1. What is User Protection?
User Protection is a computer program (rogue software) that deceives and misleads user into buying useless software license in order to remove fake computer threats. The program does not supply reliable anti-spyware protection and uses high pressure sales tactics to receive unauthorized cash transfers. User Protection generates erroneous and misleading alerts what allows to classify the program as a scareware.
Once installed, User Protection will start and perform PC scan each time Windows is loaded. After the scan has been finished a list of found viruses, trojans and other malicious objects will be displayed in the form of report, which are considered as fake detections covered by windows system files or files belonging to legitimate computer software. All of this fraud is carried out to make user think that his computer system is infected and needs protection. Thus user is offered to purchase User Protection license in order to remove found threats.
User Protection display alert messages that are similar to the ones generated by windows:
Once installed, User Protection will start and perform PC scan each time Windows is loaded. After the scan has been finished a list of found viruses, trojans and other malicious objects will be displayed in the form of report, which are considered as fake detections covered by windows system files or files belonging to legitimate computer software. All of this fraud is carried out to make user think that his computer system is infected and needs protection. Thus user is offered to purchase User Protection license in order to remove found threats.
User Protection display alert messages that are similar to the ones generated by windows:
- Warning! Most of the viruses and worms on your PC because of visiting pornosites or warez/torrent sites.
- Antivirus Alert - Critical threat detected. Network attack has been detected. Process is attempting to access your private data. It is strongly recommended to block this threat now to prevent privacy data theft.
- Warning! Keylogger detected! PDM.Keylogger activity has been detected. Process is trying to redirect keyboard input. Your passwords and other private information are at risk. Please click the button below to block and remove this threat now.
2. User Protection screen shot:
3. How to remove User Protection:
- Internet connection might be disabled or Internet browser might be blocked by User Protection, so it won't be possible to download any files to infected computer. In this case please download all files required for User Protection removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
- To remove User Protection download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
-
After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:
-
After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove User Protection.
- Restart the computer to complete User Protection removal procedure.
4. User Protection files:
C:\Program Files\User Protection\usrprot.exe5. Hijackthis entries:
O4 - HKCU\..\Run: [User Protection] "C:\Program Files\User Protection\usrprot.exe" -noscan |