Remove Windows Police Pro
I’m seeing a lot of searches for how to remove Windows Police Pro this evening. It looks like it’s ALSO the latest flavor of the minute in the rogue security application crowd (take a look at remove Green AV for another rogue). As stated before… my usual path for removing a rogue antivirus or antispyware application is the same as any other malware, try to get other malware removal software on the system (such as malware bytes antimalware or super antispyware, AVG, spybot etc.) and get them running scans to eliminate it. (Virus Removal Toolkit for links.) (Make sure to get updates for the software first.) If that approach doesn’t get you anywhere then it’s time to find the name of the program file that’s running. It appears that with Windows police Pro, to remove it from the running processes you need to kill of the process called one of the following:
WindowsPolice.exe
WindowsPolicepro.exe
WPolice.exe
. You may need to reboot into safe mode, then you can rename (or just delete) the offending program executable…. here’s a suggestion for you.
After booting into safe mode delete or rename the files and folders related to Windows Police Pro that you find in the following places:
%User Profile%\Local Settings\Temp
%Program Files%\Windows Police PRO
%Program Files%\LabelCommand
You won’t want to delete the temp folder but look through it’s contents for windows police pro related files.
The above is where %Program Files% is usually c:\Program Files\ and %User Profile% is usually C:\Documents and Settings\yourusername\
Windows Police Pro hasn’t reported yet to go by other file names in the process manager. But it’s good to look for anything similar or related to this name if you can’t find one of the items specifically mentioned. Be suspicious and if you need to use google to search for each process you see and verify if it’s something that may be legit or if it’s related to this pest.
Also if it is named differently than above look to delete or rename the files that you find acting as Windows Police Pro to successfully remove it.
After you have a “foothold” of sorts and have made some progress against a pest like this continue to make sure you get respected malware removal like malware bytes antimalware, sypbot, AVG, etc. on the system and update them, run full scans and test with a few reboots to make sure the baddie doesn’t resurface.
–update–
I’ve found some new information on this rogue – it appears as though it may associate all executable files with desote.exe and deleting that file without fixing the file association would mean you may not be able to run executable files. There is a batch script to restore exe file assocations here that may solve the issue. (About the 9th one down.) I also see reference to a process running called svchasts.exe which should be killed off in task manager.
The path for desote.exe is likely C:\WINDOWS\system32\desote.exe and I have found reference also to a file at C:\Program Files\Windows Police Pro\tmp\dbsinit.exe which should be deleted.