Severity scale  
  (68/100)

User Protection. How to Remove? (Uninstall Guide)

removal by - -   Also known as UserProtection | Type: Rogue Antispyware
12
User Protection is a fake antivirus program from the same family as Paladin Antivirus and Dr. Guard. It uses false scan results and fake security alerts to make you think that your computer is infected with malware whereas the only real infection is UserProtection itself. The rogue program then prompts you to pay for a full version of the program to remove the infections. However, don't buy it and uninstall User Protection from your computer as soon as possible.

The bad news is that User Protection may block legitimate anti-virus and anti-spyware programs. Once active, it will attempt to uninstall security programs currently installed on your computer. Usually, it states that particular program is infected and you should uninstall it in order to protect your computer. Then it will simulate a fake system scan and display a list of false system security threats to trick you into thinking that your computer is infected. As a typical scareware, User Protection will also display many fake security alerts and notifications about dangerous infections and insecure Internet connection.

Last but not least, User Protection may block certain Windows system tools and options. The rogue program uses browser hijacking and redirects users to various misleading and even harmful websites that promote rogue products or display phony online advertisements. As you can see, this fake program is a typical scam that uses various malicious methods to trick users into purchasing the program. If you find that your computer is infected with this virus, please follow the removal instructions below to remove User Protection from your computer as soon as possible. Related files: Uninstall.exe

User Protection properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall User Protection. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall User Protection. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes User Protection (2010-03-19 08:56:40)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes User Protection (2010-03-19 08:56:40)
Plumbytes
We are testing Plumbytes's efficiency (2010-04-02 01:55)
Hitman Pro
STOPzilla
Tested and Confirmed! STOPzilla removes User Protection (2010-03-19 08:56:40)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes User Protection (2010-03-19 08:56:40)
Webroot SecureAnywhere AntiVirus
User Protection screenshot
User Protection snapshot

User Protection manual removal

Kill processes:
asr64_ldm.exe
uninstall.exe
usrprot.exe
Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallUser Protection
HKEY_LOCAL_MACHINESOFTWAREUser Protection
HKEY_CLASSES_ROOT*shellexContextMenuHandlersSimpleShlExt
HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOTFoldershellexContextMenuHandlersSimpleShlExt
HKEY_LOCAL_MACHINESOFTWAREUser Protection
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallUser Protection
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem ?€?DisableTaskMgr?€?
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun ?€?User Protection?€?
HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShell ExtensionsApproved ?€?{5E2121EE-0300-11D4-8D3B-444553540000}?€?
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem ?€?DisableTaskMgr?€? = ?€?1?
HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallUser Protection
HKEY_LOCAL_MACHINESOFTWAREUser Protection
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "User Protection"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShell ExtensionsApproved "{5E2121EE-0300-11D4-8D3B-444553540000}"
Unregister DLLs:
drgext.dll
drghook.dll
fiosejgfse.dll
usrext.dll
usrhook.dll


Delete files:
User Protection Support.lnk
User Protection.lnk
About.lnk
Activate.lnk
Buy.lnk
fiosejgfse.dll
about.ico
activate.ico
cbuy.ico
help.ico
scan.ico
settings.ico
splash.mp3
uninstall.exe
update.ico
usr.db
usrext.dll
usrhook.dll
usrprot.exe
virus.mp3
usrprot.exe.txt
4otjesjty.mof
usr.dat
usrr.dat

Delete directories:
C:Program FilesUser Protection
%UserProfile%Start MenuProgramsUser Protection
%Documents and Settings%[UserName]Desktop
%Documents and Settings%[UserName]Start MenuPrograms
c:Documents and SettingsAll UsersApplication Data
%UserProfile%Application DataMicrosoftInternet ExplorerQuick Launch
%UserProfile%Desktop
%UserProfile%Local SettingsTemp

Geolocation of User Protection

Map reveals the prevalence of User Protection. Countries and regions that have been affected the most are: India, United Kingdom, United States, Canada and Germany.

Information updated:

Comments on User Protection

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)