Thursday, April 15, 2010

Your Protection Removal GuideYour Protection Removal Guide

Your Protection Removal Guide
Your Protection is a dangerous rogue anti-spyware program. Your Protection comes from the same family of rogues as Dr. Guard and User Protection. Your Protection is also known to black other legitimate anti-virus or anti-spyware programs. It may be very difficult to attempt manual removal of Your Protection. When installed, Your Protection may initiate system scans that return bogus results. It is very important to take immediate action to remove Your Protection completely from the affected computer.

Removal Guide
Kill Process
(How to kill a process effectively?)
urpprot.exe
mplay32xe.exe

Unregister DLL files
fiosejgfse.dll
urpext.dll
urphook.dll

Delete Registry
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Your Protection
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "mplay32xe.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Your Protection"
HKEY_CLASSES_ROOT\shellex\ContextMenuHandlers\SimpleShlExt "(Default)" = "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt "(Default)" = "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell ExtensionsApproved "{5E2121EE-0300-11D4-8D3B-444553540000}"

Remove Folders and Files
%Program Files%\Your Protection
%ALLUSERSPROFILE%\application data\fiosejgfse.dll
%Temp%\4otjesjty.mof
%Temp%\asd1.tmp
%Temp%\mplay32xe.exe
%Temp%\urp.dat
%Temp%\urpr.dat
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Your Protection.lnk
%UserProfile%\Desktop\Your Protection Support.lnk
%UserProfile%\Desktop\Your Protection.lnk
%UserProfile%\Start Menu\Programs\Your Protection

No comments:

Post a Comment