System Progressive Protection – Virus Removal Guide

System Progressive Protection is a computer virus from the WinWebSec family of rogue anti-spyware programs.
Cyber criminals,spread System Progressive Protection via infected websites,malicious email attachments or Java exploits.Once installed on your computer System Progressive Protection will start a bogus security scan which will report that several trojans,rootkits and viruses were found on your machine.
As you have probably realized by now,this alerts are nothing just scam and are meant to scare you into buy System Progressive Protection.
Apart from this fake alerts,System Progressive Protection will also prevent you from starting certain programs that could lead to its removal and redirect your browser to websites from which the cyber criminals will get affiliate revenue.
If your computer is infected with System Progressive Protection,then you are seeing this screens:

System Progressive Protection virus

System Progressive Protection Activation Request

System Progressive Protection Warning

We strongly advise you to ignore any alerts that System Progressive Protection might generate and proceed with this removal guide as soon as possible.
Under no circumstance should you buy System Progressive Protection as this could lead to identity theft,and if you have, you should contact your credit card company and dispute the charge stating that the program is a scam and a computer virus.

Registration codes for System Progressive Protection
As an optional step,you can use the following license key to register System Progressive Protection and stop the fake alerts.
System Progressive Protection license key: AA39754E-715219CE
Please keep in mind that entering the above registration code will NOT remove System Progressive Protection from your computer , instead it will just stop the fake alerts so that you’ll be able to complete our removal guide more easily.

System Progressive Protection Removal Guide

STEP 1 : Start your computer in Safe Mode with Networking

  1. Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.
  2. Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
    Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
  3. On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER.
    [Image: Safe Mode with Networking]

STEP 2: Run RKill to terminate known malware processes associated with System Progressive Protection.

RKill is a program that will attempt to terminate all malicious processes associated with System Progressive Protection,so that we will be able to perform the next step without being interrupted by this malicious software.
Because this utility will only stop System Progressive Protection running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again.

  1. While your computer is in Safe Mode with Networking ,please download the latest official version of RKill.Please note that we will use a renamed version of RKILL so that System Progressive Protection won’t block this utility from running.
    RKILL DOWNLOAD LINK (This link will automatically download RKILL renamed as iExplore.exe)
  2. Double click on iExplore.exe to start RKill and stop any processes associated with System Progressive Protection.
    [Image: RKILL Program]
  3. RKill will now start working in the background, please be patient while the program looks for various malware programs and tries to terminate them.
    [Image: RKILL stoping malware]
    IF you are having problems starting or running RKill, you can download any other renamed versions of RKill from here.
  4. When Rkill has completed its task, it will generate a log. You can then proceed with the rest of the guide.
    [Image: RKill Report]

WARNING: Do not reboot your computer after running RKill as the malware process will start again , preventing you from properly performing the next step.


STEP 3: Remove System Progressive Protection malicious files with Malwarebytes Anti-Malware FREE

Malwarebytes Anti-Malware is a powerfull on-demand scanner which will remove System Progressive Protection malicious files from your computer.

  1. You can download Malwarebytes Anti-Malware Free from the below link,then double click on it to install this program.
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK(This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)
  2. When the installation begins, keep following the prompts in order to continue with the setup process.
    DO NOT make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked,then click on the Finish button.
    [Image: Malwarebytes Anti-Malware final installation screen]
  3. On the Scanner tab,select Perform quick scan and then click on the Scan button to start scanning your computer.
    [Image: Malwarebytes Anti-Malware Quick Scan]
  4. Malwarebytes’ Anti-Malware will now start scanning your computer for System Progressive Protection malicious files as shown below.
    [Image: Malwarebytes Anti-Malware scanning for System Progressive Protection]
  5. When the Malwarebytes scan will be completed,click on Show Result.
    [Image: Malwarebytes Anti-Malware scan results]
  6. You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image.Make sure that everything is Checked (ticked) and click on the Remove Selected button.
    [Image:Malwarebytes removing virus]
  7. After your computer will restart in Normal mode, open Malwarebytes Anti-Malware and perform a Full System scan to verify that there are no remaining threats

STEP 4: Remove System Progressive Protection rootkit with HitmanPro

In some cases,System Progressive Protection will also install a rootkit on victims computer.To remove this rootkit we will use HitmanPro.

  1. Download HitmanPro from the below link,then double click on it to start this program.
    HITMANPRO DOWNLOAD LINK (This link will open a new web page from where you can download HitmanPro)
    IF you are experiencing problems while trying to start HitmanPro, you can use the Force Breach mode.To start HitmanPro in Force Breach mode, hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (How to start HitmanPro in Force Breach mode – Video)
  2. HitmanPro will start and you’ll need to follow the prompts (by clicking on the Next button) to start a system scan with this program.
    HitmanPro scanner
    HitmanPro installation
  3. HitmanPro will start scanning your computer for System Progressive Protection malicious files as seen in the image below.
    HitmanPro scan after System Progressive Protection
  4. Once the scan is complete,you’ll see a screen which will display all the infected files that this utility has detected, and you’ll need to click on Next to remove this malicious files.
    HitmanPro scan results
  5. Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer.
    HitmanPro 30 days activation button

That’s it, System Progressive Protection should be completely removed from your computer!
We strongly recommend that you build up your malware defenses by starting a new thread in Security Configuration Wizard forum and keep installed on your machine all the on-demand scanners that we’ve used in this article to perform regular scans with them.

If you are still experiencing problems while trying to remove System Progressive Protection from your machine, please start a new thread in our Malware Removal Assistance forum.

IT’S YOUR TURN TO HELP!

If we have managed to help you with your computer issues, then it's your duty to let other people know that this article will help them!
You can share this article on Facebook,Twitter or Google Plus by using the below buttons.

THE 411 ON ME

FC Barcelona fan, Starbucks addicted and super geek.
I am the creator and owner of MalwareTips.com
My area of expertise includes malware removal and computer forensics. I'm active in the various online anti-malware communities where I do researches for new malware threats as they are released.
I live in Bucharest (Romania), where I run my own local computer repair shop.
I repair both hardware and other operating systems related issues, however most of my business is malware related problems.

Follow me on Google Plus

You can follow me on Google Plus, and I will try to keep you informed with the latest computer infections and malware threats!

SUPPORT MALWARETIPS! (OPTIONAL)

All our malware removal guides and utilities are completely free of charge.
We do not request any kind of money in exchange for our services, however if you like to support us with our hardware maintenance costs, you can make a small donation. Any amount is appreciated, and will support our fight against malware.
  • Shannon

    Thank you for all your step by step help in this matter. The only thing I would add is how to reconnect to the inter-net afterwards because one of the first things this virus does is disconnect you for the internet. You are awesome and once again thanks!!!

  • Mars

    Thank you! I was not able to do anything on my computer with this terrible virus. With your help and following all the steos I hope it is gone forever.

  • Busby

    I really appreciate this comprehensive outline to remove this nasty infection; we commend you for this invaluable information you have afforded to those of us who thought our systems were TOAST………

  • Markques

    Thank you!!

  • Meyefou

    WoW!

    Perfect procedure. It is doing the job!

    Many thanks!

    Meyefou

  • narinder

    Wow, Dear i dont know how to say thank to you. I was really serious problem for me but thank GOD, u saved me man, thnx again. !!!

  • hassam

    Thank you!

  • Gautham

    Thanks a lot for the help, the article was very straight forward and concise and allowed me to remove the malware without much hassle.

  • Tord

    Tank You!!!
    Verk clear instruktions, and it solved My problem,,

  • Burton Depaolo

    I just want to tell you that I am newbie when it comes to pc and I’ve manage to remove this nasty virus without any problemes! Great site!Thank you!

  • Danielle

    Thank you so much for this blog! I just did this and from what I can tell, it definitely worked! I couldn’t even really use my computer a few hours ago and now its working properly! I might go ahead and wipe the entire computer clean, but at least now I can save my files before doing so. Thanks for taking the time to do this!

    :)

  • Linda Hamilton

    Great and worked like a charm thank you so much. Nice clear instructions that really did lead me by the hand.

  • Greg

    Hi Stelian – thanks for taking the time to help people out with this newest flavor of the smitfraud-type virus . . . it’s pretty obvious by the response that there’s lots of people who are getting it.

    I’m an IT guy too, and I just cleaned it off a guys machine tonite. Malwarebytes was already installed on this machine, and nearly up to date – but the bug had disabled it !! I’ve seen this before with the smitfraud-type mechanism.

    I booted to normal safe mode without networking, because I downloaded the registryfix.reg and rkill.exe onto another computer and copied it onto a thumb drive. Once in safe mode I dropped them on the desktop, ran them both per your directions – and Malwarebytes was instantly functional once again !! It had near-current definitions already, so I just ran a quick scan and BAM – bye bye fake whatever you were.

    Before rebooting to full Windows mode, I also ran a small but very useful Kaspersky rootkit tool called TDSSKiller – available for free download. It’s only a bit over 2 Mb in size and scans very quickly but effectively. I have used this program to discover and eliminate rootkits on problem machines where all the other software found nothing. However, I found no rootkit associated with this infection – but I will keep that in mind.

    Malwarebytes, TDSSKiller, Kaspersky Virus Tool, Combofix, ESET online scanner . . . yes, all good software that I use and recommend. I’m not real big on HitmanPro and especially RogueKiller because they often seem to identify files not related to the virus, and this confuses users because then they hafta pick and choose what to do with which files. PreVX also has a very good online scanner similar to ESET, and you can also install a free version of their active online scanner, which will run along side other active software without interference and detect (but not remove) infections.

    Just my 2 cents . . . thanks again for your efforts – you’ve helped alot of people !!

  • WIll

    Thanks for taking the time dude. This worked great. For every 1,000,000 idiots out there creating this cr@p, there is 1 of you helping people. Thank you.

  • Teresa

    Thanks for your straightforward instructions – seems to have worked a treat :)

  • Shaena

    your the best!!!

  • Jessica

    Thanks so much! This fixed me right up!

  • syed

    Hi

    Tq very much.
    This malware came to my pc through an e-mail from IRS.gov with the subject – “jConnect fax from “885-443-4836″ “, which I accidentally opened.

    tq again
    syed

  • Hamadah Farjallah

    Thanks! really just follow the steps one by one, will not face any problem with very good written and helpful.
    thank you for share your knowledge!

  • Russ

    Thank you so much – I had no clue what to do. Fortunately, I had another system to be able to locate your site for help. You are the best!

  • Eric

    Thanks! Very well written and helpful. Seemed to work well as I no longer get the notifications and pop ups.

    However, I still have what appears to be some remnants of the program. When I run %ProgramData%, they show up as a 3K file and 5K icon in a folder named 64DDA88426FE5ED3000064DDAB6353.EXE. When i try to customize my taskbar, it lists SPP version 3.7.17 and has something called vxesmqoa.exe as options.

    Should I be concerned about those?

    Should I be concerned about these when MBAM, Hitman, and Emisoft all turn up nothing?

    • Stelian Pilici

      Hello Eric,
      Like you’ve said this are most likely just some left over files from this infected.Try to delete them and if you can’t,then open MBAM and go to More Tools tab,from there select Run Tool,and browse to the file or folder that you want to remove….After you’ll reset your computer,FileAssasin should get rid of it!
      And for your peace of mind,you can perform a scan with the following tools:
      1.Run a scan with Kaspersky Virus Removal Tool
      Click here to download the Kaspersky Virus Removal Tool.

      1. Save it to your desktop.
      2. Double click the setup file to run it.
      3. Follow the onscreen prompts until it is installed
      4. Click the Options button (the ‘Gear’ icon), then make sure only the following are ticked:
        • System Memory
        • Hidden startup objects
        • Disk boot sectors
        • Local Disk (C:)
        • Also any other drives (Removable that you may have)
      5. Then click on Actions on the left hand side
      6. Click Select Action, then make sure both Disinfect and Delete if disinfection fails are ticked
      7. Click on Automatic Scan
      8. Now click the Start Scanning button, to run the scan
      9. After the scan is complete, close the program

      2.Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Stay safe!

  • Kb

    I am an IT professional.. From one to another very well put together article. It helped me to clean a clients machine. Thanks Good Job!

  • Somnath Biswas

    Thanks Dude….It really works.

  • Lisa

    Thank you, thank you, thank you! I almost died when I saw the virus and I had no idea what to do. Your article was brilliant and worked a treat. Chameleon worked first time for me and I didn’t have the rootkit but I followed all three steps anyway and it’s all dandy now. I see some people have complained about the length of it but I didn’t care at all, it worked and got rid of the nasty thing so I’m a happy girl. Thanks again. :)

  • Valerie

    I owe you big time ! I’m not a computer wiz and english is not my first language, but I was easily able to remove that virus from my computer with your clear and effective guide. Thanks !

  • Sarah

    “Trying to update Malwarebytes Anti-Malware, please wait…” in the little black screen has been up for almost half an hour…does it always take this long? Please advise, thank you.

    • Stelian Pilici

      Hello Sarah,
      Can you please perform a scan with RogueKiller,then try to do again a scan with MBAM:

      1. Please download the latest official version of RogueKiller.
        RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
      2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
      3. After the scan has completed, press the Delete button to remove any malicious registry keys.
  • Michel

    Thank you so much. I would never again poke fun at geeks ! I dont know if it’s your procedure which helped me because I used system restore from another profile than the infected one. But one thing is sure : reading your well documented website with all its various tools, I was SURE that the beast would be DONE. So I had my sunday afternoon hike with a relieved mood before fixing everything in half an hour. I launched the chameleon and it seemed to work at once. Should you create your own business I would expect it performed greatly !

  • Lindsey

    After two days of trying to fix this , your guide was the ONLY thing that cleaned and properly fixed my system ! Thank you so so much! You are a genius and very kind to share your knowledge!

  • Finbarr O’Callaghan

    Hi. Just like many of the people whom you have helped, and who have posted their appreciation here, I am very grateful to you. I live in The Gambia, a poor country in West Africa, and tomorrow will donate a days food to some local person, in your name, as you don’t have any place for me pay you. God bless you.

  • Eugene

    Why this long winded approach?
    Shut down, boot up safe mode, then System Restore.
    Anybody tried this? Took me longer to write this comment than to remove the virus/malware.

    • Stelian Pilici

      Hello Eugene,
      System Restore will just revert your settings to a previous date,you still need to perform a system scan with Malwarebytes and HitmanPro to remove the malicious files.
      Stay safe!

  • Jason

    I have booted my computer into safe mode with networking and downloaded registryfix.reg from the link. However, when I double click the downloaded file I receive a message asking which program to use to open the file rather than the Registry Editor dialouge box indicated in the picture below step 1 instructions. Please advise. Thank you.

    • Stelian Pilici

      Hello Jason,
      1.Type regedit in RUN or start menu search box and press Enter. It’ll open Registry Editor.
      2. Now click on File menu and select Import command.
      3.It’ll open browse dialog box where you can select the .REG file and it’ll merge the data into Windows Registry.
      Stay safe!

  • DigitalMagick

    Worked like a treat. Progressive didn’t get a chance to rootkit my machine, I’m guessing because I was doing these steps less than 2 minutes after it first popped up. But I ran all 3 cleaners anyhow, just to be paranoid. (your never paranoid if you are right).
    Excellent article my friend.

  • satheesh

    This is really helpful. my system was infected with virus, but these steps really helped to me to fix my system virus problem.

    you rock!!!

  • John

    Stelian you are amazing. Thank you very much for your step by step guide. I can tell you that there are a great many stressers in this world we live in today and not having to worry about the costs and down time of getting this repaired by a pro only helps in reducing stress on all of us effected. Your selflessness in creating a quide for people to freely access speaks volumes to your character and we all can’t thank you enough.

    Thank you so very much.

  • Haaris Khan

    Recently i had this problem in one of my friends PC What i did was Pressed F2 key to go for BIOS Boot Setting and Changed the Computer Manufacturers Date and Time.
    The System Progressive Protection had disabled all the executable functions which i enabled once again And saved the new settings once again and restarted my PC and kept my PC for Full scan with my Antivirus.
    The problem was resolved.
    Just have it a TRY…….

  • Gordon Johnson

    Everything was going smoothly until I got to HitmanPro. It did not come up with the option of ‘Activate free lisence’. Suggestions?

    • Stelian Pilici

      Hello Gordon,
      HitmanPro comes with a free 30 days license for Home users so if you are using a corporate laptop then you wob’t get this free trial. Anyway,let’s see if we can get rid of some of them using the below software:
      1.Run a scan with Kaspersky Virus Removal Tool
      Click here to download the Kaspersky Virus Removal Tool.

      1. Save it to your desktop.
      2. Double click the setup file to run it.
      3. Follow the onscreen prompts until it is installed
      4. Click the Options button (the ‘Gear’ icon), then make sure only the following are ticked:
        • System Memory
        • Hidden startup objects
        • Disk boot sectors
        • Local Disk (C:)
        • Also any other drives (Removable that you may have)
      5. Then click on Actions on the left hand side
      6. Click Select Action, then make sure both Disinfect and Delete if disinfection fails are ticked
      7. Click on Automatic Scan
      8. Now click the Start Scanning button, to run the scan
      9. After the scan is complete, close the program

      2.Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      NEXT,please re-run a scan with HitmanPro and post the log or a screenshot here and I’ll give you instructions on how to remove the left over files.
      Good luck!

      • Gordon Johnson

        Thanks, Stelian. Finally got back to working on this and all went well. I’ve had no problems since going through your instructions even though the last step didn’t seem to work for me, but I’ve completed the additional steps – all seems to be clean. Thank you so much for your help. You have saved me much frustration and I’m sure many $$. Greatly appreciated.

  • belinda

    Thanks so much I am with Jaime you need a paypal donation button. Much much appreciated.

  • Jeff

    Thanks and loads of good karma to you. The folks at Spyware doctor were no help at all. You walked me straight through it with no glitches.

  • Carly

    Thank you so, so much for your help! I am not very computer literate and was able to pretty easily remove the System Progressive virus. I can’t explain how much I appreciate your help. I don’t even know how I got the virus, and was completely stressed out two hours ago. Now everything is fixed! Thanks!!!!

  • Mike

    You saved me a lot of money to fix a dumb problem I caused. I really appreciate everything and please if you ever need help with marketing or packaging shoot me an email it’s the least I can do!

  • Heather Bennett

    Thank you so much for your help. You saved us. We have a small business and we got this virus this morning. This saved me so much money, by me being able to do this by your instructions. This is Thanksgiving weekend and to try and find someone to fix it would be impossible. Good Karma is coming your way. I owe you. Thank you so much.

  • Jeremy

    Hey man thanks a lot it really saved a lot of money for me

  • Salma

    Thank you so much for all of this! God Bless you. You just saved me so much money and struggle!

  • Karen

    Stelian,
    I can’t thank you enough. It was my fault this virus got loaded on my friends computer. I’m so glad I was able to fix it for her (with your help of course!).

  • Jamie

    Worked like a charm! No hang ups at all. What do I owe you? Wish you had a PayPal donate button!!! Thanks so much for not having to pay Staples $149.

    • Stelian Pilici

      Hello Jamie,
      Just stay safe and have an awesome life!

  • MM

    Thank you so much. You save me :)

  • CH

    Thank you so much!! This worked wonderfully! :)

  • Frank

    Brudah! Mahalo for da fix!

  • Celeste Schuster

    Thank you so much this really helped. My mom and I were both stumped and then i looked it up. Thanks again

  • Josh

    Stelian, first let me thank you for this post- total life-saver! I have been following your steps and everything has been going great. I downloaded RogueKiller, but when I double-clicked on it, it said it was not a valid Win32 application. Should I just proceed without it or do you suggest something else? Thanks in advance and again for everything…

    • Stelian Pilici

      Hello Josh,
      Lets change the tools,please run a scan with the following tools:
      STEP 1: Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      STEP 2: Run a scan with Emsisoft Emergency Kit.

      1. Please download the latest official version of Emsisoft Emergency Kit.
        EMSISOFT EMERGENCY KIT DOWNLOAD LINK (This link will open a download page in a new window from where you can download Emsisoft Emergency Kit)
      2. After the download process will finish , you’ll need to unpack EmsisoftEmergencyKit.zip and then double click on EmergencyKitScanner.bat
      3. A pop-up will prompt you to update Emsisoft Emergency Kit , please click the “Yes” button.After the Update process has completed , put the mouse cursor over the “Menu” tab on the left and click-on “Scan PC“.
      4. Select “Smart scan” and click-on the below “SCAN” button.When the scan will be completed , you will be presented with a screen showing you the malware infections that Emsisoft Emergency Kit has detected.Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects‘ button.
  • Ken

    Absolutely amazing! It’s good to know there are people out there that will help others. I did everything you suggested and it removed the malware. I wasn’t going to use the Hitman, thinking i got it all but I used it and caught two more malwares… I think I have them all now. Great job! If I could send you a drink over the internet I would. Cheers to a good guy!
    kd

  • Peter Dijkstra

    Thanks a 1000 times!! My XP machine was infected, after just 20 minutes work , thnx to your excellent service, it was clean and good working again!!!

  • Rich

    YOU THE MAN Thanks so much , retired veteran here , on fixed income ,thanks so much for clearing the VIRUS, System Progressive Protection for me .. I’m almost completly Computor illiterate so it went really slow for me and not quite exactly by the directions , but it worked .. THANKS AGAIN RICH

  • Chinmay Dhala

    Everything works fine except for the HitmanPro link. It doesnt give an option of free trial. So i downloaded it from CNET and proceeded.

    However, the same also did not give me an option. Please help.

    • Chinmay Dhala

      Like I mentioned, I got stuck on the last step with the HitmanPro36 as this is my work laptop and it won’t enable the free license like you confirmed.

      Instead, I have done a scan using the EmsisoftEmergencyKit, Kaspersky and ESET Online Scanner as had been guided by you to others.

      After all of that, I did a re-scan with HitmanPro36. The following is the Log file now.

      • Stelian Pilici

        Hello,
        There is still malware on this computer (C:\WINDOWS\Temp\{38B6FE09-B1A1-427B-9A2A-04B2F76E9F8A}.exe) .. We need to remove it.
        STEP 1 : Run a scan with Combofix
        Download ComboFix from here: COMBOFIX DOWNLOAD LINK #1 (This link will automatically download Combofix on your computer)

        VERY IMPORTANT !!! Save as Combo-Fix.exe during the download.ComboFix must be renamed before you download to your Desktop

        • Close any open browsers.
        • Very Important!Temporarily disable your anti-virusscript blocking and any anti-malware real-time protection beforeperforming a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
        • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
        • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
        • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
        1. Double click on ComboFix.exe & follow the prompts.
        2. Accept the disclaimer and allow to update if it asks
        3. When finished, it shall produce a log for you.

        Notes:

        1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
        2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
        3. If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.

        Please add the combofix log in your next reply!

  • Don

    Thank you! You’re a life saver!

  • Bond

    Good stuff man

  • HG

    Excellent Fix!!!
    This locked up my unit last night. It had specific easy to follow instructions.
    My only question, the only step I was unable to complete was step #1 but everything else worked well. Any thoughts on future issues????

    • Stelian Pilici

      Hello HG,
      If you managed to run all the tools in Normal mode,then that’s great!Stay safe!:)

  • Sam

    Stelian,

    Thank you for sharing your knowledge with the rest of us! Greatly appreciated!

  • Jessica

    Thank you so much! This really worked and resolved the issue with my computer.

  • Jim

    Thanks for your help!

  • Samer Al-Sagga

    THANK YOU!!

  • Héctor Corzo

    Excellent guide. Thanks a lot!

  • Maddie

    yeahhhhhh thanx!!!!

  • Shannon Phillips

    You Rock!!!

  • kevin

    thanx very much for your service!

  • Janelle

    THANK YOU! I got this virus yesterday on my work laptop with all of my data. You seriously saved my day – and my bosses wallet. Haha. Thank you!

    Janelle

  • Paul Hansen

    thank you so much for your very clear instructions. i followed them all and solved a potentially disastrous infection. Thanks again

  • NickStar

    I typed in the registration code and everything was back to normal…. Went and ran a system scan and it came up w/ 0 infections and no viruses…. My question is should I still go through the steps, even though it’s showing no viruses?

    Thanks Much….

    Appreciate your post!!

    • Stelian Pilici

      Hello Nick,
      You can perform a scan with Malwarebytes and HitmanPro….it should only take a few minutes and you can perform the scan in Normal mode so it’s nothing major… :)
      Stay safe!

  • Molly

    You saved me tons of headache and the embarrassment of admitting to my IT guy that I’d clicked on a phishing scam. Thank you so much!

  • Chen

    Bro, Thanks for the guide! gratitude man!

  • edita

    Hi,I did everything you said,looks that computer is clean,I do have problem with internet explorer right know,I do have connection,but browser not working?

    • Stelian Pilici

      Hello edita,
      Can you please run a scan with Combofix, ESET online scanner and post the logs here so that I can get an idea on what’s going on:
      STEP 1 : Run a scan with Combofix
      Download ComboFix from here: COMBOFIX DOWNLOAD LINK #1 (This link will automatically download Combofix on your computer)

      VERY IMPORTANT !!! Save as Combo-Fix.exe during the download.ComboFix must be renamed before you download to your Desktop

      • Close any open browsers.
      • Very Important! Temporarily disable your anti-virusscript blocking and any anti-malware real-time protection beforeperforming a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      1. Double click on ComboFix.exe & follow the prompts.
      2. Accept the disclaimer and allow to update if it asks
      3. When finished, it shall produce a log for you.

      Notes:

      1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
      2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
      3. If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.

      STEP 2: Run a scan with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Waiting for your reply to tell me if your machine is ok and the logs.

  • Jeff

    Perfect ! Thank You – You da man

  • Christy

    Your my hero.

    Everything went great and I hope never to see that damn lock ever again lol the final scan with hitman turned up nothing so hopefully that doesn’t mean anything….

  • Christy

    Thank you!!!!!! This guide saved my last nerve!!! I’m on the last step right now and am so excited to put that damn virus behind me. Thank you so much for this very helpful guide.

  • http://attila-farkas.sk attila

    Thanks man, it helped me much. With your guide it was straight forward to stop that vir.
    Thanks a lot

  • Paul

    Thank you!

  • joyce

    I cannot thank you enough for this very helpful procedure. This Virus completely shut me down..that is the System Progressive Protection! Your process has certainly saved me!!

  • saadany

    THANK YOU VERY MUCH FOR YOUR HELP “””” YOU ARE THE MAN

  • paul

    Thanks alot for the info on the system progressive protection virus, you’re a lifesaver!!!!!!

  • Madalina

    Thank you! I couldn’t have removed this virus without your help!

  • Jacque

    Thank you so much! This worked perfectly.

  • Suzy Stone

    Wow is all I can say! What a wonderful, helpful guide you have created….and for free!! May you reap some sort of special windfall of goodness! My husbands ancient laptop was infected, he couldn’t do a thing. So I googled, you popped to the top of the list, I gave him a running commentary of what to do and *voila* it was fixed! Thanks again so very much x

  • nikitas

    Really thanks man this post help a lot of people including me thanks again !

  • Franziska

    Hi,
    Unfortunately step 1 was the only thing I could do, as I’m using an Internet stick and it won’t let me start the internet in the safe mode. Can you help me?

    • Stelian Pilici

      Hello,
      Lets try to fix your computer,please run the below tools while in Normal Mode;
      STEP 1: Run a scan with Malwarebytes Anti-Malware in Chameleon Mode in Norman mode:

      1. Download Malwarebytes Chameleon from here and extract it to a folder in a convenient location
      2. Make certain that your PC is connected to the internet and then open the folder where you extracted Chameleon to and double-click on the Chameleon help file and then follow the onscreen instructions to use it.
      3. If the Chameleon help file itself will not open, then double-click each file one by one until you find one that works, which will be indicated by a black DOS/command prompt window.
      4. Follow the onscreen instructions to press a key to continue and Chameleon will proceed to download and install Malwarebytes Anti-Malware for you
      5. Once it has done this, it will attempt to update Malwarebytes Anti-Malware, click OK when it says that the database was updated successful
      6. Next, Malwarebytes Anti-Malware will automatically open and perform a Quick scan
      7. Upon completion of the scan, if anything has been detected, click on Show Result
      8. Have Malwarebytes Anti-Malware remove any threats that are detected and click Yes if prompted to reboot your computer to allow the removal process to complete
      9. After your computer restarts, open Malwarebytes Anti-Malware and perform a Full System scan to verify that there are no remaining threats

      STEP 2: Run a scan with RogueKiller

      1. Please download the latest official version of RogueKiller.
        RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
      2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
      3. After the scan has completed, press the Delete button to remove any malicious registry keys.
      4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

      STEP 3 Please perform a scan with HitmanPro as seen on the guide.
      If you are having problems starting this program please use the ForceBreach mode as described in the guide.


      STEP 4: Run a scan with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Waiting for your reply to tell me how everything is running!
      Good luck…

  • Kirsten

    Oh my gosh, I cannot give you enough praise for this. I managed to fix my sister’s laptop using these steps, thank you so much. One quick question; can I just delete all the programs I have downloaded now, or would you recommend keeping them there?

    • Stelian Pilici

      Hello Kirsten,
      You can uninstall them if you want,however I do recommend that you keep Malwarebytes and HitmanPro to run regular scan on your computer.
      Stay safe!

  • colski

    Absolutely fantastic. Saved my life. Worked a treet thanks

  • Abbey

    I don’t know what to say, huh should i say you are witch that created by God specially, it work perfectly. God bless you

  • Ilka

    Hammer!!! Trotz meines schlechten Englischs hat alles wunderbar geklappt und es war gar nicht schwer! Vielen Dank!!!

  • Dr.Portalen

    Hy there,

    Thank you very much it worked perfect!!

  • Carrie

    Thank you! Thank-you! Thank-you! Easy instructions, simple for anyone to follow.

  • Jamie H

    Thank you so much. This worked out great.

  • Ife-ebube

    thank you very much. I nearly paid those fools the money. Keep it up

  • Sean

    Very helpful, but i got to the end of step 5 trying to activate the free license and then (error code 26) and it also says that my firewall is blocking hitmanpro and that I need to update to allow. How do i this? Thanks

  • Philly

    Awesome info!!! I thought this was going to put my old laptop to rest. Now its probably running better than before the hijacking!

    Thanks Stelian

  • Dennis

    Hi there! thank you for all but I have encountered a problem at step 6 with the hitman pro, it would allow me to complete the removal of the malware, this was due to an expired license, I have obviously used this in a previous occassion, any suggestions wise sir?
    Cheers
    Dennis

    • Stelian Pilici

      Hello Dennis,
      Let’s see if we can get rid of some of them using the below software:
      1.Run a scan with Kaspersky Virus Removal Tool
      Click here to download the Kaspersky Virus Removal Tool.

      1. Save it to your desktop.
      2. Double click the setup file to run it.
      3. Follow the onscreen prompts until it is installed
      4. Click the Options button (the ‘Gear’ icon), then make sure only the following are ticked:
        • System Memory
        • Hidden startup objects
        • Disk boot sectors
        • Local Disk (C:)
        • Also any other drives (Removable that you may have)
      5. Then click on Actions on the left hand side
      6. Click Select Action, then make sure both Disinfect and Delete if disinfection fails are ticked
      7. Click on Automatic Scan
      8. Now click the Start Scanning button, to run the scan
      9. After the scan is complete, close the program

      2.Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      NEXT,please re-run a scan with HitmanPro and post the log or a screenshot here and I’ll give you instructions on how to remove the left over files.
      Good luck!

  • Amanda

    I’m super grateful for your comprehensive instructions! Thank you!!

  • Anita

    Thank you thank you thank you! What a relief… the scare is over thanks to your excellent clear instructions.

  • Helen

    Excellent. Clear instructions and my laptop is now virus free, many thanks.

  • Virginia Anacleto

    A HUGE “THANK YOU”!!!!!!!!….goes to you.

  • Ruby

    Lots of thanks for taking the time out of your life to explicitly describe how to remove this virus. I can’t believe I was able to do it without any help but yours. Thanks!

  • Flash

    Thank you! excellent solution men!

  • Zita

    Excellent guide, thanks a lot!!!!

  • Tyrone

    THANKS awesome blog u saved my day ;D

  • Ron

    Remove System Progressive Protection. I think this virus came to me in an email on 10/24. From: UPS Support [statements@maill-ups.com] with at Subject of: USPS shipment status ID#98358 It has the UPS Logo in the email. Note the email address misspelling of mail and USPS in the Subject. It said a package I sent on Sept. 27th was lost and I should click on the link below to get shipping info to collect it. Of course I didn’t send a package on that date and I saw the USPS and the UPS confusion. I didn’t notice misspelling of mail. I clicked on the link anyway. What an ass I was. I don’t remember what it did but the virus started its think this morning. I used my laptop to search the web and found your site. I was able to remove it this afternoon. Someone kick me please. Another lessoned learned. Thanks!

    • Karen

      Ron,
      Sounds the same as the email I got, except it was DHL. It looked so real. It even had Deutsche Post on the bottom and I have relatives in Germany so I fell for it. Thanks for Stelian for being one of the good guys.

  • Jess

    My computer was taken hostage this morning by System Progressive Protection. I couldn’t do ANYTHING; everything kept reverting me to the ‘buy this service’ page. Anyway, I was really grateful to find your resource. It’s clear and precise and it really helped. Thanks for the troubleshooting!

  • david vorel

    Very clear instructions. It worked great up until Step 7 Rogue Killer – I kept getting a Dr. Watson error on the scan and could not complete it.

    • Stelian Pilici

      Hello David,
      Please run a scan with the following tools:
      STEP 1: Run a scan with Emsisoft Emergency Kit.

      1. Please download the latest official version of Emsisoft Emergency Kit.
        EMSISOFT EMERGENCY KIT DOWNLOAD LINK (This link will open a download page in a new window from where you can download Emsisoft Emergency Kit)
      2. After the download process will finish , you’ll need to unpack EmsisoftEmergencyKit.zip (Right click on it and select Extract all) and then double click on EmergencyKitScanner.bat
      3. A pop-up will prompt you to update Emsisoft Emergency Kit , please click the “Yes” button.After the Update process has completed , put the mouse cursor over the “Menu” tab on the left and click-on “Scan PC“.
      4. Select “Smart scan” and click-on the below “SCAN” button.When the scan will be completed , you will be presented with a screen showing you the malware infections that Emsisoft Emergency Kit has detected.Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects‘ button.

      STEP 2: Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish
  • Derek

    Indeed very grateful for this assistance!

  • Rob Dog

    You r the bomb, Thank you for the help, it worked great!!!

  • Sarah

    Thank you very much. This worked very well.

  • Dev16

    thanks bro….
    post other issues too…
    related to other malware..
    keep it up bro..

  • mark

    Terrific info very clearly presented, thank you!

  • Nathan

    Excellent description! Clear to the point and easy to understand,Thanks again for your solution.Really work!

  • Elko Gevrenov

    Thank you very much Stelian! The procedure is done in an exemplary fashion – highly commended.

  • Robin

    Thanks so much – worked wonderfully! And an extremely clear procedure – amazing how long it takes to remove something that only takes seconds to cause an infection!

  • monica

    thank you very much!

  • aravindansudhakaran

    Thanks a lot ! Your procedural instructions and explanation are clear and effective. Malware killer, keep it up !

  • RobertByrne

    A friend called with the System Progressive Protection problem. I had never encountered it but promised to see if I could help. I used another computer to search for help and found this blog. I followed the steps and was able to get his computer free of the problem. Thanks a lot for a clear and straight forward removal procedure. It surely save me a lot of time since I didn’t have to reinvent the “wheel.” I told my friend to install some malware/antivirus software as soon as possible.

  • Katie

    Please help! I tried to download Malwarebytes Anti-malware on my computer but it wouldnt let me. I read through the comments and tried to download Malwarebytes Chameleon. It downloaded onto my computer but my computer can’t open it. What else can I do?

    • Stelian Pilici

      Hello Katie,
      While your computer is in Safe Mode with Networking please perform the following scans:
      STEP 1: Run a scan with Emsisoft Emergency Kit.

      1. Please download the latest official version of Emsisoft Emergency Kit.
        EMSISOFT EMERGENCY KIT DOWNLOAD LINK (This link will open a download page in a new window from where you can download Emsisoft Emergency Kit)
      2. After the download process will finish , you’ll need to unpack EmsisoftEmergencyKit.zip (Right click on it and select Extract all) and then double click on EmergencyKitScanner.bat
      3. A pop-up will prompt you to update Emsisoft Emergency Kit , please click the “Yes” button.After the Update process has completed , put the mouse cursor over the “Menu” tab on the left and click-on “Scan PC“.
      4. Select “Smart scan” and click-on the below “SCAN” button.When the scan will be completed , you will be presented with a screen showing you the malware infections that Emsisoft Emergency Kit has detected.Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects‘ button.

      STEP 2: Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish
  • VPN Troubles

    The System Progressive Protection prompts only pop up when I’m connected through VPN & Citrix. When I’m on Citrix it’ll block programs from running and locking me out of folders and applications. When I log off of Citrix and the VPN, the virus prompts disappear and only reappear when I’m logged in. I ran through all the steps listed above and my laptop doesn’t register any malicious items. Not sure what else to do… any suggestions? Thank you!

    • Stelian Pilici

      Hello,
      Can you please run a scan with Combofix, ESET online scanner and post the logs here so that I can get an idea on what’s going on:
      STEP 1 : Run a scan with Combofix
      Download ComboFix from here: COMBOFIX DOWNLOAD LINK #1 (This link will automatically download Combofix on your computer)

      VERY IMPORTANT !!! Save as Combo-Fix.exe during the download.ComboFix must be renamed before you download to your Desktop

      • Close any open browsers.
      • Very Important! Temporarily disable your anti-virusscript blocking and any anti-malware real-time protection beforeperforming a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      1. Double click on ComboFix.exe & follow the prompts.
      2. Accept the disclaimer and allow to update if it asks
      3. When finished, it shall produce a log for you.

      Notes:

      1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
      2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
      3. If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.

      STEP 2: Run a scan with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      NEXT,please run a scan with HitmanPro and RogueKiller as seen on the guide.
      Waiting for your reply to tell me if your machine is ok and the logs.

  • WOLFBblaze

    thanks alot very simple very straight forwarded

  • Katrine

    Hi Stelian.

    Thanks a lot for helping me out! One thing, though: it seems as if HitmanPro no longer provides the option of a free license in their most recent version 3.6.2 – Build 171. However I followed your advice and deleted the files myself.

    Keep up the good work!

  • Sven

    Thanks a lot ! Your procedural instructions and explanation are clear and effective. Malware killer, keep it up !

  • Dominique

    Hello!!!
    I am currently trying to fix my computer by following your steps, but couldn’t do Step 4 and 7. My computer wouldn’t let me do it, because it says it is not safe. What can I do?

    • Stelian Pilici

      Hello Dominique,
      Please ignore any alerts that your computer might generate in this process,because they are just alerts generated by this virus:
      Lets try to fix your computer,please run the below tools while in Normal Mode;
      STEP 1: Run a scan with Malwarebytes Anti-Malware in Chameleon Mode in Norman mode:

      1. Download Malwarebytes Chameleon from here and extract it to a folder in a convenient location
      2. Make certain that your PC is connected to the internet and then open the folder where you extracted Chameleon to and double-click on the Chameleon help file and then follow the onscreen instructions to use it.
      3. If the Chameleon help file itself will not open, then double-click each file one by one until you find one that works, which will be indicated by a black DOS/command prompt window.
      4. Follow the onscreen instructions to press a key to continue and Chameleon will proceed to download and install Malwarebytes Anti-Malware for you
      5. Once it has done this, it will attempt to update Malwarebytes Anti-Malware, click OK when it says that the database was updated successful
      6. Next, Malwarebytes Anti-Malware will automatically open and perform a Quick scan
      7. Upon completion of the scan, if anything has been detected, click on Show Result
      8. Have Malwarebytes Anti-Malware remove any threats that are detected and click Yes if prompted to reboot your computer to allow the removal process to complete
      9. After your computer restarts, open Malwarebytes Anti-Malware and perform a Full System scan to verify that there are no remaining threats

      STEP 2: Run a scan with RogueKiller

      1. Please download the latest official version of RogueKiller.
        RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
      2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
      3. After the scan has completed, press the Delete button to remove any malicious registry keys.
      4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

      STEP 3 Please perform a scan with HitmanPro as seen on the guide.
      If you are having problems starting this program please use the ForceBreach mode as described in the guide.


      STEP 4: Run a scan with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Waiting for your reply to tell me how everything is running!
      Good luck…

  • Kate

    So I got up to step seven, downloaded RogueKiller, it did the prescan, and then when I run the scan, a blue screen comes up and then my computer restarts. It’s done this twice. Is there any way around this or any other software I can download to finish removing all traces of malware?

    Thanks so much for this guide, so helpful!

    • Stelian Pilici

      Hello Kate,
      Lets change the tools.Please do a scan with the following tools:
      1.Run a scan with Kaspersky Virus Removal Tool
      Click here to download the Kaspersky Virus Removal Tool.

      1. Save it to your desktop.
      2. Double click the setup file to run it.
      3. Follow the onscreen prompts until it is installed
      4. Click the Options button (the ‘Gear’ icon), then make sure only the following are ticked:
        • System Memory
        • Hidden startup objects
        • Disk boot sectors
        • Local Disk (C:)
        • Also any other drives (Removable that you may have)
      5. Then click on Actions on the left hand side
      6. Click Select Action, then make sure both Disinfect and Delete if disinfection fails are ticked
      7. Click on Automatic Scan
      8. Now click the Start Scanning button, to run the scan
      9. After the scan is complete, close the program

      2.Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Good luck!

  • Hannah Azman

    Thank you so much for this. Simple and easy to use. For someone who is not very good with technology this was just what I needed thank you xx

  • Brent

    Hey Stelian,

    Thanks so much for posting this. I am on a company laptop, so Hitman will not let me do the free trial version. Is this step absolutely necessary? If so, do you have an alternative suggestion to get the same result?

    Best Regards,
    Brent

    • Stelian Pilici

      Hello Brent,
      Scanning with HitmanPro is free even for companies,you can go ahead with the RogueKiller scan and then check with HitmanPro for other infections…If it will find anything I’ll help you remove it without using this software…
      Good luck!

      • Brent

        Thank you! It was kind of a DUH that I could just go and delete what HitmanPro found. Your instructions were fantastic throughout and you made this whole experience easier to tolerate.

  • paul

    had to run roguekiller in F8, all looks to be working fine now. many, many thanks, you’re a hero!

  • paul

    really great advice, worked well until I got to the last bit about using Roguekiller – my preinstalled Norton 360 said it was OK to use, but then prevented it from opening and removed it, then asking for a reboot. I suspect this is a problem at my end, however!

    • Stelian Pilici

      Hello Paul,
      HitmanPro and Malwarebytes should have been able to get rid of System Progressive Protection,however for your peace of mind and if you have the time you can run this two additional scans:
      STEP 1: Run a scan with Emsisoft Emergency Kit.

      1. Please download the latest official version of Emsisoft Emergency Kit.
        EMSISOFT EMERGENCY KIT DOWNLOAD LINK (This link will open a download page in a new window from where you can download Emsisoft Emergency Kit)
      2. After the download process will finish , you’ll need to unpack EmsisoftEmergencyKit.zip and then double click on EmergencyKitScanner.bat
      3. A pop-up will prompt you to update Emsisoft Emergency Kit , please click the “Yes” button.After the Update process has completed , put the mouse cursor over the “Menu” tab on the left and click-on “Scan PC“.
      4. Select “Smart scan” and click-on the below “SCAN” button.When the scan will be completed , you will be presented with a screen showing you the malware infections that Emsisoft Emergency Kit has detected.Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects‘ button.

      STEP 2: Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish
  • elloisjane

    Yea! The Geekess and I were able to banish System Progressive Protection from my queendom.

  • Daniel

    Thank you!

  • Nuno

    Thanks so much!

    you deserve the nobel prize!!!

  • Amy

    Thank you sooooo much I was ready to flip out :)

  • Tzo

    Excelente post, finalmente pude quitar el malware, gracias!

  • rayes

    system progressive protection scared me to death! thank you very much.. its really work!

  • FloppyDisk

    Thank you for this great info!

  • simon

    Thank you followed your advice to the letter it was clear an simple and have got rid of it once agine thanks

  • jan

    THANKS for your great help!

  • Matt

    Thanks a million!!!!!

    Its too bad that their are low life people in this world that get a rise out of screwing with people’s lives, their work etc. Virus creators should be strung up by their ball sacs and tits and allowed to have junked out computers thrown at them!

    You really saved the day !

  • nick

    this is great,

    stil i have 1 probleme: when everything is done, the icon below on the right stil remains :s. how can i get rid of the icon?

  • Omkar Naik

    Can I delete all the files which were required for removing SPP from my computer now that everything’s OK ?

    • Stelian Pilici

      Hello Omkar,
      Yes,you can uninstall all the tools that we’ve used to remove this infection.
      Stay safe!

  • Straos

    Thank you!!!!!!!!

    • Stratos

      It realy works,thank you….

  • Paul Stillwell

    Hi Stelian, I got through all these steps ok until RogueKiller, everytime I run it, during the prescan, my computer always crashes and reboots.
    I tried downloading Roguekiller to my computer and running from the icon, but it crashes during prescan, so I then deleted RogueKiller and tried just running it straight from the download link without saving to computer. I disabled my Panda Anti-Virus, but it still does it every time.
    Do you know why it might be crashing everytime?
    Many thanks or your help, you are amazing!

    • Stelian Pilici

      Hello Paul,
      Can you please run a scan with Combofix, ESET online scanner and post the logs here so that I can get an idea on what’s going on:
      STEP 1 : Run a scan with Combofix
      Download ComboFix from one of the following locations:
      COMBOFIX DOWNLOAD LINK #1 (This link will automatically download Combofix on your computer)
      COMBOFIX DOWNLOAD LINK #2  (This link will automatically download Combofix on your computer)
      VERY IMPORTANT !!! Save as Combo-Fix.exe during the download.ComboFix must be renamed before you download to your Desktop

      • Close any open browsers.
      • Very Important! Temporarily disable your anti-virusscript blocking and any anti-malware real-time protection beforeperforming a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      1. Double click on ComboFix.exe & follow the prompts.
      2. Accept the disclaimer and allow to update if it asks
      3. When finished, it shall produce a log for you.

      Notes:

      1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
      2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
      3. If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.

      STEP 2: Run a scan with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Waiting for your reply to tell me if your machine is ok and the logs.

      • Paul Stillwell

        Hi Stelian, many thanks for your help, I had an idea of trying RogueKiller in Safe Mode with Networking and it worked fine!
        Is it ok to just do it in Safe Mode or is it important to do it in Normal Mode?
        Many thanks again for your briliant help
        Paul

        • Stelian Pilici

          Hello Paul,
          If you run it in Safe Mode with Networking and everything is fine,then you don’t need to run this program in Normal Mode.
          Stay safe!

  • Dave B

    The system progressive protection Trojan virus scared me to death, As it was on my lap top with very important files for work. I wasnt able to do anything. Thank you so much for your walk thru and expertise. You really know your stuff. Thanks a million

  • jake

    How do u get the registry fix link in step 2

  • JJ

    THIS REALLY WORKS!!!!!! THANK YOU, YOU SAVED ME LOTS OF MONEY

  • PN

    Spot on. Brilliant!

  • helen

    Your a most wonderful genius, thank you sooooo much :)

  • Dustin

    Big thanks for the help.

  • Shavonne

    This really worked. I was able to do it myself. Thank you so much! My system was not able to restore to an earlier point but thankfully I was able to access the internet in safe mode. Thanks again.

  • Pat

    Thanks so much! Keep up with your good work and I appreciate that you put the effort create this blog to help others!

  • FEC

    Thank you so much. What a relief!

  • Dominik

    It helped. Thank you a lot!

  • Linda

    Thank you so much. Your instructions were clear and wonderfully illustrated. I was able to follow them precisely and remove this pesky stuff. Much better this way than paying the $180 the local computer repair shop would charge! Your assistance is much appreciated.

  • p329584

    Perfectly done! Thank you!

  • Matsena

    As I am singing jubilee songs, thank you very much

  • Karen

    Remove System Progressive Protection

    Thank you so, so much…you are AMAZING!!!

  • chryssie

    Thanks! Followed the steps up to malwarebytes, ran a full scan, rebooted, and that vicious system progressive thing was gone. It had taken over my comp and I thought I was going to have to pay someone to get it out. Thanks so much! This really works!!

  • Richard

    Thanks a lot, got infected with System Progressive Protection 3.7.10 Malware, took over security essenttials and shut my exe startup capabilities, including regedit, Thankfully I did a System restore to a pc version 3 days ago and sorted the pop and takeover out, however keys in the registry and embedded files in the system32 folder were still there after restoring my pc, your malware tool, and the rogue killer info really helped. Thank You very much

  • Marli

    What a mission but it’s off :)
    Thanks so much!!!

  • Ram

    it’s really work.
    Thank you so much….!

  • tony

    tymv! u rocked my socks!

  • Paul Jones

    Excellent work

  • peyMAN

    BIIIIIIIIIGGGG thanks

  • R Josey

    U rock! Total fix on my lap following ur instructions.

  • G Norum

    This was a great help, nice that Norton didn’t stop from Download and running..

  • Wes Green

    Thanks! Amazing… Great step by step directions!

  • Baujeana

    Thank you so much! You are truly a God send. I LOVE YOU :)

  • Mark

    well done, thanks

  • mitul

    thank you very much for this tutorial. what an awful, sneaky piece of malware this is. i hope the people who developed it get cancer.

  • Cerebellum

    THANKS!

  • jorgen

    I cannot run the hitman pro program. I have a 32 bit system and when I try to run it , it also downloads down to 1 % and the message the file was interupted. Then I find out it is not compatible. what schall I do ? I have tryed the method forced way to start the hitman pro , program. Can you help?

    • Stelian Pilici

      Hello Jorgen,
      Can you please run the RogueKiller scan as seen on the last step and the re-try to start the HitmanPro scan.
      If your problem persists,please follow this steps and post the logs here so that I can get an idea on what’s going on:
      STEP 1 : Run a scan with Combofix
      Download ComboFix from one of the following locations:
      COMBOFIX DOWNLOAD LINK #1 (This link will automatically download Combofix on your computer)
      COMBOFIX DOWNLOAD LINK #2  (This link will automatically download Combofix on your computer)
      VERY IMPORTANT !!! Save as Combo-Fix.exe during the download.ComboFix must be renamed before you download to your Desktop

      • Close any open browsers.
      • Very Important! Temporarily disable your anti-virusscript blocking and any anti-malware real-time protection beforeperforming a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      1. Double click on ComboFix.exe & follow the prompts.
      2. Accept the disclaimer and allow to update if it asks
      3. When finished, it shall produce a log for you.

      Notes:

      1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
      2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
      3. If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.

      STEP 2: Run a scan with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish
  • Jolene

    Thank you! Thank you!

  • Mar

    You are truly wonderful, thank you!

  • GG

    Thank you so much, this was such a help!

  • Tony

    Thank you SO SO much! I was trying to help a friend who knows nothing about computers, and this site saved the day. Again, THANK YOU!

  • Raf

    Thank you so much! I had no prior experience in removing malwares and I was able to follow through with your directions. This was excellent! Cheers.

  • StuartM

    Thank you very much for this helpful website, you saved my client many hours of frustration :)

  • G Henry Williams

    Thank you!!

  • Richard

    Thanks a lot Stelian. My computer crashed and I was able to repair it with the help of your guide.

  • andrew

    Thank you, I saw this guide for some other malware. Its so perfect and thanks thx THANK YOU!!!!! what happens if hitman goes bad? as in after 30 days? I used the malwarebytes for about a year before and loved the guide to get to it again, Is hitman vital for the perfect cleanse? ***If this is your first time, this guide is ‘mint;***

    • Stelian Pilici

      Hello Andrew,
      If the 30 days trial for HitmanPro ends,you can still scan with this product however you can’t remove the infections.Nevertheless,you can use other tools to remove the malware.:D

  • Chardy

    Life Saver.. I thought I was going to have to crash my PC.. AAAA+ You saved my PC and my headache.
    Thank you so much,
    Charlie

  • Terry

    Carried out everything ok to step 7 my computer restarted but won’t respond to anything ( can’t click on anything or even restart ) help please !!!

    • Stelian Pilici

      Hell Terry,
      Can you please run a scan with Combofix, ESET online scanner and post the logs here so that I can get an idea on what’s going on:
      STEP 1 : Run a scan with Combofix
      Download ComboFix from one of the following locations:
      COMBOFIX DOWNLOAD LINK #1 (This link will automatically download Combofix on your computer)
      COMBOFIX DOWNLOAD LINK #2  (This link will automatically download Combofix on your computer)
      VERY IMPORTANT !!! Save as Combo-Fix.exe during the download.ComboFix must be renamed before you download to your Desktop

      • Close any open browsers.
      • Very Important! Temporarily disable your anti-virusscript blocking and any anti-malware real-time protection beforeperforming a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      1. Double click on ComboFix.exe & follow the prompts.
      2. Accept the disclaimer and allow to update if it asks
      3. When finished, it shall produce a log for you.

      Notes:

      1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
      2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
      3. If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.

      STEP 2: Run a scan with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      NEXT,please run a scan with HitmanPro and RogueKiller as seen on the guide.
      Waiting for your reply to tell me if your machine is ok and the logs.

  • Josh

    Just experienced this issue. Your guide was succinct and very easy to follow. Thank you so much!

  • Tomasz

    Just anoher thank you .
    You really did help us a lot.

  • Dave Sharman

    Many thanks – worked well, I think. Couldn’t run the last stage as my computer won’t recognise a file without an extension, and the download for running ‘any file’ wouldn’t work either. Never mind, it all loooks good and your instructions were very clear

  • Gary

    Thank you for your help. That was a tough one to deal with.

    MALWAREBYTES rules!

    Gary

  • Dilip

    Hi Stelian,

    I am trying to remove this virus, But when I run Rkill, it says OS not supported. I am using Windows 8 Consumer preview. I have tried all 4 versions of Rkill.

    Can I just scan with Malwarebytes in safe mode and remove the virus?

    Regards,
    Dilip

    • Stelian Pilici

      Hello Dilip,
      Yes,go ahead and do a scan with Malwarebytes,and then follow the guide.
      Good luck!

  • gee

    way to go, dude! very helpful!
    you’re the man!

  • Manish

    dude.. you just saved my life.. Thanks a lot !!!!!

  • Tspinner

    OMG THANK YOU SO MUCH!!!

  • tspinner

    How would i download the necessary files? Because the virus does not allow me to access the internet.

    • Stelian Pilici

      Hello Tspinner,
      Can you please try to use the Activation Code provided in the guide,to see if this will fix your problem.
      If not,then we will need to use a USB stick to transfer the tools on the infected computer.

  • Adi

    You are F***ing saviour!!! Got rid of this bloody malware in a snap!

  • Simon

    Great advice, Had this little ****sucker on my in-laws computer, Always goes down well when you can swoop in as the “expert” and save the day.

    Thank you so much for taking the time to document this. Really great, thanks

  • kesara

    thanks a lot to help me from bad malware like system progressive protection.

  • Jat

    Thanks for the great advice!

  • matt

    works like a charm, thanks!

  • Logan

    Great guide. I had to get this off a coworker’s computer this morning and you made it it a snap. Thanks!

  • Arturo

    Hitman Pro no longer includes trial period :-(

    • Stelian Pilici

      Hello Arturo,
      Are you by any chance using a laptop from work?HitmanPro has a free trial for home users however if you are using a corporate machine then you won’t see this option.
      Let’s see if we can get rid of some of them using the below software:
      1.Run a scan with Kaspersky Virus Removal Tool
      Click here to download the Kaspersky Virus Removal Tool.

      1. Save it to your desktop.
      2. Double click the setup file to run it.
      3. Follow the onscreen prompts until it is installed
      4. Click the Options button (the ‘Gear’ icon), then make sure only the following are ticked:
        • System Memory
        • Hidden startup objects
        • Disk boot sectors
        • Local Disk (C:)
        • Also any other drives (Removable that you may have)
      5. Then click on Actions on the left hand side
      6. Click Select Action, then make sure both Disinfect and Delete if disinfection fails are ticked
      7. Click on Automatic Scan
      8. Now click the Start Scanning button, to run the scan
      9. After the scan is complete, close the program

      2.Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      NEXT,please re-run a scan with HitmanPro and post the log or a screenshot here and I’ll give you instructions on how to remove the left over files.
      Good luck!

  • Baldo

    Man thanks a lot! Everything is working but I can not finish removal with Hitman Pro. I don’t have option for FREE TRIAL ….

    • Stelian Pilici

      Hello,
      Are you by any chance using a laptop from work?HitmanPro has a free trial for home users however if you are using a corporate machine then you won’t see this option.
      Let’s see if we can get rid of some of them using the below software:

      STEP 1:Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      STEP 2: Run a scan with Emsisoft Emergency Kit.

      1. Please download the latest official version of Emsisoft Emergency Kit.
        EMSISOFT EMERGENCY KIT DOWNLOAD LINK (This link will open a download page in a new window from where you can download Emsisoft Emergency Kit)
      2. After the download process will finish , you’ll need to unpack EmsisoftEmergencyKit.zip (Right click on it and select Extract all) and then double click on EmergencyKitScanner.bat
      3. A pop-up will prompt you to update Emsisoft Emergency Kit , please click the “Yes” button.After the Update process has completed , put the mouse cursor over the “Menu” tab on the left and click-on “Scan PC“.
      4. Select “Smart scan” and click-on the below “SCAN” button.When the scan will be completed , you will be presented with a screen showing you the malware infections that Emsisoft Emergency Kit has detected.Make sure that everything is Checked (ticked) and click on the ‘Quarantine selected objects‘ button.

      NEXT,please re-run a scan with HitmanPro and post the log or a screenshot here and I’ll give you instructions on how to remove the left over files.
      Good luck!

  • ben

    Hi,i was infected by this and thankfully i managed to get rid of it thanks to yr helpful guide.However,what i noticed is that folders with hidden attributes have became unhidden.For eg. ProgramData in the root of OS drive.
    May i know whether the virus caused this or one of the tools above has reset the folder attributes and whether i can reset to default settings?
    Thanks!

  • Sook

    THANK YOU!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! <3

  • Jack

    YOU BLOODY LEGEND! Thank you so much!!!!!

  • Joe

    As the office “IT” expert, imagine my surprise when this little baby popped up on my computer. I followed all these steps and I appear to be virus free. It was so pervasive, it turned MSE off permanently! I had to reinstall to get it working.

  • hj

    Hi Stelian
    I read your instructions and the comments from all those that tried with hope that I can also save my laptop :) I am trying to remove this system progressive protection thing and i am stuck at step 2. Keep getting the “Registry editing has been disabled by your administrator” message. Can I ask if i have been doing sthg wrong?
    Sorry, i am really quite bad with these things….
    hj

    • Stelian Pilici

      Hello HJ,
      Are you using an Administrator account?You need to get an Administrator account and NOT a Limited User Account.

  • daniel

    Yo dawg,

    I really appreciate your help. I am a local producer and it would be a mess, if I had to reboot everything. Your tutorial saved my ass.
    Thanks bra

    • Robair V.

      You ROCK!! could not imagine the amount of trouble I’d be in had it not been for the tutorial! Save My ass… Well done.

      • Laura

        Hi There….my computer won’t allow me to boot into safe mode by hitting F8…it just stays a black blank screen…so can’t really follow the steps…

        • Stelian Pilici

          Hello Laura,
          Lets try to fix your computer,please run the below tools while in Normal Mode;
          STEP 1: Run a scan with Malwarebytes Anti-Malware in Chameleon Mode in Norman mode:

          1. Download Malwarebytes Chameleon from here and extract it to a folder in a convenient location
          2. Make certain that your PC is connected to the internet and then open the folder where you extracted Chameleon to and double-click on the Chameleon help file and then follow the onscreen instructions to use it.
          3. If the Chameleon help file itself will not open, then double-click each file one by one until you find one that works, which will be indicated by a black DOS/command prompt window.
          4. Follow the onscreen instructions to press a key to continue and Chameleon will proceed to download and install Malwarebytes Anti-Malware for you
          5. Once it has done this, it will attempt to update Malwarebytes Anti-Malware, click OK when it says that the database was updated successful
          6. Next, Malwarebytes Anti-Malware will automatically open and perform a Quick scan
          7. Upon completion of the scan, if anything has been detected, click on Show Result
          8. Have Malwarebytes Anti-Malware remove any threats that are detected and click Yes if prompted to reboot your computer to allow the removal process to complete
          9. After your computer restarts, open Malwarebytes Anti-Malware and perform a Full System scan to verify that there are no remaining threats

          STEP 2: Run a scan with RogueKiller

          1. Please download the latest official version of RogueKiller.
            RogueKiller Download Link (This link will automatically download RogueKiller on your computer)
          2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Scan button to perform a system scan.
          3. After the scan has completed, press the Delete button to remove any malicious registry keys.
          4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

          STEP 3 Please perform a scan with HitmanPro as seen on the guide.
          If you are having problems starting this program please use the ForceBreach mode as described in the guide.


          STEP 4: Run a scan with ESET Online Scanner:

          1. Download ESET Online Scanner utility.
            ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
          2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
          3. Check Yes, I accept the Terms of Use
          4. Click the Start button.
          5. Check Scan archives
          6. Push the Start button.
          7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
          8. When the scan completes, push Finish

          Waiting for your reply to tell me how everything is running!
          Good luck…

          • Melinda Martin

            This is a GREAT site! It is nice to know that in the ongoing war on nasty hijackers like this the good guys are still winning! The instructions were very thorough and the method effective. Thanks so much for your post!!!

            Regards,
            Melinda Martin