Your Protection. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - -   Also known as YourProtection | Type: Rogue Antispyware
12

Your Protection is a rogue anti-spyware program from the same family as User Protection and Dr. Guard. Usually, this rogue program comes from fake online scanners and misleading video sites, but it may come bundled with other malware too. Once installed, YourProtection will run a fake system scan and report false system security threat to scare you into thinking that your computer is infected with Trojans, worms, spyware, adware and other malware. Then it will prompt you to pay for a full version of the program to remove the infections or system threats. Don’t purchase it! This is nothing more but a scam. Instead, please use the removal instructions below to remove Your Protection from your computer as soon as possible.

Just like its predecessors, Your Protection will block legitimate antivirus and anti-spyware programs. What is more, it will even attempt to uninstall your anti-virus program claiming that it’s infected. That’s not true. Furthermore, this fake program will flood your computer with fake security alerts and pop-ups from the Windows taskbar. As usual, those fake alerts will state that your computer is infected or under attack from a remote computer. Some of the fake alerts you will probably see if your computer is infected with this virus:

Your computer is being attacked from a remote PC.
Process is trying to steal your passwords listed below. It is highly recommended to block this threat now.

Antivirus Alert – Critical threat detected
Warning: Network attack detected
Network attack has been detected. Process is attempting to access your private data.

If you find that your computer is infected with Your Protection scareware, please follow the removal instructions below to remove this virus from your computer either manually or with an automatic removal tool. If you have already purchased this program, then you should contact your credit card company and dispute the charges.

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Your Protection you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Your Protection. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Your Protection (2010-04-06)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Your Protection (2010-04-06)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Your Protection (2010-04-06)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Your Protection (2010-04-06)
Your Protection snapshot
Your Protection

Your Protection manual removal:

Kill processes:
urpprot.exe

mplay32xe.exe

Delete registry values:
HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallYour Protection

HKEY_LOCAL_MACHINESOFTWAREYour Protection

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = "1"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "mplay32xe.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Your Protection"

HKEY_CLASSES_ROOT*shellexContextMenuHandlersSimpleShlExt "(Default)" = "{5E2121EE-0300-11D4-8D3B-444553540000}"

HKEY_CLASSES_ROOTFoldershellexContextMenuHandlersSimpleShlExt "(Default)" = "{5E2121EE-0300-11D4-8D3B-444553540000}"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciessystem "DisableTaskMgr" = "1"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShell ExtensionsApproved "{5E2121EE-0300-11D4-8D3B-444553540000}"

Unregister DLLs:
fiosejgfse.dll

urpext.dll

urphook.dll

Delete files:
about.ico

activate.ico

buy.ico

help.ico

scan.ico

settings.ico

splash.mp3

Uninstall.exe

update.ico

urp.db

urpext.dll

urphook.dll

urpprot.exe

virus.mp3

4otjesjty.mof

asd1.tmp

mplay32xe.exe

urp.dat

urpr.dat

Your Protection.lnk

Your Protection Support.lnk

Delete directories:
C:Program FilesYour Protection

%UserProfile%Start MenuProgramsYour Protection

About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author