My Protection
My Protection is a rogue malware remover that reports false threats and displays fake security alerts on your PC. MyProtection does this to convince you that your computer is infected with malware. This fake program is installed stealthily via Trojans and often comes bundled with other malicious software. My Protection is part of a blatant scam used to con you into paying for removal of infections which don't exist. Remove MyProtection and all associated threats using an updated malware remover.
File System Modifications
- The following files were created in the system:
# File Name 1 %Documents and Settings%\{UserName}\Application Data\Microsoft\Internet Explorer\Quick Launch\My Protection.lnk 2 %Documents and Settings%\{UserName}\Desktop\My Protection Support.lnk 3 %Documents and Settings%\{UserName}\Desktop\My Protection.lnk 4 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection 5 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\About.lnk 6 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Activate.lnk 7 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Buy.lnk 8 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\My Protection Support.lnk 9 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\My Protection.lnk 10 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Scan.lnk 11 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Settings.lnk 12 %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Update.lnk 13 %Program Files%\My Protection 14 %Program Files%\My Protection\about.ico 15 %Program Files%\My Protection\activate.ico 16 %Program Files%\My Protection\buy.ico 17 %Program Files%\My Protection\drg.db 18 %Program Files%\My Protection\drgext.dll 19 %Program Files%\My Protection\drghook.dll 20 %Program Files%\My Protection\help.ico 21 %Program Files%\My Protection\scan.ico 22 %Program Files%\My Protection\settings.ico 23 %Program Files%\My Protection\splash.mp3 24 %Program Files%\My Protection\uninstall.exe 25 %Program Files%\My Protection\update.ico 26 %Program Files%\My Protection\virus.mp3
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Protection"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"HKEY_LOCAL_MACHINE\SOFTWARE\My ProtectionHKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExtHKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExtHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}My Protection
My friend has just had My Protection infest his PC it had shut down his anti virus and wouldn\\\\\\\'t let that or any other similar software load, I first went into Add and Remove programs and deleted My Protection, then I went through the registry and deleted all reference to My Protection then I had to go into My Computer C/programs open My Protection and delete every individual entry some couldn\\\\\\\'t be deleted, I then restarted the computer and went back to C/programes and was able to delete the rest,only then could I reload his antivirus, a virus check done the rest now his computer is running faster than before.
TO OPEN REGISTRY
CLICK ON START
CLICK RUN
TYPE IN regedit (then enter)
CLICK ON EDIT
CLICK FIND
TYPE IN My Protection (at this point the registry will search for any reference to my protection)
A HIGHLIGHTED ENTRY WILL SHOW
RIGHT CLICK ON THIS AND DELETE
THEN CLICK ON EDIT AGAIN THEN FIND NEXT AND REPEAT PROCESS TILL THE SEARCH IS COMPLETE