What this programs does:
System Protector is a rogue anti-spyware program that is installed and promoted through the use of Trojans. These Trojans will display fake security alerts and warnings on your computer, and then when clicked on, will download and install System Protector without your permission. Once installed, the program will be set to start automatically and to scan your computer. When the scanning has finished, it will state that your computer has numerous infections and will not remove them unless you purchase the program. These infections, though, are all false and do not even exist on your computer. System Protector also utilizes built-in removal protection by blocking proper access to certain anti-malware sites and tools. In order to bypass this protection you simply need to end the program's process so that you have proper functionality of your browser. Our guide below will explain how to do this. When the program is running you will also constantly see nag screens appearing stating that your computer is infected or has another problem. These nag screens are all fake warnings and should be ignored as well.
System Protector screen shot
For more screen shots of this infection click on the image above.
There are a total of 7 images you can view.
Some installations of System Protector include a DLL that is loaded via the Winlogon Notify key. This DLL has a random name and is located in the C:\Windows\System32 folder. If this DLL is loaded it will make it so you cannot run numerous anti-malware programs on your computer. An example
HijackThis
entry for this type of DLL is:
O20 - Winlogon Notify: aeefaaeeafcbba - C:\WINDOWS\system32\aeefaaeeafcbba.dll
If you have problems starting anti-malware utilities or if they shut down automatically when you start them, then you may have this module installed. If this is the case you will need to delete this file before following the rest of the steps in this guide. For help removing and identifying this DLL, we suggest you ask about in the forums. Otherwise, please use the following guide to remove System Protector and any associated malware for free.
Threat Classification:
Advanced information:
Tools Needed for this fix:
Symptoms that may be in a HijackThis Log:
O4 - HKLM\..\Run: [System Protector] C%UserProfile%\Application Data\lsascs.exe
entry for this type of DLL is:
