Title: User Protection

Type: Rogue Antispyware

Remove User Protection. Removal instructions

Also known as: UserProtection

Severity scale:

(68 / 100)

User Protection is a fake antivirus program from the same family as Paladin Antivirus and Dr. Guard. It uses false scan results and fake security alerts to make you think that your computer is infected with malware whereas the only real infection is UserProtection itself. The rogue program then prompts you to pay for a full version of the program to remove the infections. However, don't buy it and uninstall User Protection from your computer as soon as possible.

The bad news is that User Protection may block legitimate anti-virus and anti-spyware programs. Once active, it will attempt to uninstall security programs currently installed on your computer. Usually, it states that particular program is infected and you should uninstall it in order to protect your computer. Then it will simulate a fake system scan and display a list of false system security threats to trick you into thinking that your computer is infected. As a typical scareware, User Protection will also display many fake security alerts and notifications about dangerous infections and insecure Internet connection.

Last but not least, User Protection may block certain Windows system tools and options. The rogue program uses browser hijacking and redirects users to various misleading and even harmful websites that promote rogue products or display phony online advertisements. As you can see, this fake program is a typical scam that uses various malicious methods to trick users into purchasing the program. If you find that your computer is infected with this virus, please follow the removal instructions below to remove User Protection from your computer as soon as possible.

Related files: User Protection Support.lnk, User Protection.lnk, About.lnk, Activate.lnk, Buy.lnk, fiosejgfse.dll, about.ico, activate.ico, cbuy.ico, help.ico, scan.ico, settings.ico, splash.mp3, Uninstall.exe, update.ico, usr.db, usrext.dll, usrhook.dll, usrprot.exe, virus.mp3, usrprot.exe.txt, 4otjesjty.mof, usr.dat, usrr.dat

User Protection properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

User Protection snapshot:

Automatic User Protection removal:

remover for User Protection

SpyHunter is recommended remover to uninstall User Protection. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of User Protection and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove User Protection using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

Tested and Confirmed! STOPzilla removes User Protection (2010-03-19 08:56:40)

Malwarebytes Anti Malware

download | review

Tested and Confirmed! Malwarebytes Anti Malware removes User Protection (2010-03-19 08:56:40)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing User Protection (2010-04-02 04:32:40)

XoftSpySE Anti Spyware

download | review

User Protection manual removal:

FORUM:
Discuss User Protection in
spyware removal forum

Kill processes:
asr64_ldm.exe uninstall.exe usrprot.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallUser Protection
HKEY_LOCAL_MACHINESOFTWAREUser Protection
HKEY_CLASSES_ROOT*shellexContextMenuHandlersSimpleShlExt
HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOTFoldershellexContextMenuHandlersSimpleShlExt
HKEY_LOCAL_MACHINESOFTWAREUser Protection
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallUser Protection
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem ?�?DisableTaskMgr?�?
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun ?�?User Protection?�?
HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShell ExtensionsApproved ?�?{5E2121EE-0300-11D4-8D3B-444553540000}?�?
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem ?�?DisableTaskMgr?�? = ?�?1?
HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallUser Protection
HKEY_LOCAL_MACHINESOFTWAREUser Protection
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "User Protection"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShell ExtensionsApproved "{5E2121EE-0300-11D4-8D3B-444553540000}"

HELP:
how to remove registry entries

Unregister DLLs:
drgext.dll drghook.dll fiosejgfse.dll usrext.dll usrhook.dll

HELP:
how to unregister malicious DLLs

Delete files:
User Protection Support.lnk User Protection.lnk About.lnk Activate.lnk Buy.lnk fiosejgfse.dll about.ico activate.ico cbuy.ico help.ico scan.ico settings.ico splash.mp3 uninstall.exe update.ico usr.db usrext.dll usrhook.dll usrprot.exe virus.mp3 usrprot.exe.txt 4otjesjty.mof usr.dat usrr.dat

HELP:
how to remove harmful files

Delete directories:
C:Program FilesUser Protection
%UserProfile%Start MenuProgramsUser Protection
%Documents and Settings%[UserName]Desktop
%Documents and Settings%[UserName]Start MenuPrograms
c:Documents and SettingsAll UsersApplication Data
%UserProfile%Application DataMicrosoftInternet ExplorerQuick Launch
%UserProfile%Desktop
%UserProfile%Local SettingsTemp

Information added: 2010-03-19 08:56:40
Information updated: 2010-04-02 01:55:25

Additional resources related to User Protection:

Attention: If you know or you have a website or page about User Protection removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about User Protection parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.