Mar 31

How to Remove the Windows First-Class Protector Rogue

The Windows First-Class Protector is a rogue application that uses Fake Online Scan pages showing the PC is infected and needs to download an install the rogue in order to clean the fake infections.

The Windows First-Class Protector when it runs generates fake alerts and the blocking of other programs which are scare tactic to scare the user into buying the rogue.

The Windows First-Class Protector includes in the registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Image File Execution Options, with hundreds of entries of the different legitimate Antivirus companies executable files to block them from being able to be ran.

Windows First-Class Protector GUI

Files and Locations:
<Drive>:\DOCUMENTS AND SETTINGS\<USER>\APPLICATION DATA\Protector-<random Names>.exe
<Drive>:\USERS\<USER>\AppData\ROAMING\Protector-<Random Names>.exe

The Windows First-Class Protector rogue can be removed manually, however, because of blocking apps and possible infections by other malware that could have been included, it is best to use our Antivirus removal tool, VIPRE Antivirus.

You can download a free trial to remove the rogue by clicking on the link below:


 If you are unable to download and install our malware removal tool because the rogue has infected your computer and is not allowing you to  install the program, you can use our VIPRE Rescue Disc here:


Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>