"Protection System Security" Alert

"Protection System Security" Alert Description

"Protection System Security" Alert is a counterfeit security alert initiated by the rogue anti-spyware application called Protection System. The "Protection System Security" Alert pop-up window reads as follows:

"Protection System security alert.

Your computer is being attacked from a remote PC. Attack from 240.105.231.105:10484.

Block your computer Internet access to prevent system infection? Windows Firewall has blocked this program from accepting connection from the Internet or a network. If you recognize the program or trust the publisher, you can unblock it."

This fake security alert is attempting to trick the user into blocking internet connections in order to protect the system from threats that do not exist. The user will then be prompted to purchase and install the fake spyware remover Protection System.

Technical Information

Registry Details

"Protection System Security" Alert creates the following registry entry or registry entries:
RegistryKey
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Protection System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Protection System"
HKEY_CURRENT_USER\Software\ ProtectionSystem
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.