Remove Protection System. Description and removal instructions

 
Title: Protection System
Also known as: ProtectionSystem
Type: Spyware
Severity scale:Protection System severity is 69  (69 / 100)
 
Protection System is a bogus anti-spyware application from the same family as CoreGuard Antivirus 2009. This program shows false scan results in order to convince you that your computer is infected and that you should purchase Protection System. Once active, Protection System will be configured to automatically scan your computer each time you login to Windows. After the scan it will state that your computer has various infections that can’t be removed unless you’ll purchase the program. Obviously, these infections are all fake and harmless.

While running, ProtectionSystem will display security warnings stating that your computer is being hacked. All these alerts are just a common method used by Protection System to convince you that you are infected. Just like the infection threats, you should ignore these security alerts too. What is more, Protection System detects Malwarebytes anti-malware installation and runs MalwareBytes uninstaller to remove the program from your computer in order to protect itself from being detected. The rogue displays error message with the following text:

"There is unauthorized antivirus software detected on your computer. It is recommended you to remove it, otherwise it could conflict with Protection System. Press 'OK' to remove MalwareBytes' Anti-Malware_is1"

Don’t purchase this program under no circumstances. Please use the removal guide below to remove Protection System if your computer is already infected with this malware.



Related files: wingenocx.dll, psystem.exe, blacklist.cga, core.cga, CoreExt.dll, Protection System.exe, firewall.dll, Uninstall.exe, reg.html, support.png, unreg.html, delete.png, Info.png, plus_circle.png, tick.png, warn.png, offline.gif, online.gif, voice.gif, Protection System.lnk, Uninstall Protection System.lnk

Protection System properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Protection System snapshot:
Protection System removal

Automatic Protection System removal:

remover for Protection System

Protection System manual removal:

Kill processes:
psystem.exe uninstall.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Protection System
HKEY_CLASSES_ROOT\BhoNew.BhoApp
HKEY_CLASSES_ROOT\BhoNew.BhoApp.1
HKEY_CLASSES_ROOT\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
HKEY_CLASSES_ROOT\CLSID\{425882B0-B0BF-11CE-B59F-00AA006CB37D}
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Protection System"
HKEY_CURRENT_USER\software eee0bd2f-ff2e-46ef-83fb-d4fda84462a3
HKEY_CURRENT_USER\software\protection system
HKEY_CURRENT_USER\software\protection system data
HKEY_CURRENT_USER\software\protection system dbsigns
HKEY_CURRENT_USER\software\protection system dbver
HKEY_CURRENT_USER\software\protection system fd
HKEY_CURRENT_USER\software\protection system guid
HKEY_CURRENT_USER\software\protection system infected
HKEY_CURRENT_USER\software\protection system infectedfiles
HKEY_CURRENT_USER\software\protection system lastscan
HKEY_CURRENT_USER\software\protection system secstatus_3
HKEY_CURRENT_USER\software\protection system secstatus_4
HKEY_CURRENT_USER\software\protection system secstatus_5
HKEY_CURRENT_USER\software\protection system settings_0
HKEY_CURRENT_USER\software\protection system swver
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system displayversion
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\protection system urlinfoabout

Unregister DLLs:
coreext.dll firewall.dll wingenocx.dll

Delete files:
Protection System.lnk Uninstall Protection System.lnk blacklist.cga core.cga coreext.dll firewall.dll psystem.exe uninstall.exe support.png unreg.html delete.png info.png plus_circle.png tick.png warn.png offline.gif online.gif voice.gif wingenocx.dll
Delete directories:
c:\Documents and Settings\All Users\Start Menu\Programs\Protection System
c:\Program Files\Protection System
c:\Program Files\Protection System\Help
c:\Program Files\Protection System\Help\images
c:\Program Files\Protection System\Help\images\buttons

Other programs to remove Protection System:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 11/06/09
Information updated: 03/09/09

Additional resources related to Protection System:

Attention: If you know or you have a website or page about Protection System removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Protection System parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: