Protection System
Protection System is a rogue anti-spyware application originating from the FakeCog (CoreGuard) family, the same family ofCoreGuard Antivirus 2009 fake spyware remover. Protection System infiltrates the computer via security vulnerabilities and backdoors provided by affiliated trojans. Once active, Protection System is configured to start automatically, prompting the user to run a fake online scan. When this scan is complete, fabricated infection reports are displayed, usually intimidating the user into purchasing the rogue spyware remover Protection System.
Protection System has various clones among its family members that include PC Protection Center 2008, CoreGuard Antivirus 2009, Paladin Antivirus, Dr.Guard, User Protection, Your Protection, Digital Protection, Data Protection, Protection Center, Defense Center, AnVi, PC Protection Center, Virus.DOS.RogueAntiSpyware, Fraud.Defense Center, Malware Protection Center, Adware.PCProtectionCenter.
Table of Contents
Aliases
15 security vendors flagged this file as malicious.
Anti-Virus Software | Detection |
---|---|
TrendMicro | TROJ_FAKECOG.X |
Sunbelt | Trojan.Win32.Generic!BT |
Sophos | Mal/TDSSPack-A |
Panda | Trj/CI.A |
Microsoft | Trojan:Win32/FakeCog |
McAfee-GW-Edition | Heuristic.LooksLike.Trojan.FakeCog.B |
McAfee | Generic FakeAlert!cp |
Ikarus | Packed.Win32.Tdss |
Fortinet | W32/Tdss.Y |
F-Secure | Packed.Win32.TDSS.y |
eTrust-Vet | Win32/Alureon.AIW |
eSafe | Suspicious File |
DrWeb | Trojan.Fakealert.4594 |
CAT-QuickHeal | Trojan.TDSS.y |
BitDefender | Trojan.Generic.2520982 |
SpyHunter Detects & Remove Protection System
File System Details
# | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
---|---|---|---|
1. | coreext.dll | 8c3693189cdb7c6e01f2cab068579d76 | 0 |
2. | firewall.dll | bb567208b4a3429cc64dc26d0339a95e | 0 |
3. | psystem.exe | 5604e9e2f69110caaeda44a22916f741 | 0 |
4. | psystem.exe | d9f2b005920d56abe854aa54a23bc0d6 | 0 |
5. | psystem.exe | 180a93e777521710895083a0a22205b6 | 0 |
6. | psystem[1].exe | a75dc448bcb618c50c8ad76701228ee4 | 0 |
7. | psystem.exe | efb0890aa991793c26579a3c46e95fcb | 0 |
URLs
Protection System may call the following URLs:
guardlab2009.biz |
guardlab2009.net |
holdembloger.com |
perlineportal.com |
protectyourpc.cn |
shouldfind.com |
symupdate2.com |
systemprotectionlab.com |
systemprotectionlab.org |