Saturday, August 6, 2011

Remove Microsoft Defender Enhanced Protection Mode

Remove Microsoft Defender Enhanced Protection Mode
Microsoft Defender Enhanced Protection Mode is a fake antivirus program that produce fake protection that cannot protect the computer from any kind of malware, trojans or virus. Microsoft Defender Enhanced Protection Mode infections being distributed by using trojan, including posing as fake updates for media content such as Flash. Similar methods, especially those that involve fake browser updates or fake media codec updates, are also used by trojans like Zlob and Fake Microsoft Security Essentials Alert that distribute different types of rogue security applications. Microsoft Defender Enhanced Protection Mode installs into the computer and will configure itself to start automatically (in registry) when Windows boot. Microsoft Defender Enhanced Protection Mode WILL SURELY disable the update of other legitimate antivirus but the user will not know about it because Microsoft Defender Enhanced Protection Mode always show that the antivirus is up-to-date. Microsoft Defender Enhanced Protection Mode blocks many antivirus from executing in the computer so that to prevent itself from removing by real antivirus.

Microsoft Defender Enhanced Protection Mode can be removed by stopping the processes and removing the files by using Emsisoft HiJackFree. Then the user should remove the registry entries added or modified by Microsoft Defender Enhanced Protection Mode shown in the removal guide below. All files related to Microsoft Defender Enhanced Protection Mode must be deleted. The user should do it under Windows Safe Mode. The user should also run a full scan on the computer as Microsoft Defender Enhanced Protection Mode uses trojan to infect the computer.

Microsoft Defender Enhanced Protection Mode enable remote attacks on the computer so that other malicious malware can be easily installed without any confirmation from the user and all of them do it secretly. The infected computer will be infected by many type of malwares.

Microsoft Defender Enhanced Protection Mode will show this message to the user:
Microsoft Defender ENHANCED PROTECTION MODE Attention! Microsoft Defender operates under enhanced protection mode. This is temporary measure necessary for immediate response to the threat from virus. No action is required from you.

Microsoft Defender Enhanced Protection Mode should be removed immediately!

Microsoft Defender Enhanced Protection Mode Removal Guide
Kill Process
(How to kill a process effectively?)
%Users%\[UserName]\Downloads\OTS.exe
%Windows%\l1rezerv.exe
%Windows%\sysdriver32.exe
%Windows%\systemup.exe

Delete Registry
HKEY_LOCAL_MACHINE\Software\Microsoft Defender Enhanced Protection Mode
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft Defender Enhanced Protection Mode"

Remove Folders and Files
%Users%\[UserName]\Downloads\OTS.exe
%Windows%\l1rezerv.exe
%Windows%\sysdriver32.exe
%Windows%\systemup.exe
remove the files stated in the autorun setting.

No comments:

Post a Comment