My Protection
From Wiki-Security, the free encyclopedia of computer security
|
||||||||||||||||
My Protection is a fake anti-virus program, which means that it is a parasite that tries to pass itself off as beneficial software. There is no real anti-virus application in My Protection, and it has no functionality whatsoever, because it is incapable of protecting your computer in any way. My Protection is an infection and a scam.
My Protection's History and Infection Process
My Protection appeared on the web around early April 2010. It is essentially the same malware as Your Protection, Dr. Guard, and User Protection; furthermore, since rogue anti-virus applications tend to be only slightly altered clones of earlier rogues, it is likely that there are and will be other rogue security programs that are clones of My Protection.My Protection gets onto a system by using a Trojan. Specifically, My Protection is installed by the Zlob Trojan, and the Trojan is typically hidden on a fake "free virus scan" site or a sketchy video site, and it is downloaded when you think you are only allowing something harmless onto your computer. Then the Trojan is responsible for infecting the PC with My Protection. Most likely, the first time you notice My Protection will be when it has already set itself up and altered some of your computer's settings.
My Protection will alter the registry so that it starts as soon as Windows starts, and then runs in the background. Then it shows a fake system scan, with a fake fictitious list of results, in order to get you to believe the system is infected with a bunch of different viruses. My Protection can also cause pop-ups to appear from the system tray, and these pop-ups will contain warnings about viruses found on your computer and attacks detected, with wording that is as extreme and as scary as possible. Every warning message and scan result will come with a prompt, advising you to buy My Protection in its "full" version. If you follow these prompts, you will be directed to a bogus purchase website. Under no circumstances should you pay money for anything relating to My Protection – remember that the whole thing is a scam!
Other Potential Problems Caused by My Protection
There have been reports that My Protection will try to uninstall any real anti-virus software that it finds on your computer. Typically, My Protection will create a warning message that says that it has discovered that your actual anti-virus software is infected with a virus, and it will prompt you to remove that software. Since My Protection is not capable of detecting threats, this is only an attempt at self-preservation; real anti-virus applications will likely detect My Protection as the threat that it is.My Protection may sometimes come bundled with another piece of malware called RootkitTDSS, and it also may try to change your desktop background. Regardless of these potential effects, My Protection will consume large amounts of system resources, causing your computer to run more slowly or even crash.
My Protection cannot be trusted. Its whole reason for being is to use scare tactics in order to steal your money. Do not believe what My Protection tells you, and do not try to get it to go away by paying for it. My Protection has no business hanging out on your PC, and you are able to eliminate it.
To check your computer for My Protection, download
SpyHunter Spyware Detection Tool.
SpyHunter spyware detection tool is only a scanner meant to assist you in detecting My Protection and other threats. If you detect the presence of My Protection on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of My Protection.
Contents |
Detection of My Protection (Recommended)
My Protection is difficult to detect and remove. My Protection is not likely to be removed through a convenient "uninstall" feature. My Protection, as well as other spyware, can re-install itself even after it appears to have been removed.
You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove My Protection and other spyware, adware, trojans and viruses on your computer.
Run a My Protection scan/check to successfully detect all My Protection files with the SpyHunter Spyware Detection Tool. If you wish to remove My Protection, you can either purchase the SpyHunter spyware removal tool to remove My Protection or follow the My Protection manual removal method provided in the "Remedies and Prevention" section.
Method of Infection
There are many ways your computer could get infected with My Protection. My Protection can come bundled with shareware or other downloadable software.
Another method of distributing My Protection involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing My Protection on your system. My Protection installs on your computer through a trojan and may infect your system without your knowledge or consent.
If you think you may already be infected with My Protection, use this SpyHunter Spyware dectection tool to detect My Protection and other common Spyware infections. After detection of My Protection, the next advised step is to remove My Protection with the purchase of the SpyHunter Spyware removal tool.
Symptoms
My Protection may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of My Protection from your computer.
Remedies and Prevention
My Protection, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. My Protection along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.
Install a good anti-spyware software
When there's a large number of traces of Spyware, for example My Protection, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect My Protection and other types of spyware.
Remove My Protection manually
Another method to remove My Protection is to manually delete My Protection files in your system. Detect and remove the following My Protection files:
Processes
- %Program Files%\My Protection\uninstall.exe
DLLs
- %Program Files%\My Protection\drgext.dll
- %Program Files%\My Protection\drghook.dll
Other Files
- %Program Files%\My Protection\drg.db
- %Program Files%\My Protection\help.ico
- %Program Files%\My Protection\scan.ico
- %Program Files%\My Protection\settings.ico
- %Program Files%\My Protection\splash.mp3
- %Program Files%\My Protection\update.ico
- %Program Files%\My Protection\virus.mp3
- %Program Files%\My Protection
- %Program Files%\My Protection\about.ico
- %Program Files%\My Protection\activate.ico
- %Program Files%\My Protection\buy.ico
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\My Protection.lnk
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Scan.lnk
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Settings.lnk
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Update.lnk
- %Documents and Settings%\{UserName}\Application Data\Microsoft\Internet Explorer\Quick Launch\My Protection.lnk
- %Documents and Settings%\{UserName}\Desktop\My Protection Support.lnk
- %Documents and Settings%\{UserName}\Desktop\My Protection.lnk
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\About.lnk
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Activate.lnk
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\Buy.lnk
- %Documents and Settings%\{UserName}\Start Menu\Programs\My Protection\My Protection Support.lnk
Registry Keys
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
- HKEY_LOCAL_MACHINE\SOFTWARE\My Protection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\My Protection
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "My Protection"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
- HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt
- HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
External links
|
- Remove My Protection - Easy My Protection removal steps. Parasite database on how to remove spyware and rogue anti-spyware programs.
- McAfee Threat Center - Library of detailed information on viruses.
- How Spyware And The Weapons Against It Are Evolving
- Crimeware: Trojans & Spyware
- Windows System Update - Latest bug fixes for Microsoft Windows
|