Remove System Protector. Description and removal instructions

 
Title: System Protector
Also known as: SystemProtector
Type: Spyware
Severity scale:System Protector severity is 69  (69 / 100)
 
System Protector is a rogue anti-spyware application. It is advertised and installed without user's permission through the use of trojan viruses when browsing malicious websites. Usually, these trojan viruses display fake security alerts or similar notifications. System Protector is advertised as security scanner, but the truth is that this parasite only mimics normal anti-spyware programs. The main goal of SystemProtector is to frighten the user and trick money from him.

Once installed, System Protector is configured to start automatically and to scan the infected system. After the scan, System Protector states that user's computer is seriously infected and strongly suggests to purchase a full version of System Protector, because trial version can only detect infections, but is is unable to remove them. Of course, those infections are all fake. System Protector displays the same list of infections on all infected computers. This parasite also has built-in utility that blocks security-related websites. It is highly recommended to remove System Protector from the system as soon as possible, because removal delay can only worsen the situation.


Related files: install.exe, lsascs.exe, shellex.dll, Windll32.exe, SpyProtectorSC_Base_new.dat, SpyProtectorSC_Config.ini, System Protector.lnk, Purchase License.url, Support Page.url, spyprotector.cpl

System Protector properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

System Protector snapshot:
System Protector removal

Automatic System Protector removal:

remover for System Protector

System Protector manual removal:

Kill processes:
install.exe lsascs.exe windll32.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" => 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\System Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\lsascs.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System Protector"
Unregister DLLs:
shellex.dll

Delete files:
install.exe lsascs.exe shellex.dll windll32.exe SpyProtectorSC_Base_new.dat SpyProtectorSC_Config.ini System Protector.lnk Purchase License.url Support Page.url spyprotector.cpl
Delete directories:
C:\Program Files\System Protector

Other programs to remove System Protector:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 30/03/09
Information updated: 15/04/09

Additional resources related to System Protector:

Attention: If you know or you have a website or page about System Protector removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about System Protector parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by . 2009-04-15 00:04:44
Thanks for this post, I can remove the System Protector manually using the steps above.


Latest spyware news:
Similar parasites:
Related discussions: