files folder, but somewhere else.

    I'm currently running House Scan from trendmicro.com, and hoping that finds the files, but I doubt it will, since last time I got a smithfrog (NASTIEST SOFTWARE EVER), it didn't catch it at all. Should I also run the Hijack this software? What do you recommend? Any google searches for good solutions or anyone well-versed on windows police pro speficially, please help out. Even googling stuff is PAINFUL as HELL at this point with my system so slow and getting pop ups left and right. And no, I can't install another antivirus program because I get the above ^ error message. I was going to install Avira to get rid of it, but it was a no-go. Pretty poor situation I'm in.
     
  2. kegobeer

    kegobeer 1 hr late but moving fast

    Reputations:
    836
    Messages:
    3,682
    Likes Received:
    0
    Trophy Points:
    105
    Have you read this?

    http://www.seohosting.com/blog/technology-news/how-to-remove-windows-police-pro/

    There are links to websites that explain how to remove this piece of crap. Personally, I would nuke my operating system partition and install my operating system again. I've only been infected with a virus once, a very long time ago, but I am not one to take chances with viruses/trojans/etc.

    Also - in the future, if you frequent pron websites, you should use a browser like Firefox, and disable java/javascript and cookies, or if you use IE8, use InPrivate to help isolate the browser. You also need to invest in some good antivirus software.
     
  3. kegobeer

    kegobeer 1 hr late but moving fast

    Reputations:
    836
    Messages:
    3,682
    Likes Received:
    0
    Trophy Points:
    105
    To the OP: Make sure you read visit both of the links in that article I posted. I suspect you'll need to follow both of them, and then do a complete system scan, to ensure you've removed that troublesome software.
     
  4. hankaaron57

    hankaaron57 Go BIG or go HOME

    Reputations:
    534
    Messages:
    1,642
    Likes Received:
    2
    Trophy Points:
    56
    I just ran House Scan off trendmicro.com, and ran CWshredder (messed up my IE8, but found nothing), and rootkit destroyer (or whatever it was), and those found nothing, but House scan found two infections, deleted them, yet the problem persists. Looks like I'll have to resort to your link now beer, thanks.
     
  5. DarkSilver

    DarkSilver MSI Afterburner

    Reputations:
    378
    Messages:
    2,249
    Likes Received:
    0
    Trophy Points:
    55
    OK!
    Download Malwaresbytes' Anti-Malware(FREE on-demand scanner) here, http://www.malwarebytes.org/mbam.php
    Install it and update it and scan your computer.
    Download SUPERAntispyware(FREE on-demand scanner) here, http://www.superantispyware.com/
    Install it and update it then, scan!
    Download SpywareBlaster(FREE passive protection = 0 CPU usage and 0 Ram usage) here, http://www.javacoolsoftware.com/spywareblaster.html
    Install it and update it then, enable all protection.

    I think with these software, you can kill those virus and gain more protection.
    Mcafee is so far the weakest Paid version Antivirus around and it even weaker than FREE version antivirus.
    Get Avira Antivir Personal 9 or Avast Home Edition. These Antiviruses = Better than Mcafee.
    Avira Antivir Personal 9 D/L, http://www.free-av.com/
    Avast Home Edition D/L, http://www.avast.com/

    If all these solution didn't work, you can use SmitFraudFix(FREEWARE).
    Personally, I do not recommend it for newbies.
    Read the instruction/guide as well as Download link here, http://siri.geekstogo.com/SmitfraudFix.php
     
  6. hankaaron57

    hankaaron57 Go BIG or go HOME

    Reputations:
    534
    Messages:
    1,642
    Likes Received:
    2
    Trophy Points:
    56
    Thanks for the links. Yes, I'm aware many people hate Mcafee and Norton, but it came with the computer so I figured I'd use up the subscription. Unfortunately, I didn't realize until too late it was no longer protecting my computer. It did a thorough job while it worked, however, but was a resource hog <-- it's biggest downfall methinks.

    Anyways, when I get rid of this stuff, I'm going to install Avira which I have a paid version of. I don't remember what edition it is, though. I'm still searching through the registry (only possible with command prompt in safe mode, as it's unable to run because of that damned virus in normal mode or typing it into Start/run). I can't even load the links off the original link kegobeer gave me because IE8 crashes - looks to be a symptom of this virus. It's getting harder and harder to do anything at all on this machine the malware is so bad.
     
  7. hankaaron57

    hankaaron57 Go BIG or go HOME

    Reputations:
    534
    Messages:
    1,642
    Likes Received:
    2
    Trophy Points:
    56
    OKay this is ridiculous. Could someone please give me a direct link to the download of the Spyware software off the SECOND link in this link, fifth paragraph: http://www.seohosting.com/blog/technology-news/how-to-remove-windows-police-pro/

    This is the link that makes my IE8 crash everytime I load it up, and I need that software. I've tried all the manual fixes and file deletions, I need that software from that second link's page now to try and remove Windows Police Pro.
     
  8. Ole man

    Ole man Notebook Evangelist

    Reputations:
    48
    Messages:
    301
    Likes Received:
    0
    Trophy Points:
    30
  9. hankaaron57

    hankaaron57 Go BIG or go HOME

    Reputations:
    534
    Messages:
    1,642
    Likes Received:
    2
    Trophy Points:
    56
    Thanks for the links, Darksilver. Duely noted.

    So far this guide looks like it was written exactly for my problem: http://www.myantispyware.com/2009/08/31/remove-windows-police-pro-uninstall-instructions/ <-- Any input on the software/recommendations in this link? Or can I follow it to a T?


    Thanks a million, Ole man. Spyware doctor seems to have gotten rid of most of the stuff, and I no longer have slow downs or popups/redirects when surfing on IE8. However, the problem with none of my .exe files working still occurs. Now to figure that part out.
     
  10. taj619

    taj619 Notebook Consultant

    Reputations:
    6
    Messages:
    150
    Likes Received:
    0
    Trophy Points:
    30
  11. hankaaron57

    hankaaron57 Go BIG or go HOME

    Reputations:
    534
    Messages:
    1,642
    Likes Received:
    2
    Trophy Points:
    56
    Running XP Pro.
     
  12. DarkSilver

    DarkSilver MSI Afterburner

    Reputations:
    378
    Messages:
    2,249
    Likes Received:
    0
    Trophy Points:
    55
    If you really don't know how to fix this problem or these problems are damn hard to fix, I would like to suggest about a re-installation of OS(reformat).
    Get Windows 7 if you're interested. XP is way too old. Too much of security holes. Even you install the XP again, you may have the same problem or other problems sooner or later too.
     
  13. hankaaron57

    hankaaron57 Go BIG or go HOME

    Reputations:
    534
    Messages:
    1,642
    Likes Received:
    2
    Trophy Points:
    56
    I specified in the first post that formatting isn't an option for me, so please don't derail the topic.

    I did find a registry fix to set all .exe's back to working now, however. It's from the last link I supplied: http://www.myantispyware.com/2009/08/31/remove-windows-police-pro-uninstall-instructions/

    where it says:

    2. Repair running .exe files.
    Click Start, Run. Type command and press Enter. Type notepad and press Enter.
    Notepad opens. Copy all the text below into Notepad.

    Windows Registry Editor Version 5.00
    [HKEY_CLASSES_ROOT\exefile\shell\open\command]
    @="\"%1\" %*"

    Save this as fix.reg to your Desktop (remember to select Save as file type: All files in Notepad.)
    Double Click fix.reg and click YES for confirm.
    Reboot your computer.
     
  14. bjohn

    bjohn Newbie

    Reputations:
    0
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    5
    Have you tried to scan your computer with Spyware Doctor? i've had this windows police program on my pc few days ago, that won't let me open task manager and hijackthis. So, found on yahoo answers that S. Doctor is able to remove the program. Although it is paid, but my computer is clean now ;) Download Spyware Doctor to remove Windows Police Pro
     
  15. hankaaron57

    hankaaron57 Go BIG or go HOME

    Reputations:
    534
    Messages:
    1,642
    Likes Received:
    2
    Trophy Points:
    56
    Yes. That's what got it.
     
  16. DetlevCM

    DetlevCM Notebook Nobel Laureate

    Reputations:
    4,843
    Messages:
    8,389
    Likes Received:
    1
    Trophy Points:
    205
  17. fLaze

    fLaze Notebook Enthusiast

    Reputations:
    0
    Messages:
    33
    Likes Received:
    0
    Trophy Points:
    15
    I just recently got this virus on my desktop. I followed the instructions on http://www.myantispyware.com/2009/08/31/, deleted desote.exe and other Windows Police Pro related files. I also fixed my registry so my .exe applications work again. But when I try to run a scan in malwarebytes (after a fresh reinstall), it crashes a few secs into the scan. And when I try to reopen the program, I get an error message saying I don't have enough permission to run the program. My desktop is running XP Media Center Edition.
     
  18. kegobeer

    kegobeer 1 hr late but moving fast

    Reputations:
    836
    Messages:
    3,682
    Likes Received:
    0
    Trophy Points:
    105
    Did you read my previous post and visit the website I linked? People have reported similar issues, and there are possible work arounds that might help you - visit:

    http://www.softsailor.com/how-to/67...o-virus-windows-police-pro-virus-removal.html

    and

    http://www.spywarevoid.com/remove-windows-police-pro-windowspolice-pro-removal-help.html