How to remove Your Protection
Your Protection description
Your Protection is a rogue anti-spyware application which is categorized to the same family of malware as earlier appeared – User Protection, Dr. Guard, Paladin Antivirus and Malware Defender. This fake program is promoted and installed through the use of malware that automatically downloads and installs it onto your computer without your knowledge or consent. While Your Protection is running, you will be shown nag screens and rogue security warnings.
A few samples:
Antivirus Alert – Critical threat detected
Warning: Network attack detected
Network attack has been detected. Process is attempting to access your private data.
Your computer is being attacked from a remote PC.
Process is trying to steal your passwords listed below. It is highly recommended to block this threat now.
Danger!
Harmful viruses detected on your computer. Click on the
message to scan your computer for security threats for free.
Warning! Network attack detected!
Network intrusion detected!
Your computer is being attacked from a remote PC.
Danger!
Unauthorized person tries to steal your passwords and private
information. Click on the message to prevent identity theft.
Danger!
A security threat detected on your computer.
TrojanASPX.JS.Win32. It strongly recommended to remove
this threat right now. Click on the message to remove it.
Warning! Adware detected!
Adware module detected on your PC!
Warning! Keylogger detected!
Keylogger activity detected on your PC!
When Your Protection starts it will scan your computer and state that it is infected with a variety of infections. The threats are either not real or are legitimate programs on your computer. Do not buy offered registered version of Your Protection program, but delete it with a reputable anti-spyware application.
How to get rid of Your Protection
This infection can be removed using Spyware Doctor.
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from Your Protection and the latest internet security threats. If your computer is infected with Your Protection we strongly recommend automatic spyware scanner.
How to manually remove Your Protection
To get rid of spyware such as Your Protection you need to remove processes, search and delete registry keys, DLL and other Your Protection related files from your computer.
Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic Your Protection remover.
- Uninstall Your Protection from Control Panel
Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall. - End these Your Protection processes:
Uninstall.exe
urpprot.exe
mplay32xe.exe
To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button. -
Unregister Your Protection DLL files:
fiosejgfse.dll
urpext.dll
urphook.dll
To unregister DLL click Start > Run > type "regsvr32 /u PATH_TO_FILE/FILE.dll" -
Delete Your Protection registry entries:
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Your Protection
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "mplay32xe.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Your Protection"
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt "(Default)" = "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt "(Default)" = "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
To open registry editor click Start > Run > type "regedit".
Warning! Manual registry entries editing may cause damage to your system.
Download Uniblue RegistryBooster 2010 to scan for registry errors. -
Search and delete these Your Protection related files:
c:\Documents and Settings\All Users\Application Data\fiosejgfse.dll
c:\Program Files\Your Protection
c:\Program Files\Your Protection\about.ico
c:\Program Files\Your Protection\activate.ico
c:\Program Files\Your Protection\buy.ico
c:\Program Files\Your Protection\help.ico
c:\Program Files\Your Protection\scan.ico
c:\Program Files\Your Protection\settings.ico
c:\Program Files\Your Protection\splash.mp3
c:\Program Files\Your Protection\Uninstall.exe
c:\Program Files\Your Protection\update.ico
c:\Program Files\Your Protection\urp.db
c:\Program Files\Your Protection\urpext.dll
c:\Program Files\Your Protection\urphook.dll
c:\Program Files\Your Protection\urpprot.exe
c:\Program Files\Your Protection\virus.mp3
%Temp%\4otjesjty.mof
%Temp%\asd1.tmp
%Temp%\mplay32xe.exe
%Temp%\urp.dat
%Temp%\urpr.dat
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Your Protection.lnk
%UserProfile%\Desktop\Your Protection Support.lnk
%UserProfile%\Desktop\Your Protection.lnk
%UserProfile%\Start Menu\Programs\Your Protection
%UserProfile%\Start Menu\Programs\Your Protection\About.lnk
%UserProfile%\Start Menu\Programs\Your Protection\Activate.lnk
%UserProfile%\Start Menu\Programs\Your Protection\Buy.lnk
%UserProfile%\Start Menu\Programs\Your Protection\Scan.lnk
%UserProfile%\Start Menu\Programs\Your Protection\Settings.lnk
%UserProfile%\Start Menu\Programs\Your Protection\Update.lnk
%UserProfile%\Start Menu\Programs\Your Protection\Your Protection Support.lnk
%UserProfile%\Start Menu\Programs\Your Protection\Your Protection.lnk