Threat Database Fake Error Messages Protection System pop-up

Protection System pop-up

"Protection System" pop-up is a fake security alert initiated by the rogue anti-spyware application known as Protection System. The Protection System pop-up reads as follows:

"Protection System.

There is unauthorized software detected on your computer. It is recommended you remove it, otherwise it could conflict with Protection System. Press 'OK' to remove Malwarebytes' Anti-Malware_is1."

This fake security notification is prompting the user to unknowingly disable legitimate security software in order for Protection System to more easily install onto the compromised machine. Remove Protection System pop-up as soon as possible.

File System Details

Protection System pop-up may create the following file(s):
# File Name Detections
1. %Program Files%\Protection System\firewall.dll
2. %Program Files%\Protection System\Protection System.exe
3. %Program Files%\Protection System\Uninstall.exe
4. %Program Files%\Protection System\CoreExt.dll
5. %Program Files%\Protection System\Help\images\tick.png
6. %Program Files%\Protection System\Help\images\delete.png
7. %Program Files%\Protection System\Help\images\warn.png
8. %UserProfile%\Start Menu\Programs\Protection System\Protection System.lnk
9. %Program Files%\Protection System\Help\images\buttons\voice.gif
10. %Program Files%\Protection System\Help\images
11. %UserProfile%\Start Menu\Programs\Protection System
12. %Program Files%\Protection System\Help\support.png
13. %Program Files%\Protection System\Help\images\info.png
14. %Program Files%\Protection System\blacklist.cga
15. %UserProfile%\Start Menu\Programs\Protection System\Uninstall Protection System.lnk
16. %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Protection System.lnk
17. %Program Files%\Protection System\Help\images\buttons\offline.gif
18. %Program Files%\Protection System\Help
19. %Program Files%\Protection System\Help\unreg.html
20. %Program Files%\Protection System\Help\images\plus_circle.png
21. %Program Files%\Protection System\core.cga
22. %Program Files%\Protection System\Help\reg.html
23. %UserProfile%\Desktop\Protection System.lnk
24. %Program Files%\Protection System\Help\images\buttons\online.gif
25. %Program Files%\Protection System
26. %Program Files%\Protection System\Help\images\buttons

Registry Details

Protection System pop-up may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\ ProtectionSystem
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Protection System"

Trending

Most Viewed

Loading...