Remove User Protection
User Protection is a fake antispyware program that is promoted by fake malware scanner websites. Once you visit these fake websites, User Protection is installed onto your computer. Once installed it will automatically scan your PC and claim that your PC is infected with spyware and viruses. Then this rogue will prompt you to purchase a full version of it in order to remove these fake infections. The most serious threat posed by this fake program is that it will attempt to disable and uninstall your antivirus programs. Follow the instructions below to remove this spyware before it can do further damage to your PC.
Automatic User Protection removal:
User Protection Remover
Warning! If the automatic remover is blocked by the spyware, then boot into Windows Safe Mode and try again. Learn how to boot into Safe Mode here.
Manual User Protection removal:
Kill processes: uninstall.exe, usrprot.exe
(Learn how to kill processes)
Unregister DLLs:
C:\Program Files\User Protection\usrext.dll
C:\Program Files\User Protection\usrhook.dll
(Learn how to unregister DLLs)
Delete registry keys:
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\User Protection
HKEY_LOCAL_MACHINE\SOFTWARE\User Protection
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "User Protection"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
(Learn how to delete registry keys)
Delete files:
C:\Documents and Settings\All Users\Application Data\fiosejgfse.dll
C:\Program Files\User Protection\about.ico
C:\Program Files\User Protection\activate.ico
C:\Program Files\User Protection\buy.ico
C:\Program Files\User Protection\help.ico
C:\Program Files\User Protection\scan.ico
C:\Program Files\User Protection\settings.ico
C:\Program Files\User Protection\splash.mp3
C:\Program Files\User Protection\uninstall.exe
C:\Program Files\User Protection\update.ico
C:\Program Files\User Protection\usr.db
C:\Program Files\User Protection\usrext.dll
C:\Program Files\User Protection\usrhook.dll
C:\Program Files\User Protection\usrprot.exe
C:\Program Files\User Protection\virus.mp3
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\User Protection.lnk
%UserProfile%\Desktop\User Protection Support.lnk
%UserProfile%\Desktop\User Protection.lnk
%UserProfile%\Desktop\usrprot.exe.txt
%UserProfile%\Local Settings\Temp\4otjesjty.mof
%UserProfile%\Local Settings\Temp\usr.dat
%UserProfile%\Local Settings\Temp\usrr.dat
%UserProfile%\Start Menu\Programs\User Protection\About.lnk
%UserProfile%\Start Menu\Programs\User Protection\Activate.lnk
%UserProfile%\Start Menu\Programs\User Protection\Buy.lnk
%UserProfile%\Start Menu\Programs\User Protection\Scan.lnk
%UserProfile%\Start Menu\Programs\User Protection\Settings.lnk
%UserProfile%\Start Menu\Programs\User Protection\Update.lnk
%UserProfile%\Start Menu\Programs\User Protection\User Protection Support.lnk
%UserProfile%\Start Menu\Programs\User Protection\User Protection.lnk
(Learn how to delete files)
Delete folders:
C:\Program Files\User Protection
%UserProfile%\Start Menu\Programs\User Protection
Once you have removed User Protection from your computer using either the automatic or manual method, make sure to block it and other malicious software using a HOSTS file. Please note that with the auomatic method, your computer should be protected from future spyware threats since you now have a spyware blocker program installed. We recommend downloading the HOSTS file from here, which contains a complete, up-to-date list of malicious websites especially if you used the manual method.
If this article has helped you, please take this time to share it with Digg using the Digg button (see Digg share button to the left) or retweet it using Twitter (see retweet button to the left). You may also want to follow us on Twitter to keep up-to-date with the latest spyware prevention tips and spyware threats. If you'd rather follow us from your Facebook account, please join our Facebook fan page.
yo lo se lo rcomiendo a todos es muy bueno