Title: Your Protection

Remove Your Protection. Removal instructions


 
Also known as: YourProtection
Severity scale:Your Protection severity is 68  (68 / 100)
 
Your Protection is a rogue anti-spyware program from the same family as User Protection and Dr. Guard. Usually, this rogue program comes from fake online scanners and misleading video sites, but it may come bundled with other malware too. Once installed, YourProtection will run a fake system scan and report false system security threat to scare you into thinking that your computer is infected with Trojans, worms, spyware, adware and other malware. Then it will prompt you to pay for a full version of the program to remove the infections or system threats. Don't purchase it! This is nothing more but a scam. Instead, please use the removal instructions below to remove Your Protection from your computer as soon as possible.

Just like its predecessors, Your Protection will block legitimate antivirus and anti-spyware programs. What is more, it will even attempt to uninstall your anti-virus program claiming that it's infected. That's not true. Furthermore, this fake program will flood your computer with fake security alerts and pop-ups from the Windows taskbar. As usual, those fake alerts will state that your computer is infected or under attack from a remote computer. Some of the fake alerts you will probably see if your computer is infected with this virus:


Your computer is being attacked from a remote PC.
Process is trying to steal your passwords listed below. It is highly recommended to block this threat now.


Antivirus Alert - Critical threat detected
Warning: Network attack detected
Network attack has been detected. Process is attempting to access your private data.

If you find that your computer is infected with Your Protection scareware, please follow the removal instructions below to remove this virus from your computer either manually or with an automatic removal tool. If you have already purchased this program, then you should contact your credit card company and dispute the charges.



Related files: about.ico, activate.ico, buy.ico, help.ico, scan.ico, settings.ico, splash.mp3, Uninstall.exe, update.ico, urp.db, urpext.dll, urphook.dll, urpprot.exe, virus.mp3, 4otjesjty.mof, asd1.tmp, mplay32xe.exe, urp.dat, urpr.dat, Your Protection.lnk, Your Protection Support.lnk

Your Protection properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Your Protection snapshot:
Your Protection removal

Automatic Your Protection removal:

SpyHunter is recommended remover to uninstall Your Protection. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Your Protection and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Your Protection using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
STOPzilla
Tested and Confirmed! STOPzilla removes Your Protection (2010-04-02 09:33:02)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Your Protection (2010-04-02 09:33:02)
Spyware Doctor
We are testing Spyware Doctor's efficiency at removing Your Protection (2010-04-06 05:38:33)
XoftSpySE Anti Spyware

Your Protection manual removal:

Kill processes:
urpprot.exe mplay32xe.exe
Delete registry values:
HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallYour Protection
HKEY_LOCAL_MACHINESOFTWAREYour Protection
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = "1"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "mplay32xe.exe"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Your Protection"
HKEY_CLASSES_ROOT*shellexContextMenuHandlersSimpleShlExt "(Default)" = "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CLASSES_ROOTFoldershellexContextMenuHandlersSimpleShlExt "(Default)" = "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciessystem "DisableTaskMgr" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShell ExtensionsApproved "{5E2121EE-0300-11D4-8D3B-444553540000}"
Unregister DLLs:
fiosejgfse.dll urpext.dll urphook.dll

Delete files:
about.ico activate.ico buy.ico help.ico scan.ico settings.ico splash.mp3 Uninstall.exe update.ico urp.db urpext.dll urphook.dll urpprot.exe virus.mp3 4otjesjty.mof asd1.tmp mplay32xe.exe urp.dat urpr.dat Your Protection.lnk Your Protection Support.lnk
Delete directories:
C:Program FilesYour Protection
%UserProfile%Start MenuProgramsYour Protection
Information added: 2010-04-02 09:33:02
Information updated: 2010-04-06 03:01:18

Additional resources related to Your Protection:

Attention: If you know or you have a website or page about Your Protection removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Your Protection parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Home page Name



«


* All field required
Latest spyware news:
Subscribe to news

Similar parasites:
Related discussions:
Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2 HijackThis Log Analyzer Beta 2

I failed to remove Your Protection using SpyHunter.

Email


Close

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other