Emsisoft Malware-Info

Name: Adware.Win32.UserProtection

Risklevel: Low Risk

Description:

User Protection is a rogue security program. This is a new variant from Dr. Guard/PaladinAntivirus. This rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.

Removal instructions for Adware UserProtection:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware UserProtection.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Installation: Installed through EXE

Process: usrprot.exe

Screenshots:

UserProtectionUserProtectionUserProtectionUserProtectionUserProtection

Used folders:

  • C:\Program Files\User Protection\
  • C:\Documents and Settings\[USER]\Desktop\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\

Used files:

  • C:\Program Files\User Protection\about.ico
    [17542 Bytes] ICO File
  • C:\Program Files\User Protection\activate.ico
    [17542 Bytes] ICO File
  • C:\Program Files\User Protection\buy.ico
    [17542 Bytes] ICO File
  • C:\Program Files\User Protection\help.ico
    [15086 Bytes] ICO File
  • C:\Program Files\User Protection\scan.ico
    [17542 Bytes] ICO File
  • C:\Program Files\User Protection\settings.ico
    [17542 Bytes] ICO File
  • C:\Program Files\User Protection\splash.mp3
    [75738 Bytes] MP3 File
  • C:\Program Files\User Protection\uninstall.exe
    [53248 Bytes] EXE File
  • C:\Program Files\User Protection\update.ico
    [17542 Bytes] ICO File
  • C:\Program Files\User Protection\usr.db
    [5320104 Bytes] DB File
  • C:\Program Files\User Protection\usrext.dll
    [40960 Bytes] DLL File
  • C:\Program Files\User Protection\usrhook.dll
    [21504 Bytes] DLL File
  • C:\Program Files\User Protection\usrprot.exe
    [2355200 Bytes] EXE File
  • C:\Program Files\User Protection\virus.mp3
    [29256 Bytes] MP3 File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\User Protection.lnk
    [714 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\installerUP.exe
    [0 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Desktop\License.txt
    [659 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Desktop\User Protection Support.lnk
    [1602 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Desktop\User Protection.lnk
    [696 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\4otjesjty.mof
    [454 Bytes] MOF File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\usr.dat
    [136 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\usrr.dat
    [120 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\About.lnk
    [1576 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\Activate.lnk
    [1594 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\Buy.lnk
    [1564 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\Scan.lnk
    [1570 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\Settings.lnk
    [1594 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\Update.lnk
    [1582 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\User Protection Support.lnk
    [1614 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\User Protection\User Protection.lnk
    [708 Bytes] LNK File

Additional information might be found here:

Search at Google for Adware UserProtection Search at Google for Adware UserProtection
Search at Bing for Adware UserProtection Search at Bing for Adware UserProtection
Search at Yahoo for Adware UserProtection Search at Yahoo for Adware UserProtection

How can I protect myself from Adware UserProtection?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software