How to remove User Protection

Friday, March 19th, 2010 at 7:11 am
Home » Rogue Antispyware » User Protection

User Protection description

User Protection is a clone of Paladin Antivirus and Dr. Guard scams. All of these programs imitate actions of security tools to gain a purchase.

UserProtection spreads with help of trojans. Don’t be misled by its name! User Protection is not able to protect your computer or your privacy. Its main functions are generating pop-ups and making security program inoperative. The goal of User Protection is tricking people into buying the software. If UserProtection appears on your PC, keep in mind that the program is not trustworthy. It is a malware and it should be deleted as soon as possible.

User Protection is a Rogue Antispyware software

How to manually remove User Protection

To remove User Protection spyware you must block User Protection sites, stop and remove processes, unregister DLL files, search and delete all other User Protection files and registry utility. Follow the User Protection detection and removal instructions below.

The most typical software removal method is to remove User Protection by using "Add or Remove Programs" service. However there may be hidden User Protection files, running processes and registries in your computer, so User Protection may recreate all other files after reboot.

User Protection manual removal instructions

Stop and remove User Protection processes:
asr64_ldm.exe
uninstall.exe
Read more how to kill User Protection processes

Locate and delete User Protection registry entries:
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_LOCAL_MACHINE\SOFTWARE\User Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\User Protection
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "User Protection"
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = "1"
Read more how to delete User Protection registry entries
Download RegistryBooster 2010 to scan errors caused by User Protection

Search and unregister User Protection DLL libraries:
drgext.dll
drghook.dll
Read more how to unregister User Protection DLL files

Detect and delete other User Protection files:
%Documents and Settings%\[UserName]\Desktop\User Protection Support.lnk
%Documents and Settings%\[UserName]\Desktop\User Protection.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\About.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Activate.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Buy.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\User Protection Support.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\User Protection.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Scan.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Settings.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Update.lnk
%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\User Protection.lnk
%Program Files%\User Protection
%Program Files%\User Protection\about.ico
%Program Files%\User Protection\activate.ico
%Program Files%\User Protection\buy.ico
%Program Files%\User Protection\drg.db
%Program Files%\User Protection\drgext.dll
%Program Files%\User Protection\drghook.dll
%Program Files%\User Protection\help.ico
%Program Files%\User Protection\scan.ico
%Program Files%\User Protection\settings.ico
%Program Files%\User Protection\splash.mp3
%Program Files%\User Protection\uninstall.exe
%Program Files%\User Protection\update.ico
%Program Files%\User Protection\virus.mp3
%Temp%\asr64_ldm.exe

We strongly recommend you to use spyware remover to track User Protection and automaticaly remove User Protection processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: ,

One Response to

User Protection

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here