Title: Protection System

Type: Rogue Antispyware

Remove Protection System. Removal instructions

Also known as: ProtectionSystem

Severity scale:

(69 / 100)

Protection System is a bogus anti-spyware application from the same family as CoreGuard Antivirus 2009. This program shows false scan results in order to convince you that your computer is infected and that you should purchase Protection System. Once active, Protection System will be configured to automatically scan your computer each time you login to Windows. After the scan it will state that your computer has various infections that can’t be removed unless you’ll purchase the program. Obviously, these infections are all fake and harmless.

While running, ProtectionSystem will display security warnings stating that your computer is being hacked. All these alerts are just a common method used by Protection System to convince you that you are infected. Just like the infection threats, you should ignore these security alerts too. What is more, Protection System detects Malwarebytes anti-malware installation and runs MalwareBytes uninstaller to remove the program from your computer in order to protect itself from being detected. The rogue displays error message with the following text:

"There is unauthorized antivirus software detected on your computer. It is recommended you to remove it, otherwise it could conflict with Protection System. Press 'OK' to remove MalwareBytes' Anti-Malware_is1"

Don’t purchase this program under no circumstances. Please use the removal guide below to remove Protection System if your computer is already infected with this malware.

Related files: wingenocx.dll, psystem.exe, blacklist.cga, core.cga, CoreExt.dll, Protection System.exe, firewall.dll, Uninstall.exe, reg.html, support.png, unreg.html, delete.png, Info.png, plus_circle.png, tick.png, warn.png, offline.gif, online.gif, voice.gif, Protection System.lnk, Uninstall Protection System.lnk

Protection System properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Protection System snapshot:

Automatic Protection System removal:

remover for Protection System

SpyHunter is recommended remover to uninstall Protection System. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Protection System and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Protection System using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

Tested and Confirmed! STOPzilla removes Protection System (2009-06-11 01:45:25)

Malwarebytes Anti Malware

download | review

Tested and Confirmed! Malwarebytes Anti Malware removes Protection System (2009-06-11 01:45:25)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Protection System (2011-10-25 07:18:09)

XoftSpySE Anti Spyware

download | review

Protection System manual removal:

FORUM:
Discuss Protection System in
spyware removal forum

Kill processes:
psystem.exe uninstall.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\Protection System
HKEY_CLASSES_ROOT\BhoNew.BhoApp
HKEY_CLASSES_ROOT\BhoNew.BhoApp.1
HKEY_CLASSES_ROOT\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
HKEY_CLASSES_ROOT\CLSID\{425882B0-B0BF-11CE-B59F-00AA006CB37D}
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Protection System"
HKEY_CURRENT_USER\software eee0bd2f-ff2e-46ef-83fb-d4fda84462a3
HKEY_CURRENT_USER\software\protection system
HKEY_CURRENT_USER\software\protection system data
HKEY_CURRENT_USER\software\protection system dbsigns
HKEY_CURRENT_USER\software\protection system dbver
HKEY_CURRENT_USER\software\protection system fd
HKEY_CURRENT_USER\software\protection system guid
HKEY_CURRENT_USER\software\protection system infected
HKEY_CURRENT_USER\software\protection system infectedfiles
HKEY_CURRENT_USER\software\protection system lastscan
HKEY_CURRENT_USER\software\protection system secstatus_3
HKEY_CURRENT_USER\software\protection system secstatus_4
HKEY_CURRENT_USER\software\protection system secstatus_5
HKEY_CURRENT_USER\software\protection system settings_0
HKEY_CURRENT_USER\software\protection system swver
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system displayversion
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system urlinfoabout

HELP:
how to remove registry entries

Unregister DLLs:
coreext.dll firewall.dll wingenocx.dll

HELP:
how to unregister malicious DLLs

Delete files:
Protection System.lnk Uninstall Protection System.lnk blacklist.cga core.cga coreext.dll firewall.dll psystem.exe uninstall.exe support.png unreg.html delete.png info.png plus_circle.png tick.png warn.png offline.gif online.gif voice.gif wingenocx.dll

HELP:
how to remove harmful files

Delete directories:
c:\Documents and Settings\All Users\Start Menu\Programs\Protection System
c:\Program Files\Protection System
c:\Program Files\Protection System\Help
c:\Program Files\Protection System\Help\images
c:\Program Files\Protection System\Help\images\buttons

Information added: 2009-06-11 01:45:25
Information updated: 2011-10-25 04:40:54

Additional resources related to Protection System:

Attention: If you know or you have a website or page about Protection System removal, feel free to add a link to this list: add url

more resources

Johnelle

Youre the one with the branis here. Im watching for your posts.

Reply »

2011 10 25

Post Comment:

Attention: Use this form only if you have additional information about Protection System parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.