System Progressive Protection fake antivirus- how to remove it from your PC?
System Progressive Protection is a fake antivirus program which tries to mimic a legitimate security software and tries to sell it's useless licence key to unsuspecting PC users. This rogue program originates from a family of fake antivirus programs called WinWebSec. All of the members from this family uses deceptive strategy of showing fake security scans and displaying false malware detection lists to scare PC users into believing that their computers are infected with high risk security threats. The fake security scan and bogus security warning pop-ups serves the purpose of tricking PC users.
In reality this program doesn't scan your computer for security infections, it imitates this process - System Progressive Protection is a scam created by Cyber criminals. People who are responsible for releasing this scam are making money from all of the Internet users who fall for the trickery shown by System Progressive Protection and purchases it's licence key to remove the supposedly detected security infections. Previously released fake antivirus programs which originated from WinWebSec family were named Live Security Platinum, Smart Fortress 2012 and Smart Protection 2012, all of them were distributed in high volumes and infected thousands of Internet users all over the Internet. Cyber criminals who are responsible for WinWebSec family of rogues knows what they are doing and they are continuing to infiltrate unprotected computers with their malicious programs.
System Progressive Protection is distributed using drive-by downloads and Trojans. Cyber criminals are also using trickery to spread their fake antivirus programs - your computer could have got infected with this rogue while you were downloading video codecs (which were supposedly needed to watch some video from misleading website). System Progressive Protection is also distributed by exploiting security vulnerabilities found on user's PC, so this fake antivirus could have been installed on your PC without your knowledge or permission. When installed on your computer this fake security scanner will override your operating system's settings and will set itself to start automatically on every system start-up. This malicious program also blocks execution of your installed programs and limits your Internet browsing by displaying fake warning messages. If you have noticed this fake program on your desktop you should remove it as soon as possible - when infected with System Progressive Protection your PC is vulnerable for further malware and Trojan infections. Don't pay for the licence of this rogue security scanner and use the provided removal guide to help you eliminate it from your system.
Such fake security warning pop-ups are generated by System Progressive Protection:
"System Progressive Protection Warning
Your PC is still infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details"
"Warning: Your computer is infected Detected spyware infection! Click this message to install the last update of security software..."
"System Progressive Protection Warning Spyware.IEMonster process is found. This is virus that is trying to send your passwords from Internet browser (Explorer, Mozilla Firefox, Outlook & others) for the third-parties. Click here to protect your data with System Progressive Protection"
All of these security warning pop-ups are fake and are only generated to scare you into believing that your computer is infected with malware, ignore them. None of the security infections that are indicated by System Progressive Protection are real. Detecting non existent security threats are just a deceptive strategy used to sell computer user's a useless licence key.
System Progressive Protection removal:
System Progressive Protection modifies your system registry settings and you can have troubles running applications. Recommended anti-spyware program bypasses such restrictions and have ran successfully on most of the tested computers.
remover for System Progressive Protection
Recommended anti-spyware installation file is renamed to iexplore.exe because System Progressive Protection does not block execution of files with such name. If you can't download or run remover installation file, you can try to download alternate installer
If you can't use Internet or your browser (Internet explorer, Firefox, Opera, Chrome)
Depending on the version of this malicious software, in some cases System Progressive Protection disables Internet browsing capability and you can't use your Internet browsers to download the removal software or the browsers doesn't start at all. If you have this problem, you may try doing the following:
Click Start then click Run. (Windows logo button on Win7/Vista)
In Windows XP, When the Run dialog appears enter this text: www.pcrisk.com/download-spyware-remover and then press ENTER. In Windows 7 and Vista you can just type this text directly in search field and press ENTER (when pressed Windows logo button)
After pressing enter, Download dialog will appear. Click Run and follow the on-screen instructions to scan your computer. If you can't run the downloaded file, try renaming it to iexplore.exe
System Progressive Protection manual removal:
1. Load your computer in safe mode with networking. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
2. Open Internet explorer, click Tools and select Internet Options. Select "Connections".
3.Click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
4. Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):
O4 - HKCU\..\RunOnce: [
After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.
5. System Progressive Protection modifies system hosts file. It is used to resolve some canonical names of websites to ip addresses. When it is changed, the user may be redirected to malicious site still seeing good URL in address bar. It is very hard to find out if the site is genuine or not, when hosts file is modified. To fix this, please download Microsoft FixIt tool, that restores your hosts file to windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:
6. Download and install legitimate anti-spyware software to completely remove the infection. Recommended software to eliminate this malicious software - Malwarebytes Antimalware and Spy Hunter.
NOTE: Some rogue programs can block the download of anti-spyware programs. If You can't download it using default location, try one of the alternative download locations below:
- Location 1 (The file is renamed to "iexplore.exe" because most of spyware doesn't block this file)
- Location 2
Alternative System Progressive Protection removal method:
Before downloading automatic remover, enter a retrieved license key in registration window of System Progressive Protection. Click "registration" button at the top of the main window of System Progressive Protection and enter this key: AA39754E-715219CE If this key won't activate this fake antivirus program, it may be that you are dealing with a newer version of this rogue. You can proceed to the next step without entering this key. Entering the registration key will not remove the infection, but will help the removal process. Note, that if you copy this key to clipboard and click "registration" button System Progressive Protection may automatically detect your copied key and will thank you for registration.
remover for System Progressive Protection
If you are unable to remove System Progressive Protection, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
End these System Progressive Protection processes:
[random].exe
Remove these System Progressive Protection registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Progressive Protection
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "
Delete these System Progressive Protection files:
%StartMenu%\Programs\System Progressive Protection\
%StartMenu%\Programs\System Progressive Protection\System Progressive Protection.lnk
%UserProfile%\Desktop\System Progressive Protection.lnk
%CommonAppData%\
%CommonAppData%\
%CommonAppData%\