Emsisoft Malware-Info

Name: Adware.Win32.YourProtection

Risklevel: High Risk

Description:

YourProtection is a rogue security program. A rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.

Removal instructions for Adware YourProtection:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware YourProtection.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • Shows misleading scan results.
  • Shows fake warning messages.
  • Shows fake security alerts.

Installation: Installed through EXE

Process: urpprot.exe

Screenshots:

YourProtectionYourProtectionYourProtectionYourProtectionYourProtectionYourProtectionYourProtection

Used folders:

  • C:\Documents and Settings\All Users\Desktop\
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\
  • C:\Documents and Settings\[USER]\Desktop\
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\
  • C:\Program Files\Your Protection\
  • C:\Documents and Settings\All Users\Favorites\
  • C:\Documents and Settings\[USER]\Cookies\
  • C:\Documents and Settings\[USER]\Local Settings\Temp\

Used files:

  • C:\Program Files\Your Protection\splash.mp3
    [75738 Bytes] MP3 File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\dhdhtrdhdrtr5y
    [258560 Bytes] File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\TMPAF13.tmp
    [21504 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\uaca17a.tmp
    [38424 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\uacbd85.tmp
    [5616088 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\uacd888.tmp
    [2613320 Bytes] TMP File
  • C:\Program Files\Your Protection\activate.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Your Protection\help.ico
    [5430 Bytes] ICO File
  • C:\Program Files\Your Protection\scan.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Your Protection\urp.db
    [5616088 Bytes] DB File
  • C:\Program Files\Your Protection\urphook.dll
    [22016 Bytes] DLL File
  • C:\Program Files\Your Protection\virus.mp3
    [29256 Bytes] MP3 File
  • C:\Documents and Settings\All Users\Desktop\pornotube.com.lnk
    [1607 Bytes] LNK File
  • C:\Documents and Settings\All Users\Favorites\_favdata.dat
    [8 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Cookies\user@paymentcards[2].txt
    [190 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Desktop\adobeflashplayerv10.0.45.2.exe
    [0 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Desktop\Your Protection.lnk
    [696 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\2.ico
    [14062 Bytes] ICO File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\4otjesjty.mof
    [455 Bytes] MOF File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\asd2.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\asd3.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\asd4.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\urpr.dat
    [120 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\_VOIDcf0f.tmp
    [87040 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\Activate.lnk
    [1594 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\Scan.lnk
    [1570 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\Update.lnk
    [1582 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\Your Protection.lnk
    [708 Bytes] LNK File
  • C:\Program Files\Your Protection\about.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Your Protection\buy.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Your Protection\settings.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Your Protection\Uninstall.exe
    [53248 Bytes] EXE File
  • C:\Program Files\Your Protection\update.ico
    [1150 Bytes] ICO File
  • C:\Program Files\Your Protection\urpext.dll
    [40960 Bytes] DLL File
  • C:\Program Files\Your Protection\urpprot.exe
    [2359296 Bytes] EXE File
  • C:\Documents and Settings\All Users\Desktop\nudetube.com.lnk
    [1603 Bytes] LNK File
  • C:\Documents and Settings\All Users\Desktop\youporn.com.lnk
    [1599 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Application Data\Microsoft\Internet Explorer\Quick Launch\Your Protection.lnk
    [714 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Cookies\user@secure.paymentcards[1].txt
    [132 Bytes] TXT File
  • C:\Documents and Settings\[USER]\Desktop\Your Protection Support.lnk
    [1602 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\1.ico
    [14062 Bytes] ICO File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\3.ico
    [14062 Bytes] ICO File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\asd1.tmp
    [0 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\asd2.tmp.exe
    [97280 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\asd3.tmp.exe
    [97280 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\asd4.tmp.exe
    [97280 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\mplay32xe.exe
    [258560 Bytes] EXE File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\uac353c.tmp
    [4767482 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\uacbabf.tmp
    [17544 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\uacc667.tmp
    [31648 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\urp.dat
    [128 Bytes] DAT File
  • C:\Documents and Settings\[USER]\Local Settings\Temp\_VOIDafa0.tmp
    [64512 Bytes] TMP File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\About.lnk
    [1576 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\Buy.lnk
    [1564 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\Settings.lnk
    [1594 Bytes] LNK File
  • C:\Documents and Settings\[USER]\Start Menu\Programs\Your Protection\Your Protection Support.lnk
    [1614 Bytes] LNK File

Additional information might be found here:

Search at Google for Adware YourProtection Search at Google for Adware YourProtection
Search at Bing for Adware YourProtection Search at Bing for Adware YourProtection
Search at Yahoo for Adware YourProtection Search at Yahoo for Adware YourProtection

How can I protect myself from Adware YourProtection?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software