Threat Database Rogue Anti-Spyware Program Windows Safety Protection

Windows Safety Protection

By Domesticus in Rogue Anti-Spyware Program

Threat Scorecard

Threat Level: 100 % (High)
Infected Computers: 6
First Seen: February 7, 2011
Last Seen: January 8, 2020
OS(es) Affected: Windows

Windows Safety Protection Image

Windows Safety Protection comes from a long line of bogus anti-virus program (e.g. Windows Health Center, Windows AntiSpyware Solution, Windows Problems Remover, and Windows Shield Center) intended to trick computer users into paying money to remove malware infections from their PC. In reality, Windows Safety Protection is the cause of the malware infection.

Windows Safety Protection installs itself and runs upon startup disabling desktop icons and the Taskbar. A splash screen will appear with the options "Safe startup" and "Normal startup." The only real choice is "Safe startup" as the other option is blocked by the program. Windows Safety Protection will then take on the form of a fake Microsoft Security Essentials alert and proceed with a bogus system scan. This is where scare tactics come into play. The result of the scan will come back as "multiple threats" and suggest you download the rogue anti-virus program Windows Safety Protection. If you opt to "continue unprotected" the process will restart next time you start your computer until frustration inevitably compels the victim to buy the "fix."

The reality is that the same people responsible for Windows Safety Protection hijacking your system are the same people selling you the "fix." The people who build this type of malware are extremely clever when it comes to maintaining the program's grip on your computer. They do this by blocking Windows utilities such as the Task Manager, which could be used to terminate Windows Safety Protection. The manual removal process of Windows Safety Protection can be tedious and require several tries but it is preferable to a complete system reformat. Whatever you do, do not pay for the "fix." Windows Safety Protection does not delete malware infections. Windows Safety Protection is another scareware that should be removed with a reputable anti-virus program.ScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshotScreenshot

SpyHunter Detects & Remove Windows Safety Protection

File System Details

Windows Safety Protection may create the following file(s):
# File Name MD5 Detections
1. lmpmpn.exe 136302b43f8bad29ad9134c6b13c8e88 1


The following messages associated with Windows Safety Protection were found:

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.


Most Viewed