Remove User Protection - UserProtection Removal Information

If you still have no ideas about what User Protection is, then you need to read this article. User Protection is rogue or fake security tool that has nothing familiar with legitimate antivirus programs. It just looks like being protecting your PC, but in reality it tricks you and does nothing beneficial. What else you have to be concern about is that User Protection gets into your computer without your will and even your knowledge about that. User Protection even not scanning your system, but give without doubts untrustworthy results about security level of your computer. Being one of the latest rogues it may not be recognized as helpless software that sucks cash form users, but believe it or not User Protection is that type of programs that risk your privacy to reach their aims. The goal of this badware is simple: money and more money, so it is not going to stop until it gets its task. User Protection has a great amount of methods to defend itself. The most prevailing is to block all legitimate security applications and to follow your Internet activity to untimely deny all your efforts to enter security web links. Overall, User Protection without any doubts is untruthful security application that will never help to guard your system. Even more it would do its upmost in order to destroy it, but make as much money as possible beforehand. Please note that complete removal of User Protection is possible only in Safe Mode. That’s why you must press F8 while Windows starts. Then pres Boot in Safe Mode. And only then you can use removal tool or remove it manually using our removal guide.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:

User Protection Automatical Removal Tool

How to remove User Protection manually:

It's possible to remove User Protection manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

%Documents and Settings%\[UserName]\Desktop\User Protection Support.lnk
%Documents and Settings%\[UserName]\Desktop\User Protection.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\About.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Activate.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Buy.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\User Protection Support.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\User Protection.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Scan.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Settings.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\User Protection\Update.lnk
%Documents and Settings%\[UserName]\Application Data\Microsoft\Internet Explorer\Quick Launch\User Protection.lnk
%Program Files%\User Protection
%Program Files%\User Protection\about.ico
%Program Files%\User Protection\activate.ico
%Program Files%\User Protection\buy.ico
%Program Files%\User Protection\drg.db
%Program Files%\User Protection\drgext.dll
%Program Files%\User Protection\drghook.dll
%Program Files%\User Protection\help.ico
%Program Files%\User Protection\scan.ico
%Program Files%\User Protection\settings.ico
%Program Files%\User Protection\splash.mp3
%Program Files%\User Protection\uninstall.exe
%Program Files%\User Protection\update.ico
%Program Files%\User Protection\virus.mp3
%Temp%\asr64_ldm.exe

Remove registry entries:

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_LOCAL_MACHINE\SOFTWARE\User Protection
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\User Protection
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “User Protection”
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved “{5E2121EE-0300-11D4-8D3B-444553540000}”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = “1″

Please be careful because manual removal of User Protection may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.