Severity scale:  
  (98/100)

System Protection virus. How to remove? (Uninstall guide)

removal by Alice Woods - -   Also known as System Protection | Type: Rogue Antispyware
12

System Protection virus is a dangerous program, which seeks to steal the money from unaware PC users. Typically, it pretends to be a trustworthy anti-virus application, which offers to do a good favor for the user and help him in malware removal. Besides, some of the users may mix it with Microsoft's feature, which has the same name but works completely differently. So, if you receive a notification from System Protection, which reports about viruses, be sure that you are infected. This program has no ability to find and remove any kind of threat. In reality, each of its alerts is forged and seeks to create a need of its licensed version. If you fall for such misleading scheme and purchase the licensed version of System Protection virus, you lose your money. In addition, you may find out that scammers managed to steal your credit card details and used them for their future crimes. Please, never fall for such scams that get inside the system without user's permission and start appearing in a form of fake alerts and system scanners.

HOW CAN I GET INFECTED WITH SYSTEM PROTECTION VIRUS?

System Protection virus is spread via trojan horse, which has ability to get inside poorly protected systems without any permission asked. In order to avoid such virus, you should avoid illegal websites, freeware, shareware, commercial pop-up ads and spam. Once it gets inside the system, it starts initiating serious havoc on its target PC: it starts imitating system's scan and then reports about numerous viruses detected. Of course, these 'viruses' are invented and do not exist on victim's PC. Please, ignore such messages that are usually displayed by System Protection virus:

Activate System Protection – make your PC free from all kinds of threats. Please click “Activate now” to continue with a secure purchase of System Protection license. As soon as you complete the activation you will receive: Award-winning scan technology, Free unlimited updates, User-friendly interface, 24/7 technical support. Money back guarantee.

System Protection has found 16 useless and UNWANTED files on your computer! Information on removal Potentially dangerous files were found on your system during the last scan! It is strongly recommended that you remove them immediately. Serious threats were detected: 13 items are critical privacy, compromising content, 1 item is medium privacy threats, 2 items are junk content of low privacy threatsPotential risks: Exposure of your private data, including credit card information, etc. Slow web-surfing and malware downloads while visiting websites. Windows running slow and system crashes. Activation (System Protection) is highly recommended.

We highly recommend disappointing System Protection virus creators and ignoring these fake alerts that are displayed every time you reboot your computer. In addition, remove this scareware from your computer in order to prevent system's slow downs, browser's redirections and similar problems.

HOW TO REMOVE SYSTEM PROTECTION VIRUS?

In order to remove System Protection virus, we highly recommend NOT doing that manually because you may fail to remove malicious files and lead your PC to damage. If you are infected with this threat, run a full system scan with Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Reimage. Of course, use updated versions in order to remove this threat completely.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove System Protection virus you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall System Protection virus. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing System Protection virus (2013-05-08)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing System Protection virus (2013-05-08)
Hitman Pro
We have tested Hitman Pro's efficiency in removing System Protection virus (2013-05-08)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing System Protection virus (2013-05-08)

System Protection virus manual removal:

Kill processes:
amsecure.exe

Delete registry values:
HKEY_LOCAL_MACHINESoftwareSystem Protection.exe

HLEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun “random”

HKEY_CURRENT_USERSoftwareMicrosoftInstallerProductsrandom

HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun “System Protection"

HKEY_CURRENT_USERSoftwareMicrosoft “adver_id” = “29"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations “LowRiskFileTypes” = “.exe;”

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “System Protection”

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “rundll32? = “”

HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWinlogon “Shell” = “%UserProfile%Application Datadefender.exe” /sn”

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciessystem “EnableLUA” = “0?

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun “rundll32? = “”

Delete files:
%Documents and Settings%[User Name]asr.dat

%Documents and Settings%[User Name]Application Data1tmp.bat

%Documents and Settings%[User Name]Application Datadefender.exe

%Documents and Settings%[User Name]Application Datascan.dll

%CommonPrograms%System ProtectionSystem Protection.lnk

%UserProfile%.System Protection

%ProgramFiles%System ProtectionSystem Protection.exe