Home Malware Programs Rogue Anti-Spyware Programs Protection System Software

Protection System Software

Posted: August 13, 2009

Protection System Software is a fake spyware remover that employs trojans and malicious websites to infect your computer. Protection System Software generates numerous fake security alerts and pop-up windows that, once clicked on, will download this menacing application. A false system scan will then identify various imaginary parasites and ask you to purchase the full version of Protection System Software in order to remove the infections.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ntoskrnl-hook
    2 resdel.dll
    3 wingenocx.dll
    4 wscvc32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Protection System Software"
Loading...