System Protection Tools
System Protection Tools Description
System Protection Tools is a rogue anti-malware scanner that’s just a renamed version of previously-distributed types of scamware security programs. System Protection Tools and its ancestors aren’t capable of protecting your PC from malware, but what they are capable of doing is providing fake security alerts while they try to steal your money in a software registration process. SpywareRemove.com malware researchers have found a toll-free way of registering System Protection Tools, but this should only be done as the first step towards deleting System Protection Tools from your computer with an actual anti-malware product.System Protection Tools Has All the Tools It Needs… to Steal Your Money
As a rip-off of other types of fake anti-malware scanners from the FakeVimes, System Protection Tools is both derivative and generally worthless for protecting your PC from the threats that System Protection Tools claims to detect and remove. Some of the most prolific symptoms of a System Protection Tools infection include fake pop-up warnings about nonexistent PC threats and system scans that include similar ‘cry wolf’ detections in their results. SpywareRemove.com malware analysts don’t see any reason to pay any heed to System Protection Tools’s advice or warnings, since System Protection Tools merely is designed to provide fraudulent security information that makes System Protection Tools look more useful than System Protection Tools actually is as a faux security product.
Like other rogue anti-malware applications, System Protection Tools is built to steal your money by forcing you to register its software, but there’s no need to register System Protection Tools to delete System Protection Tools from your PC, provided that you can access Safe Mode to disable System Protection Tools’s startup routine.
How to Save Yourself from a Probing by System Protection Tools’s Questionable Tool Chest
System Protection Tools and its clones are often distributed by malicious sites that fraudulently promote such scamware as being legitimate security products, with examples of such sites including secure1.personalsuiteydpz.com and www5.av-security-essentials.com. SpywareRemove.com malware researchers suggest that you use both anti-malware products and strong browser safety protocols (such as keeping your browser updated and disabling unnecessary script-based features) to protect your computer from accidental exposure to System Protection Tools through these sites. System Protection Tools and similar PC threats are often used as a payload for various Trojans (such as Zlob) that are installed onto your PC without your permission.
Because rogue security software like System Protection Tools is often complicit in browser redirect attacks or attempts to block genuine security programs, you should be prepared to disable System Protection Tools by any means that are necessary if you can’t delete System Protection Tools in an initial system scan. Windows features like Safe Mode and even more extreme measures than that, such as booting your OS from a removable drive, have been dubbed effective by SpywareRemove.com malware researchers when it comes to shutting System Protection Tools down.
System Protection Tools Automatic Detection Tool (Recommended)
Is your PC infected with System Protection Tools? To safely & quickly detect System Protection Tools, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect System Protection Tools
What happens if System Protection Tools does not let you open SpyHunter or blocks the Internet?
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 %AllUsersProfile%\[5 RANDOM CHARACTERS]\SP[RANDOM CHARACTERS].exe 410 2 System Protection Tools.lnk 403 3 %APPDATA%\System Protection Tools 396 4 %AllUsersProfile\%Application Data\[RANDOM CHARACTERS][RANDOM CHARACTERS] N/A 5 %AppData%\System Protection Tools N/A 6 %AppData%\Microsoft\Internet Explorer\Quick Launch\System Protection Tools.lnk N/A 7 %UserProfile%\Start Menu\Programs\System Protection Tools.lnk N/A 8 %UserProfile\%Start Menu\System Protection Tools N/A 9 %UserProfile\%Desktop\System Protection Tools N/A
Registry Modifications
Tutorial: To edit and delete registry entries manually, read the tutorial on
how to remove malicious registry entries.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
- The following newly produced Registry Values are:
HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disallow\Run = 01000000HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Best Antivirus Software = "%AllUsersProfile%Application Data[RANDOM CHARACTERS][RANDOM CHARACTERS].exe" /s /dHKEY_LOCAL_MACHINE\Software\microsoft\Windows NT\CurrentVersion\Image File Execution Options[RANDOM CHARACTERS].exeDebugger = svchost.exeHKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disallow\Run [1...15] - The following CLSID's were detected:
HKEY..\..\{CLSID Path} {3F2BBC05-40DF-11D2-9455-00104BC936FF}
Additional Information
- The following messages's were detected:
# Message 1 System alert Suspicious software which may be dangerous has been detected on your PC. Click here to remove this threat immediately using System Protection Tools. 2 System alert System Protection Tools has detected potentially harmful software in your system. It is strongly recommended that you register System Protection Tools to remove all found threats immediately. 3 System warning No real-time malware, spyware and virus protection was found. Click here to activate. 4 Warning Warning! Virus detected 5 Warning! Identity theft attempt detected Hidden connection IP: 128.154.26.11 Target: Microsoft Corporation keys
Posted: May 23, 2012 | By SpywareRemove
MoreThreat Level: 10/10
(No Ratings Yet)
Loading ...Rate this article:
Detection Count: 326
in task manager u can kill any process starting with bc##ect quickly as it apears this will keep it from installing then find program in your files and delete it then u can run your cleaners
please remove this from my computer I already have protection