Your Protection Removal Guide

Your Protection is a fake anti-virus application that very much resembles User Protection. They both belong to the same family as the famous Paladin Antivirus – another bogus program that aims at tricking users into spending money on its phony licenced version.

Just like the other members of this rogue family, Your Protection does its best to convince you that there are a number of viruses in your computer system and then urges you to purchase its counterfeit full version, which is completely uncapable of killing viruses.

In order to achieve its goal, this rogue exploits a variety of tactics. To start with, it enters the targeted machines with the help of Trojans, laid in hacked websites. Once inside, it starts a bogus scan that detects legitimate programs as infected and prompts you to uninstall them. This is the rogue’s desperate attempt to make you uninstall your legitimate AV software among the rest and thus prevent itself from being detected.

After the first scan, a second one comes forth, this time presumably looking for malware pieces. The list of viruses displayed at the end, however, contains only legitimate files or unexisting malware. Therefor, you should not try to find the files and remove them manually.

The rogue’s tricks also include fake alerts and notifications such as:

Antivirus Alert – Critical threat detected
Warning: Network attack detected
Network attack has been detected. Process is attempting to access your private data.

Your computer is being attacked from a remote PC.
Process is trying to steal your passwords listed below. It is highly recommended to block this threat now.

DANGEROUS! ANTIVIRUS DETECTED SOME HARMFUL PROGRAMS ON YOUR PC! THEY MAY CORRUPT YOUR INFORMATION OR SEND IT TO HACKERS.

Unauthorized access to your computer! Click on the message to install up-to-date antivirus software.

System files of your computer are damaged. Please, restart your system ASAP.

Danger!
A security threat detected on your computer. TrojanASPX.JS.Win32. It strongly recommended to remove this threat right now. Click on the message to remove it.

Though the messages look scary, you can remain calm since they are all completely bogus. The program will also try to block the programs you attempt to launch with the help of TDSS that the Trojans may have brought in. Then the rogue will display the following message:

Warning! Virus threat detected!
Virus activity detected!
Trojan-Clicker.Win32 adware has been detected. This adware module advertises websites with explicit content. Be advised of such content being possibly illegal. Please click the button below to locate and remove this threat now.

In case you spot Your Protection on your computer, remove it immediately via a genuine AV tool.