"Google has detected…" web page is a fake notification generated by rogue anti-spyware called System Protector. Mainly, it states that user's computer is not properly protected and suggests to buy a full version of
System Protector. "Google has detected…" fake web page reads:
"Google has detected that you are using the unregistered copy of System Protector. System Protector is recommended by Google for the best Web surfer safety level. Register Now and get the max level secure browsing!"
Firstly, Google usually doesn't promote any software, especially on the Google search web page. Secondly, if user clicks on "Register Now and get the max level secure browsing!" link, he will automatically download System Protector. It is highly recommended to ignore such disinformation and to remove "Google has detected…" infection from the system.
Related files:
System Protector.lnk,
SpyProtectorSC_Base_new.dat
"Google has detected" web page properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove "Google has detected" web page you agree to our
privacy policy and
agreement of use.
"Google has detected" web page manual removal:
Kill processes:
install.exe
lsascs.exe
windll32.exe
Delete registry values:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System ?€?DisableTaskMgr?€? => 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lsascs.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ?€?System Protector?€?
Unregister DLLs:shellex.dll
Delete files:SpyProtectorSC_Base_new.dat
SpyProtectorSC_Config.ini
Purchase License.url
Support Page.url
System Protector.lnk
spyprotector.cpl
Delete directories:C:\Program Files\System Protector
QR code for "Google has detected" web page removal instructions:
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the website is that parasites like "Google has detected" web page are really hard to remove on infected computer.
you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall "Google has detected" web page right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.
Post Comment: