NeoProtect

NeoProtect (Neo Protect) is a rogue security program from the same family as ByeClean. Neo Protect uses scare tactic to coerce victims into purchasing its non-existent "full version". Users should not trust any of the scanners, security alerts and pop-up warning displayed by Neo Protect, they are all fake. Neo Protect is a useless application that users should never waste their money purchasing.

File System Details

NeoProtect may create the following file(s):
# File Name Detections
1. C:\Program Files\SMS1000\SMS1000Main\smsuux.exe
2. C:\WINDOWS\system32\smsmalldel.exe
3. C:\Program Files\neoprotect\InfoTab_IF91.exe
4. C:\Program Files\neoprotect\neoprotect.exe
5. C:\Program Files\SMS1000\SMS1000Main\smsmux.exe
6. C:\Program Files\SMS1000\SMS1000Main\smsmupdater.exe
7. C:\Program Files\InfoTab\InfoTab.dll
8. C:\Program Files\Common Files\neoprotect\neopuninst.exe
9. C:\Program Files\neoprotect\NEOPInstRB2.exe
10. C:\Program Files\neoprotect\neopwcher.exe
11. C:\Documents and Settings\\Local Settings\Temp\IFU1008.exe
12. C:\Program Files\JAinfo\iesearch.dll
13. C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\18GY3K5D\IFU1008[1].exe
14. C:\Program Files\neoprotect\neophk.dll
15. C:\Program Files\neoprotect\neopupdater.exe
16. C:\Program Files\SMS1000\SMS1000Main\uninst.exe
17. C:\Program Files\SMS1000
18. C:\Program Files\neoprotect\neopli.ini
19. C:\Program Files\neoprotect
20. C:\Program Files\neoprotect\neopai.ini
21. C:\Program Files\SMS1000\SMS1000Main\smsm.ico
22. C:\Program Files\Common Files\neoprotect
23. C:\Program Files\SMS1000\SMS1000Main
24. C:\Program Files\neoprotect\neopsc.dat

Registry Details

NeoProtect may create the following registry entry or registry entries:
HKEY_CLASSES_ROOT\Interface\{08c5a58c-68d0-4cf8-be4b-d6d7e060e28d}
HKEY_CLASSES_ROOT\notifywindow.notifyctl
HKEY_CLASSES_ROOT\CLSID\{66d6d3c9-b007-421f-89ee-778ccaad1f45}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sms1000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InfoTab
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sms1000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify
HKEY_CLASSES_ROOT\TypeLib\{4a327d46-fa44-436c-8433-6688074d331a}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6cefa6c6-033f-4ae0-933f-d4ca81045c65}
HKEY_CLASSES_ROOT\Interface\{f75e6bd7-9e08-4413-9feb-d9265fcae8a5}
HKEY_CLASSES_ROOT\notifywindow.notifyctl.1
HKEY_CURRENT_USER\Software\SMS1000Update
HKEY_LOCAL_MACHINE\SOFTWARE\SMS1000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\neoprotect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify
HKEY_CLASSES_ROOT\iesearch.mon
HKEY_CLASSES_ROOT\CLSID\{6cefa6c6-033f-4ae0-933f-d4ca81045c65}
HKEY_CLASSES_ROOT\TypeLib\{77e5052e-532c-4900-b2bf-734a0f5d3aa7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66d6d3c9-b007-421f-89ee-778ccaad1f45}
ccessfully.
HKEY_LOCAL_MACHINE\SOFTWARE\neoprotect
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sms1000update
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify

Trending

Most Viewed

Loading...