System Protection Tools removal guide.

What is System Protection Tools and how can it be dangerous for you system? System Protection Tools is a virus that infects a lot of systems all over the world at present time. You can be the victim too if you are not so careful while surfing the web. The main goal of this virus is almost the same as many others viruses have – users’ money. It wants you to buy its malicious product. And it actually can do that by fooling you into this purchasing. When System Protection Tools is in your system you will receive a lot of pop-ups and messages about some threats which were supposedly found by its product in your system. That means you do not have to pay any attention to anything the virus shows you or provides you with. It will try to convince you that you are doing the right thing buying the program.

System Protection Tools
System Protection Tools

System Protection Tools virus should be eliminated from the system as soon as you notice it inside your machine. We recommend you to do the removal process with the help of our anti-malware program GridinSoft Trojan Killer. The sooner you do this the sooner you will get your computer’s stable state back. Until then you will not have the prossibility to work with the system as earlier. Download Trojan Killer here below, install and run it and the virus will be removed in several mintes.

If you have some troubles with the removal process you can always write to our Support Team.

System Protection Tools automatic remover:

Removal video guide:

System Protection Tools manual remover:

Delete System Protection Tools files:

  • %AppData%\Microsoft\Internet Explorer\Quick Launch\System Protection Tools.lnk
  • %AppData%\System Protection Tools\Instructions.ini
  • %AppData%\System Protection Tools\ScanDisk_.exe
  • %Desktop%\System Protection Tools.lnk
  • %Programs%\System Protection Tools.lnk
  • %StartMenu%\System Protection Tools.lnk
  • %CommonAppData%\58ef5\SPT.ico
  • %CommonAppData%\SPUPCZPDET\SPABOIJT.cfg

Delete System Protection Tools registry entries:

  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\System Protection Tools “%CommonAppData%\58ef5\SP98c.exe” /s /d
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Protection Tools
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Protection Tools\DisplayIcon [unknown dir]\[unknown file name].exe,0
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Protection Tools\DisplayName System Protection Tools
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Protection Tools\DisplayVersion 1.1.0.1010
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Protection Tools\InstallLocation [unknown dir]\
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Protection Tools\Publisher UIS Inc.
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\System Protection Tools\UninstallString “[unknown dir]\[unknown file name].exe” /del
  • HKLM\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
  • HKLM\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\ Implements DocHostUIHandler
  • HKLM\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\LocalServer32
  • HKLM\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\LocalServer32\ [unknown dir]\[unknown file name].exe
  • HKLM\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\ProgID
  • HKLM\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\ProgID\ [unknown file name].DocHostUIHandler
  • HKLM\SOFTWARE\Classes\Dumped_.DocHostUIHandler
  • HKLM\SOFTWARE\Classes\Dumped_.DocHostUIHandler\ Implements DocHostUIHandler
  • HKLM\SOFTWARE\Classes\Dumped_.DocHostUIHandler\Clsid
  • HKLM\SOFTWARE\Classes\Dumped_.DocHostUIHandler\Clsid\ {3F2BBC05-40DF-11D2-9455-00104BC936FF}
  • HKLM\SOFTWARE\Microsoft\Tracing\FWCFG
  • HKLM\SOFTWARE\Microsoft\Tracing\FWCFG\ConsoleTracingMask -65536
  • HKLM\SOFTWARE\Microsoft\Tracing\FWCFG\EnableConsoleTracing 0
  • HKLM\SOFTWARE\Microsoft\Tracing\FWCFG\EnableFileTracing 0
  • HKLM\SOFTWARE\Microsoft\Tracing\FWCFG\FileDirectory %windir%\tracing
  • KLM\SOFTWARE\Microsoft\Tracing\FWCFG\FileTracingMask -65536
  • HKLM\SOFTWARE\Microsoft\Tracing\FWCFG\MaxFileSize 1048576
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AAWTray.exe\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVCare.exe\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVENGINE.EXE\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVWEBGRD.EXE
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVWEBGRD.EXE\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\About.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\About.exe\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ad-Aware.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ad-Aware.exe\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AdwarePrj.exe\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AlphaAV.exe\Debugger svchost.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AluSchedulerSvc.exe
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AluSchedulerSvc.exe\Debugger svchost.exe
  • And many others.

Leave a Comment

*