VirusProtect
From Wiki-Security, the free encyclopedia of computer security
|
|||||||||||||||||||||
VirusProtect is a rogue anti-spyware program installs itself onto your PC without your permission, usually through a Trojan known as Zlob. Once the Zlob Trojan is installed, it launches on Windows startup and bombards you with false warning messages. VirusProtect also shows misleading scan results in order to trick you in obtaining the full version of the program. It is extremely difficult to remove VirusProtect or Zlob manually because this program may continue to try to recreate itself. VirusProtect is associated with other rogue anti-spyware programs, including VirusProtect Pro, VirusRay and AntiVirGear.
To check your computer for VirusProtect, download
SpyHunter Spyware Detection Tool.
SpyHunter spyware detection tool is only a scanner meant to assist you in detecting VirusProtect and other threats. If you detect the presence of VirusProtect on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of VirusProtect.
Contents |
Detection of VirusProtect (Recommended)
VirusProtect is difficult to detect and remove. VirusProtect is not likely to be removed through a convenient "uninstall" feature. VirusProtect, as well as other spyware, can re-install itself even after it appears to have been removed.
You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove VirusProtect and other spyware, adware, trojans and viruses on your computer.
Run a VirusProtect scan/check to successfully detect all VirusProtect files with the SpyHunter Spyware Detection Tool. If you wish to remove VirusProtect, you can either purchase the SpyHunter spyware removal tool to remove VirusProtect or follow the VirusProtect manual removal method provided in the "Remedies and Prevention" section.
Method of Infection
There are many ways your computer could get infected with VirusProtect. VirusProtect can come bundled with shareware or other downloadable software.
Another method of distributing VirusProtect involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing VirusProtect on your system. VirusProtect installs on your computer through a trojan and may infect your system without your knowledge or consent.
If you think you may already be infected with VirusProtect, use this SpyHunter Spyware dectection tool to detect VirusProtect and other common Spyware infections. After detection of VirusProtect, the next advised step is to remove VirusProtect with the purchase of the SpyHunter Spyware removal tool.
Symptoms
VirusProtect may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of VirusProtect from your computer.
Remedies and Prevention
VirusProtect, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. VirusProtect along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.
Install a good anti-spyware software
When there's a large number of traces of Spyware, for example VirusProtect, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect VirusProtect and other types of spyware.
Remove VirusProtect manually
Another method to remove VirusProtect is to manually delete VirusProtect files in your system. Detect and remove the following VirusProtect files:
Processes
- VirusProtect 3.8.exe
- VirusProtect_3.9.exe
- VirusProtect 3.9.exe
DLLs
- fftktmk.dll
- ryxrho.dll
- gusur.dll
- vpccw.dll
- moywh.dll
- ucmbegr.dll
- rldyt.dll
- wygomd.dll
- chzbi.dll
- uglgs.dll
- ivrllc.dll
- wxinptv.dll
- monem.dll
- ymmzwd.dll
- pmspl.dll
- vtssp.dll
- wowlze.dll
- ncrjf.dll
- tvtpwp.dll
- ecxwp.dll
- bdzzzcl.dll
- emlkdvo.dll
- fsehfcu.dll
- qhcvdw.dll
Other Files
- VirusProtect 3.8url
- VirusProtect 3.8 Website.lnk
- VirusProtect 3.8.lnk
- Uninstall AntiVirGear 3.8.lnk
- vp.dat
- VirusProtect 3.8
- Uninstall VirusProtect 3.8.lnk
- %ProgramFiles%\VirusProtect 3.8
- VirusProtect 3.9
- VirusProtect 3.9.lnk
- Uninstall VirusProtect 3.9.lnk
- VirusProtect 3.9 Website.lnk
- VirusProtect 3.9.url
- %ProgramFiles%\VirusProtect 3.9
- emlkdvo.dll-removed_skip
Registry Keys
- 3750da11-9b0c-4a75-9c8a-bbcbfcd1ccea
- 21688E5D-A895-4B60-B127-B76607420334
- 40E563B2-61B2-4215-819A-A7E24CF8AA3E
- 45FBEFBF-E8B6-44A5-B0A1-A143E1A74816
- 5146B43E-B36D-4A2A-B617-CC05CC500150
- 5B8BED0F-5F18-4051-9908-C5C569A1AAE9
- 63667718-EBF2-4CAB-B1E8-994D41589C24
- 972F0BE3-976F-40B8-8EB4-88A25987416E
- 9F80EA2D-53CF-4AA5-A154-F4FBF1EF6A5A
- A35F8FAC-755D-4F90-A5D3-F7E18D9EB100
- C269F4C1-7558-4DFC-9FB6-4C149B482586
- CE92A296-3142-493C-B64E-6ED73EAFB9AE
- D7C0DF6C-91FF-48BD-AD98-E35769394138
- D8EC2704-B249-4495-A7A4-A90857BDDF4D
- D91E9F36-9E44-44AB-803C-0D941FDA7988
- E0757BDD-69BE-4C3F-AFC6-50D6524FA9B6
- F2F8C877-B06C-4B5E-95E7-AACFC9E8219D
- 3B8E549E-0C73-4AAB-8939-5EA2ED102CC6
- Microsoft\Windows\CurrentVersion\App Paths\VirusProtect 3.8.exe
- VirusProtect 3.8
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\8373a2e0-bdd0-42bd-b4ec-ba5451eb6607
- Software\Microsoft\Internet Explorer\URLSearchHooks\8373a2e0-bdd0-42bd-b4ec-ba5451eb6607
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\d653e105-3e53-480a-b129-54d957d174bb
- 8373a2e0-bdd0-42bd-b4ec-ba5451eb6607
- d653e105-3e53-480a-b129-54d957d174bb
- Microsoft\Windows\CurrentVersion\App Paths\VirusProtect 3.8.exe 3.8
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\b0883848-1466-4470-a418-3fe7d36694b9
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\e221f0dc-2696-4b2e-bd63-25b33dc19b6e
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\3ae12a89-2063-409b-87f2-f809a6e76862
- b0883848-1466-4470-a418-3fe7d36694b9
- e221f0dc-2696-4b2e-bd63-25b33dc19b6e
- 3ae12a89-2063-409b-87f2-f809a6e76862
- Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\76fbb79c-2ec6-4962-a324-fd4362588e1c
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\b585105c-0e84-4ef0-9c6a-fbe134a72945
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\95ed0779-42e8-41d3-a2e3-01691fb2fd5d
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\9b7958db-d4ef-4879-8044-e156a58c1a61
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\075a465d-0af2-4b79-8db3-2fda0fd8d74c
- 76fbb79c-2ec6-4962-a324-fd4362588e1c
- b585105c-0e84-4ef0-9c6a-fbe134a72945
- 95ed0779-42e8-41d3-a2e3-01691fb2fd5d
- 9b7958db-d4ef-4879-8044-e156a58c1a61
- 075a465d-0af2-4b79-8db3-2fda0fd8d74c
- D17CFF74-A19C-4C36-821A-E074E4F889CA
- 6F6D1C90-7BEE-4A15-8DAB-9C37A643FD3A
- FF5137B5-C506-4D9B-8682-E0BE4675B899
- 17A1DBB5-DAD8-4E78-BF7E-9BE4B965408B
- E856E05E-1B91-4339-9EFC-9A3308CB5491
- A1259BC7-68B1-4CCA-9294-C180A713E1F7
- d8b937a4-cdad-497b-a872-8da7c4c3ef6f
- dec5caa7-8045-495c-8034-35aff489fedf
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\c0ca766d-060c-48e1-b536-205e321bd174
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\8b87dcc7-9b89-4205-aa82-076b2a1edfe0
- 0979850F-6C3E-4294-B225-B3D3C4A6F2A1
- 1BB2DA5F-B78F-44EA-BDA1-771CBE1DEC68
- 2A4E73C5-BA3C-4391-B7E5-FFE8D3BD6245
- 44A923CA-F430-4F85-9F84-5153ECDB882E
- 4E6E21EC-9D72-4164-8A53-74786A467872
- 631E9E48-B066-43DA-92AC-6DADF61B173B
- 65C1361C-E696-4AF0-9E21-81910193F352
- 77DCE805-C8CE-48AA-A47F-BFA6CC7704B3
- 8D42769F-07D8-494D-AAB4-AA1652C541FA
- A1922071-390C-418D-916D-91209E95D286
- A1F8CD95-CFB3-43D1-A956-63441CC058C1
- A63B46AD-96A7-4A2C-BD8F-8CD097E1593A
- A65F98DD-2360-468C-B76E-B1B84C0D547C
- AE2AEED0-BE1B-4BA2-826E-20D1991081B8
- D7F73787-6206-4BBA-BDC0-7CFA9940DBCB
- E770F739-2968-4ED9-A63C-DC1938DC82A2
- CFAFA83C-855B-4E3D-92B9-A587995B675A
- 0BD06CA9-D39D-470C-AD69-40B2D20ED44E
- 1FCE299D-2509-4156-8F35-737685DA33D6
- 477C7CD6-CAAD-43F5-96FB-C8F0F580F7E2
- 4A878A6E-E373-4F79-9B72-F6E3B6573FA4
- 559FB885-1610-4359-B22F-CE0A0C7B1220
- 582ECCC8-C5BC-4EC4-8B0A-40274533088F
- 7060E07A-79A7-492E-8716-685840C41D3A
- 7D93B305-D932-45FF-B484-B96BAF433B18
- 90E25318-2612-48DB-AD52-4D64B1E79368
- 91335813-BFA8-493C-9ED5-E76A4F65F093
- 9A44471D-1B69-4834-881C-E8E85D198186
- A71C08E5-E038-4672-943F-B386DE479944
- B20B249C-97C3-43F4-A560-A2C5239FBC50
- BD94CBD6-0B47-4327-8192-23BA274F7FD3
- F761F695-FD28-42D3-A669-C3FC8309A6F8
- FE2D4E30-10F9-4F16-B2D9-4D7A02F0AF34
- D2F6E4C0-349A-4A64-A773-C14661D5A9E4
- VirusProtect 3.9
- Microsoft\Windows\CurrentVersion\App Paths\VirusProtect 3.9.exe 3.9
- c0ca766d-060c-48e1-b536-205e321bd174
- 8b87dcc7-9b89-4205-aa82-076b2a1edfe0
- Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\3e0cee63-f8bc-4485-a745-cc01b2a0e9d9
- 3e0cee63-f8bc-4485-a745-cc01b2a0e9d9
- Software\Microsoft\Internet Explorer\Toolbar\114B82D9-FBBF-4CED-8DDC-B42DCF85E18E
- Software\Microsoft\Internet Explorer\Toolbar\47906C8A-7A72-45A8-AA59-0CEC20BD3B36
- Software\Microsoft\Internet Explorer\Toolbar\13EDA0D4-F00D-43B9-8EF2-6313909D3143
- 114B82D9-FBBF-4CED-8DDC-B42DCF85E18E
- 47906C8A-7A72-45A8-AA59-0CEC20BD3B36
- 13EDA0D4-F00D-43B9-8EF2-6313909D3143
- Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe
- aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe
- Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
- c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
- SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\67dc0736-075a-4647-95f5-d5421b838fed
- 67dc0736-075a-4647-95f5-d5421b838fed
Known Variants
VirusBurst is a re-branded variant of other well-known rogue anti-spyware programs, including SpywareQuake, SpyFalcon, SpywareStrike, SpySheriff, SpyHeal and many other pseudonyms.
External links
 |
|
- Remove VirusProtect - Easy VirusProtect removal steps. Parasite database on how to remove spyware and rogue anti-spyware programs.
- McAfee Threat Center - Library of detailed information on viruses.
- How Spyware And The Weapons Against It Are Evolving
- Crimeware: Trojans & Spyware
- Windows System Update - Latest bug fixes for Microsoft Windows
- Manual Removal Instructions for VirusProtect - Learn how to remove VirusProtect.
|