Protection System

Protection System Description

Protection System is a fake spyware remover originating from the same family as CoreGuard Antivirus 2009 rogue anti-spyware.

Protection System infiltrates your computer via security exploits or backdoors provided by affiliated trojans, and once active, is configured to start running whenever Windows starts up. Protection System will then prompt you to scan your computer. When this fake scan is complete, various false security alert notifications and annoying pop-ups will be triggered, stating that your PC is infected. In order to combat this threat, you must purchase Protection System.

Aliases

TROJ_FAKECOG.X [TrendMicro]Trojan.Win32.Generic!BT [Sunbelt]Mal/TDSSPack-A [Sophos]High Risk Cloaked Malware [Prevx]Trj/CI.A [Panda]Trojan/W32.TDSS.44032.DR [nProtect]TDSS.AA [Norman]Trojan:Win32/FakeCog [Microsoft]Heuristic.LooksLike.Trojan.FakeCog.B [McAfee-GW-Edition]Generic FakeAlert!cp [McAfee]

More aliases (23)

Protection System Automatic Detection Tool (Recommended)

Is your PC infected with Protection System? To safely & quickly detect Protection System, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Protection System What happens if Protection System does not let you open SpyHunter or blocks the Internet?

Technical Details

Visual & GUI Characteristics

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	coreext.dll	379
2	firewall.dll	379
3	psystem[1].exe	241
4	%ProgramFiles%\Protection System\psystem.exe	190
5	psystem.exe	96

Additional Information

The following URL's were detected:
guardlab2009.bizguardlab2009.netholdembloger.comperlineportal.comprotectyourpc.cnshouldfind.comsymupdate2.comsystemprotectionlab.comsystemprotectionlab.org

Posted: June 10, 2009 | By SpywareRemove