Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Block exe files from running
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
SecurityProtection

Security Protection

Security Protection is a rogue antipyware product which looks very much like a reliable security program. It is a clone of Malware Protection which has been known to plague computer users worldwide. The relational between the two rogues is obvious, because they have similar interfaces and use the same methods to achieve their malicious goals. The main aim of Security Protection is effortless financial gain.

This rogue is able to enter the computer's system via Trojan infection. The Trojan which downloads Security Protection can be caught in various suspicious websites. In order to avoid being infected by Trojans, the user must be careful about what links he clicks on, and what sites he opens. Most of the time the Trojan related to Security Protection can be downloaded automatically, and it does not need to prompt the user about the installation. Everything is done without the user's knowledge or consent.

When this rogue is installed it runs a fake system scan, "scanning" the directories which exist in the affected computer. However the errors that Security Protection "finds" are not real, therefore, one should ignore security notifications and recommendations received from Security Protection. Some of the prompts are thus:

Security Protection has found 14 useless and UNWANTED files on your computer!
Information on removal
Potentially dangerous files were found on your system during the last scan!
It is strongly recommended that you remove them immediately
Serious threats were detected
11 items are critical privacy compromising content
1 items is medium privacy threats
2 items are junk content of low privacy threats

Potential risks:
Exposure of your private data, including credit card information, etc.
Slow web-surfing and malware downloads while visiting websites
Windows running slow and system crashes

Activation is highly recommended
Activate Now

The ironic thing is that Security Protection claims to be protecting the user from negative malware symptoms that it causes itself: exposure of credit card information, slow internet speed and system crashes are common results of Security Protection's infection. If one wants to avoid it (and one surely should), the first thing the user has to do, is close the application and don't even think about paying for it. Then it is necessary to remove Security Protection from the computer. It is up to user whether he chooses manual or automatic removal. All means of removal work as long as Security Protection disappears from the computer for good.

Download Spyware Removal Tool to Remove* Security Protection
  • Quick & tested solution for Security Protection removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Security Protection

Files associated with Security Protection infection:

106.exe
1.exe
defender.exe
73.exe
%appdata%\defender.exe
defender.exe
%ALLUSERSPROFILE%
%ALLUSERSPROFILE%\Anwendungsdaten
1.exe
106.exe
%APPDATA%
%ALLUSERSPROFILE%\Application Data
%ALLUSERSPROFILE%\Datos de programa
%ALLUSERSPROFILE%\Dati applicazioni
73.exe

Security Protection processes to kill:

106.exe
1.exe
defender.exe
73.exe
%appdata%\defender.exe
1.exe
defender.exe
73.exe
106.exe

Remove Security Protection registry entries:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Security Protection
Disclaimer

Comments

  1. FionH Aug 8, 2011

    Perfect !
    - just helped a colleague get rid of this nuisance !!!

    A small hint in addition:
    When the "defender.exe" is running you cannot delete the file.
    But you can rename it to for instance "defender.xxx" which will stop prevent it from being run at startup. - and after restart you can the delete it.

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.