Home Malware Programs Rogue Anti-Virus Programs Antiprotect

Antiprotect

Posted: November 3, 2010

Antiprotect (or Anti Protect) is a rogue anti-virus program that reports false threats and displays fake security alerts on your PC. Anti Protect does this to convince you that your computer is infected with malware. This fake program is promoted and installed through the use of Trojans and often comes bundled with other malicious software. Antiprotect is part of a blatant scam used to con you into paying for removal of infections which don't exist. Remove Anti Protect and all associated threats using an updated anti-virus program.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Program Files\AntiProtect\AntiProtect.exe
    2 C:\Program Files\AntiProtect\AntiProtectMon.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_LOCAL_MACHINE\SOFTWARE\AntiProtectPartner][HKEY_LOCAL_MACHINE\SOFTWARE\AntiProtect][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiProtect.exe]HKEY..\..\..\..{RegistryKeys}"AntiProtect"="'"C:\Program Files\AntiProtect\AntiProtect.exe" /run1'"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}AntiProtect]
Loading...