Internet Protector Description

Internet Protector is a fake security application that belongs to the large family of rogue anti-malware applications associated with the Win32/FakeRean Trojan. It is well known that malware in the Trojan.Win32/FakeRean family has the capacity of changing its name according to the victim’s operating system. Because of this, it is likely to find versions of Internet Protector named Vista Internet Protector, Win 7 Internet Protector or XP Internet Protector. ESG security analysts have discovered that Internet Protector has absolutely no way of detecting or removing malware; instead, this program is designed to take over the victim’s computer and carry out a well-known online scam. Internet Protector and its clones have been known to disable legitimate security programs, Windows components that are useful for malware removal and recovery and to take over the infected computer’s web browser. Because of this, the Internet Protector scam is not limited to trying to convince computer users that they should buy this useless security tool, but also has implications in how your computer system works. ESG malware analysts recommend removing Internet Protector with a reliable anti-malware program after starting up Windows from an external drive or in Safe Mode.

How Internet Protector Attempts to Scam Its Victims

Superficially, Internet Protector looks legitimate. It even includes an uninstaller utility that is completely useless and seemingly uses a proper installation procedure. However, Internet Protector is designed to display constant alarming messages claiming that your computer is infected with dangerous Trojans and viruses. It also tends to launch highly-visible fake scans and refuses to allow the victim to remove or turn off Internet Protector. The alerts used by Internet Protector are authentic-looking fakes that mimic real Windows error messages. However, these alerts tend to be greatly exaggerated and are merely trying to make the computer user panic so that they can be convinced to purchase Internet Protector. There are many clones of Internet Protector, which include fake security applications like Home Security, Internet Security, Antivirus, Antispyware, Guardian, Total Security, Smart Security, Privacy Protection and Security Protection. All of these fake security programs tend to include a year in the title (2010, 2011 or 2012) as well as using the victim’s operating system as the prefix (XP, Vista or Win 7). For example, Home Security can appear as XP Home Security 2011 or Vista Home Security 2012. Do not fall for this scam, instead of purchasing Internet Protector use a legitimate anti-malware tool to remove Internet Protector from your computer system.

Type: Rogue AntiSpyware Programs

How Can You Detect Internet Protector?

Internet Protector Removal Details

Internet Protector has typically the following processes in memory:

• %AppData%\Internet Protector\securitymanager.exe
• %AppData%\Internet Protector\securityhelper.exe
• %AppData%\Internet Protector\internet protector.exe

Internet Protector creates the following files in the system:

• %AppData%\Internet Protector\icouninstall.ico
• %Programs%\Internet Protector\Internet Protector.lnk
• %AppData%\Internet Protector\icoactivate.ico
• %Programs%\Internet Protector.lnk
• %Programs%\Internet Protector\how to activate Internet Protector.lnk
• %AppData%\Internet Protector\icohelp.ico
• %AppData%\Microsoft\Internet Explorer\Quick Launch\Internet Protector.lnk
• %Programs%\Internet Protector\help Antivirus Protection.lnk

Internet Protector creates the following registry entries:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “[RANDOM DIGITS]“.exe

Important Article Disclaimer