Tuesday, July 26, 2011

Removal of Avast Enhanced Protection Mode that benefits on stolen names

Avast Enhanced Protection Mode is the same trick that has previously been played with Norton and Eset. The idea is to take a name of renowned AV solution as a basement; put it into the beginning of the annoyware name and add the following wording: “Enhanced Security Mode”.
Through such plain procedure, relevant counterfeits have been produced to the above three trustworthy products.
The article features removal of Avast Enhanced Protection Mode malware, but the free scanner available here is a working remedy for any of the above “Enhanced” counterfeits.
The adware described here is a piece of fake security solution. It is typically installed as a content of a kind absolutely unrelated to security solutions for Windows, for instance, it might be disguised as a codec.
Once the adware has arrived, it tries to block already installed security tools. An efficient solution such as the one above would detect the adware attack and repel it.
Then the adware generates its notorious popup which states that Avast runs in enhanced mode because of crowds of viruses detected. After several similar popups, here comes inevitable urgent suggestion to activate the program. Instead of that, it is strongly recommended to refrain from trusting the rascals and get rid of Avast Enhanced Protection Mode malware

Avast Enhanced Protection Mode snapshot:



Manual guide:
Delete infected files:

%Users%\[UserName]\Downloads\OTS.exe
%Windows%\l1rezerv.exe
%Windows%\systemup.exe
%Windows%\sysdriver32.exe

Delete infected registry entries:

HKEY_LOCAL_MACHINE\Software\Avast Enhanced Protection Mode
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Avast Enhanced Protection Mode”

No comments: