1 of 8
Danger level 8
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Shows commercial adverts
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

Protection System

Protection System may be rather misleading, as its name leads one to believe that it will protect a computer system against threats and parasitic invasions.

Do NOT be fooled into thinking this application will assist you in maintaining the security and integrity of your system! Protection System is a scam, and behaves like your typical rogue anti-spyware applications do.

Protection System is believed to be a derivative of the infamous CoreGuard Antivirus 2009 rogue application. Protection System displays a few key properties:

• Protection System is a corrupt Anti-Spyware program
• Protection System may spread via Trojans
• Protection System may display fake security messages
• Protection System may install additional spyware to your computer
• Protection System may repair its files, spread or update by itself
• Protection System violates your privacy and compromises your security
• Protection System is installed without your permission.
• Protection System reputation online is terrible.
• The official website of Protection System is poorly built and lacks basic information.
• The payments website of Protection System is suspicious.
• Performance of the program is poor.

Protection System is propagated via the use of Trojan horses, the likes of Trojan Zlob or Vundo. Sometimes Protection System will also make use of misleading websites and other malware applications to ensure an infiltration into an unsuspecting computer system is successfully carried out.

Protection System was designed with one purpose – to convince computer users that their PC’s are infected with malicious content and to coerce these unsuspecting individuals into purchasing a licensed version of the malware, in order to remove all ‘threats’ and protect their data and privacy.

Once Protection System has embedded itself within a system, it will automatically configure itself to run automatically every time you turn on your computer. Protection System may even modify the computer’s desktop with a help of a desktop hijacker, so that the user will not be able to change the wallpaper on their computer.

Once Protection System is registered, the parasite will prevent the user from changing their desktop background, and will leave the user unable to remove all malware.

Experts strongly recommend the removal of Protection System as soon as possible.

A system that has been infected with Protection System may display the following basic symptoms, which a computer user should look out for:

• Slow computer performance:
It just takes one parasite like Protection System to slow down a computer dramatically. If your PC takes longer than usual to reboot, or if your Internet connection is unusually slow, you may be infected with XP Deluxe Protector.

• New desktop shortcuts or switched homepage:
Badware like Protection System may change your Internet settings to redirect your homepage to another website. Badware can even add desktop shortcuts to your PC. It is also not uncommon for this type of malware to change legitimate websites, such as www.google.com, and use them to further create the illusion that your system is I danger – by adding aggressive advertising to the homepage you will be directed to.

• Annoying pop-up messages:
Badware can bombard your computer with popup ads, even when you’re not online. Through these pop-up messages, you may be tricked into downloading more spyware.

Manual removal is probably your best bet at maintaining the integrity of your computer, but manual removal should only be tried by those individuals that know a bit about registry files, and should be left to the individual who knows how to navigate their way around system files.

Manual Removal process can be performed as follows:

• Stop Protection System Processes:

• Find and Delete these Protection System:
c:\Program Files\Protection System
c:\Program Files\Protection System\ProtectionSystem.exe
c:\Program Files\Protection System\tp_starter.exe
c:\Program Files\Protection System\uninstall.exe
c:\Program Files\Protection System\uninstall.log
c:\Program Files\Protection System\vbase.ini
c:\Program Files\Protection System\lang
c:\Program Files\Protection System\lang\english.lng

• Remove Protection System Registry Values:
HKEY_CURRENT_USER\Software\Protection System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\Protection System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Protection System

All in all though, I would recommend, especially if you are not completely tech savvy, to make use of a reliable and legitimate, fully functional, up-to-date anti-spyware application, to remove Protection System and all its components from the infected computer system.

Download Spyware Removal Tool to Remove* Protection System
  • Quick & tested solution for Protection System removal.
  • 100% Free Scan for Windows

How to manually remove Protection System

Files associated with Protection System infection:

%ProgramFiles%\Protection System

Protection System DLL's to remove:


Protection System processes to kill:


Remove Protection System registry entries:

Microsoft\Windows\CurrentVersion\Run\Protection System
Protection System


  1. dfsdf Sep 7, 2009

    Too bad that this isn't working...how do I get rid of the .dll file?

  2. Robert Klauka Sep 8, 2009

    I'm struggling with "Protection System" right now. (09/08/09) You may find that the malware also redirects your browser away from any inquiry about "Protection System". Any attempts to remove it have failed. I'm forced to format and reinstall all my software. Tres mal!!!!!

  3. Sean Burns Nov 3, 2009

    I have done a lot of what this has suggested. I can not view my task manager..nor my start bar anymore. It's almost as if the virus is getting angry at me.

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.