Threat Database Fake Error Messages "Protection System Security" Alert

"Protection System Security" Alert

"Protection System Security" Alert is a counterfeit security alert initiated by the rogue anti-spyware application called Protection System. The "Protection System Security" Alert pop-up window reads as follows:

"Protection System security alert.

Your computer is being attacked from a remote PC. Attack from 240.105.231.105:10484.

Block your computer Internet access to prevent system infection? Windows Firewall has blocked this program from accepting connection from the Internet or a network. If you recognize the program or trust the publisher, you can unblock it."

This fake security alert is attempting to trick the user into blocking internet connections in order to protect the system from threats that do not exist. The user will then be prompted to purchase and install the fake spyware remover Protection System.

File System Details

"Protection System Security" Alert may create the following file(s):
# File Name Detections
1. %Program Files%\Protection System\firewall.dll
2. %Program Files%\Protection System\Protection System.exe
3. %Program Files%\Protection System\Uninstall.exe
4. %Program Files%\Protection System\CoreExt.dll
5. %Program Files%\Protection System\Help\images\plus_circle.png
6. %Program Files%\Protection System\Help\images\tick.png
7. %Program Files%\Protection System\Help\images\buttons\offline.gif
8. %Program Files%\Protection System\Help\images\warn.png
9. %UserProfile%\Start Menu\Programs\Protection System\Protection System.lnk
10. %Program Files%\Protection System\Help\images
11. %UserProfile%\Start Menu\Programs\Protection System
12. %Program Files%\Protection System\Help\support.png
13. %Program Files%\Protection System\Help\images\delete.png
14. %Program Files%\Protection System\Help\images\buttons\online.gif
15. %Program Files%\Protection System\blacklist.cga
16. %UserProfile%\Start Menu\Programs\Protection System\Uninstall Protection System.lnk
17. %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Protection System.lnk
18. %Program Files%\Protection System\Help
19. %Program Files%\Protection System\Help\unreg.html
20. %Program Files%\Protection System\Help\images\info.png
21. %Program Files%\Protection System\Help\images\buttons\voice.gif
22. %Program Files%\Protection System\core.cga
23. %Program Files%\Protection System\Help\reg.html
24. %UserProfile%\Desktop\Protection System.lnk
25. %Program Files%\Protection System
26. %Program Files%\Protection System\Help\images\buttons

Registry Details

"Protection System Security" Alert may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Protection System"
HKEY_CURRENT_USER\Software\ ProtectionSystem
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}

Trending

Most Viewed

Loading...