How to Remove Protection System | Protection System Removal Guide

Protection System looks to be from the Coreguard Antivirus 2009 Rouge family. The removal process of Protection System is very similar just with different names. This is your standard fake security client

Protection System Removal

»Download Protection System Removal Software

Protection System looks to be from the CoreGuard Antivirus 2009 family.  Same GUI different name and traces.  Like most bogus security applications this will show exaggerated and false scan results in an effort to scare the user into making a purchase.  DO NOT PURCHASE THIS CLIENT.  If you do you will only be handing your credit card numbers as well as the cost of the fake product over to the scammers. The fake alerts this program gives off can be very alarming.  Just remember they are lies.  Things like your computer is being hacked or your files are begin accessed remotely by another computer are just attempts to scare you into purchasing the product.  You may even be prompted to remove other legitimate security products from your computer. We have the Protection System removal instructions at the bottom of this guide.

Some symptoms of Protection System:

• Bogus Scan results
• Auto Scans on Start-up
• Warning coming out of a fake shield in the system tray
• pop-ups and re-directs to the fake software's website
• constant warnings of being infected as well as false statements of other trojans

We do recommend you scan your computer with the free trial of Spyware Doctor with Antivirus to see how infected you really are. If it is just this fake security product then follow the manual directions below. If you have other trojans and spyware applications then consider making a purchase of Spyware Doctor with Antivirus Here to remove all other threats and to keep your PC secure. If you follow the link above and use coupon code removevirus10 you will get 10% off. This is an exclusive coupon we got just for our readers. As well we do recommend this remote computer repair company. They are the leaders in remote computer repair and can have you up and going in no time at all. This option is more for people who don't feel comfortable removing viruses by themselves and just want an expert to do it for them.

Manual removal instructions for Protection System ( Please read our disclaimer bellow )

Kill Protection System processes: ( Learn How to Kill a Process Here. Opens in new Window )

• psystem.exe
• uninstall.exe

We do recommend you run a full scan using Spyware Doctor with Antivirus » download. Even if you do not intend on purchasing the product it will help to stop the virus from re-installing and re-activating while you manually remove it. Also it will inform you of any new changes to the file names. You may need this if it mutates. Delete Protection System registry values: ( Learn How to Edit Registry Here. Opens in new Window )

• HKEY_CURRENT_USERSoftwareProtection System
• HKEY_CLASSES_ROOTBhoNew.BhoApp
• HKEY_CLASSES_ROOTBhoNew.BhoApp.1
• HKEY_CLASSES_ROOTCLSID{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
• HKEY_CLASSES_ROOTCLSID{425882B0-B0BF-11CE-B59F-00AA006CB37D}
• HKEY_CLASSES_ROOTCLSID{5E2121EE-0300-11D4-8D3B-444553540000}
• HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
• HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallProtection System
• HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Protection System"
• HKEY_CURRENT_USERsoftware eee0bd2f-ff2e-46ef-83fb-d4fda84462a3
• HKEY_CURRENT_USERsoftwareprotection system
• HKEY_CURRENT_USERsoftwareprotection system data
• HKEY_CURRENT_USERsoftwareprotection system dbsigns
• HKEY_CURRENT_USERsoftwareprotection system dbver
• HKEY_CURRENT_USERsoftwareprotection system fd
• HKEY_CURRENT_USERsoftwareprotection system guid
• HKEY_CURRENT_USERsoftwareprotection system infected
• HKEY_CURRENT_USERsoftwareprotection system infectedfiles
• HKEY_CURRENT_USERsoftwareprotection system lastscan
• HKEY_CURRENT_USERsoftwareprotection system secstatus_3
• HKEY_CURRENT_USERsoftwareprotection system secstatus_4
• HKEY_CURRENT_USERsoftwareprotection system secstatus_5
• HKEY_CURRENT_USERsoftwareprotection system settings_0
• HKEY_CURRENT_USERsoftwareprotection system swver
• HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallprotection system
• HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallprotection system displayicon
• HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallprotection system displayname
• HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallprotection system displayversion
• HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallprotection system uninstallstring
• HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallprotection system urlinfoabout

Delete files:  ( Hint )  Most of these files will be in the %Program FilesProtection System directory.

• Protection System.lnk
• Uninstall Protection
• System.lnk
• blacklist.cga
• core.cga
• coreext.dll
• firewall.dll
• psystem.exe
• uninstall.exe
• support.png
• unreg.html
• delete.png
• info.png
• plus_circle.png
• tick.png warn.png
• offline.gif
• online.gif
• voice.gif
• wingenocx.dll

Delete directories: ( Please note that in most cases everything in this folder can be deleted. Just be sure it's the correct folder

• c:Documents and SettingsAll UsersStart MenuProgramsProtection System
• c:Program FilesProtection System ( And files folders within this folder)

Please keep in mind that viruses mutate and change all the time. Do expect the above to change around a little. However this guide should work well for you and any experienced pro will be able to follow it and figure out the traces if they mutate. If you do not feel comfortable deleting files and the like then consider purchasing Spyware Doctor with Antivirus or have http://www.pcninja.com remove this and all other threats for you. Leading Security Clients for you to consider ( Click the Links Below to Learn More )

• Spyware Doctor with Antivirus
• Norton
• Trend Micro
• Kaspersky
• AVG
• MalwareBytes