Security Protection Virus – How To Remove The Security Protection Rogue Anti Spyware From Your PC

Security Protection is one of a extended line of bogus internet security threats that is spreading like wildfire through emails,viruses, trojans and other dangerous methods. The rogue internet security is not trustworthy or legit and you should by no means shell out any money to the vendor of this software.

Do not be fooled into paying the registration fee for the licence of Security Protection Virus then I strongly suggest you get in touch with your credit card company and request a chargeback on the transaction. Make sure that you get rid of evey last trace of this malicious antispyware program because it will not provide any protection for your PC whatsoever and will only increase your exposure to viruses and other malicious software that will further damage your PC.

Security Protection Virus Removal

Use this registration code to unlock the rogue antispyware application: SL55J-T54YHJ61-YHG88

The only way to completely remove the malicious program from your computer is by using anti-spyware and antivirus software. Click here to download STOPzilla to eradicate the malicious application because it gives antivirus as well as antispyware protection. I also recommend PC Health Advisor to help clean up and fix any of the files within the systems registry which could have been damaged by the fake antispyware attack on your PC.

Security Protection Manual Virus Removal

Because the application may lock your desktop or stop you from opening certain files or programs you may have to manually delete or stop the process manually.

• Press CTRL + ALT + DELETE to open the Task Manager
• Click on the processes tab and end process (random).exe
• If that does not work press the Start button on the window task bar
• Click Computer
• Click on your main drive (normally the C drive)
• Then click the folder named USERS
• Then click on the name of the current user
• Then click on the folder named desktop
• Then look for an icon called Security Protection Icon
• Right Click on the Security Protection Icon
• Select properties
• Copy the file location which is similar to C:\ProgramData\(random).exe\(random).exe

When you copy the folder location leave out the directory that contains the exe file. So if the exact location of the Security Protection Virus was the same as above you would only need to copy C:\ProgramData\(random).exe\ (keep note of this on a piece of paper)

• Then navigate to the above folder
• Right click and rename the file within that folder to any name that you choose
• Next reboot/turn off and restart the computer
• You should notice that your desktop is now functional
• You should also see the Security Protection icon on your desktop
• Navigate to the location of the Security Protection folder that you wrote down
• You will see the file that you renamed earlier
• Right Click and delete that file
• Also delete the folder that contained that file (this would be the location that you wrote down)
• Delete the icon from your desktop

Remove These Security Protection Files From Your PC

• %Documents and Settings%\[User Name]\asr.dat
• %Documents and Settings%\[User Name]\Application Data\1tmp.bat
• %Documents and Settings%\[User Name]\Application Data\defender.exe
• %Documents and Settings%\[User Name]\Application Data\scan.dll
• %Documents and Settings%\[User Name]\Application Data\[random].tmp
• %Documents and Settings%\[User Name]\Desktop\Security Protection.lnk
• %Documents and Settings%\[User Name]\Start Menu\Security Protection.lnk,

Registry Entries

• HKEY_CURRENT_USER\Software\Security Protection
• HKEY_CLASSES_ROOT\BrcWizApp.BrcWiz
• HKEY_CLASSES_ROOT\BrcWizApp.BrcWiz.1
• HKEY_CLASSES_ROOT\CLSID\{80c10400-59cb-4c79-97ce-cc693103afca}
• HKEY_CLASSES_ROOT\Interface\{4B66E1DF-4DE3-4CDA-83B5-11673EADAB0B}
• HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
• HKEY_CLASSES_ROOT\TypeLib\{58B4E0F5-F122-4C02-B038-C482D998486A}
• HKEY_CURRENT_USER\Software\Microsoft “adver_id” = “29?
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe;”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Security Protection”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “rundll32? = “”
• HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\defender.exe” /sn”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “EnableLUA” = “0?
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “rundll32? = “”

By utilizing the above procedures your PC should fully functional and free from the Security Protection Virus. I would advise you to install and run a reputable antispyware/antivirus program like STOPzilla. I also recommend downloading PC Health Advisor to help with the overall health of your PC.