Your Protection

Your Protection Description

ScreenshotYour Protection is not a program that you ever want to use for the detection and removal of spyware because it does not have those capabilities. Once installed, Your Protection is known to display fake alert messages that read similar to the following:

"Antivirus Alert - Critical threat detected
Warning: Network attack detected
Network attack has been detected. Process is attempting to access your private data."

Your Protection must be detected and removed by a spyware removal tool to limit damages that can be caused by attempting manual removal.

Your Protection is a fake anti-spyware program that belongs to the FakeCog (CoreGuard) family and comes from the hackers that created the rogues known as PC Protection Center 2008, CoreGuard Antivirus 2009, Protection System, Adware.PCProtectionCenter, Paladin Antivirus, Dr.Guard, User Protection, Digital Protection, Data Protection, Protection Center, Defense Center, AnVi, PC Protection Center, Virus.DOS.RogueAntiSpyware, Fraud.Defense Center, Malware Protection Center.

Aliases: High Risk Fraudulent Security Program, Trojan.FakeAV, TROJ_TDSS.SMDI [TrendMicro], Trojan.FakeAV!gen25 [Symantec], W32/FakeAV.LWX, Trojan:Win32/Rundis.gen!A [Microsoft], Trojan.Rundis.258560.A.1 [McAfee-GW-Edition], Trojan-Downloader.Win32.FraudLoad.xacn [Kaspersky], Trojan.Win32.FakeAV [Ikarus], Win32.Kryptik.Dna [eSafe], Gen:Variant.TDss.2 [BitDefender], SHeur3.PSA [AVG], Win32:Jifas-EZ [Avast], TR/Rundis.258560.A.1 [AntiVir] and Trojan.Win32.FakeAV!IK [a-squared].

Technical Information

Screenshots & Other Imagery

Your Protection Image 1 Your Protection Image 2 Your Protection Image 3

File System Details

Your Protection creates the following file(s):
# File Name Size MD5 Detection Count
1 %WINDIR%\system32\qonmnk.dll 90,624 ccc3c92fb0671a485d183d0921d2e921 1
2 urphook.dll 22,016 d9e77ff0377c509f61a9b5c4c0640bcd 0
3 urpprot.exe 2,359,296 b04a78c75c7cc5f4a5de4bf3f209ca1b 0
4 urpext.dll 40,960 1a381d401a8e0479b628bcaaf6260e1e 0
5 mplay32xe.exe 258,560 62753e392367602dcf68c7bfba5a6851 0
More files

Registry Details

Your Protection creates the following registry entry or registry entries:
Directory
%ProgramFiles%\Your Protection

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.