Protection System Pop-up Description

“Protection System” pop-up is a fake security alert initiated by the rogue anti-spyware application known as Protection System. The Protection System pop-up reads as follows:

“Protection System.
There is unauthorized software detected on your computer. It is recommended you remove it, otherwise it could conflict with Protection System. Press ‘OK’ to remove Malwarebytes’ Anti-Malware_is1.”

This fake security notification is prompting the user to unknowingly disable legitimate security software in order for Protection System to more easily install onto the compromised machine. Remove Protection System pop-up as soon as possible.

Type: Fake Warning Messages

Automatic Detection of Protection System Pop-up

Protection System Pop-up has typically the following processes in memory:

• %Program Files%\Protection System\firewall.dll
• %Program Files%\Protection System\Protection System.exe
• %Program Files%\Protection System\Uninstall.exe
• %Program Files%\Protection System\CoreExt.dll

Protection System Pop-up creates the following registry entries:

• HKEY_CURRENT_USER\Software\ ProtectionSystem
• HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection System
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Protection System”

Important Article Disclaimer