Antiprotect

Antiprotect Description

Antiprotect aka Anti Protect is a fake security application used to swindle unsuspecting users. Antiprotect can be distributed by Trojans or malicious websites. On entering a PC Antiprotect will generate fake security alerts, pop-up warnings and scanners claiming that the system is infested with viruses, spyware and more. These annoying security alerts will also advise a victim to purchase the "full version" of Antiprotect in order to remove all the detected computer threats. This is all a scam and users should never pay for Antiprotect.

Technical Information

File System Details

Antiprotect creates the following file(s):
# File Name Detection Count
1 C:\Program Files\AntiProtect\AntiProtectMon.exe N/A
2 C:\Program Files\AntiProtect\AntiProtect.exe N/A

Registry Details

Antiprotect creates the following registry entry or registry entries:
Registry key
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AntiProtect.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiProtect]
[HKEY_LOCAL_MACHINE\SOFTWARE\AntiProtectPartner]
"AntiProtect"="'"C:\Program Files\AntiProtect\AntiProtect.exe" /run1'"
[HKEY_LOCAL_MACHINE\SOFTWARE\AntiProtect]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]