Home Malware Programs Rogue Anti-Spyware Programs Internet Protection 2011

Internet Protection 2011

Posted: April 10, 2011

Although Internet Protection 2011 may use a newer, more professional-looking interface, in all its functions, Internet Protection 2011 is just a copy of older rogue anti-virus programs. Internet Protection 2011 will present itself as a useful and necessary security application right from the start, but all of Internet Protection 2011's warnings and alerts are false positives, and the protection it offers is nonexistent. Your PC may also suffer from problems like crashing programs and changed system settings while Internet Protection 2011 is on-board. Removing Internet Protection 2011 is a high-level task for dedicated anti-malware software, since Internet Protection 2011 is known to use sophisticated rootkit-based techniques to avoid imminent deletion.

Avoiding Common Internet Protection 2011 Infection Attacks

The most widely-reported mean for being infected by Internet Protection 2011 is through trusting in fake online system scanners hosted on dangerous websites. These websites pretend to scan your PC, create fake infection alerts, and then ask you to download Internet Protection 2011 or another form of malware as the fix to a problem that doesn't exist in the first place. Identifying a malicious website may be difficult if you're just looking at the URL or interface; in general, you should only trust a scan from a website that has had independent sources verify its integrity.

Internet Protection 2011 is only a relatively newer version of a rogue threat that's been recycled for some time now. Alternative names for Internet Protection 2011 include Antivirus 2010, Antivirus Antispyware 2011 and Antivirus 2010 Security Centre, but this rogue security program subgroup currently includes over a dozen other known members. Despite slight name differences, all of these PC threats are responsible for the same types of attacks on your PC, and this includes Internet Protection 2011.

After your computer is infected, Internet Protection 2011 will launch with Windows and start a system scan without your permission. You should avoid removing any files that Internet Protection 2011 says are infected, as Internet Protection 2011 is unable to detect real infections and is simply finger-pointing at harmless files.

You may see error messages like the following, as a fear-burgeoning supplement to Internet Protection 2011's scans:

Attention! Network attack detected!
Your computer is being attacked from remote host. Attack has been classified as Remote code execution attempt.

Windows Security Alert
Your computer is making unauthorized copies of your system and Internet files.
You should immediately run full scanning of your system to prevent any unauthorized access to your data.
Click YES to run Antivirus scanner right now.

Attention! Threat detected!
NOTEPAD.EXE is infected with Trojan-BNK.Keylogger.gen
Private data can be stolen by third parties including card details and passwords.
It is strongly recommended to perform threat removal on your system.

All of these supposed threats, including the trojan keylogger detection, are faked. Given that Internet Protection 2011 has no real protective functions, you should set about to deleting Internet Protection 2011 instead of giving it the payments it persistently asks of you.

Internet Protection 2011 - Not Content with 'Just' False Positives

Another issue caused by Internet Protection 2011 is generally blocked program usage; applications will crash or otherwise malfunction simply because Internet Protection 2011 doesn't want them to work! One known method Internet Protection 2011 and its related rogue threats use to accomplish this is to change the permissions of files, with the following error popping up as a result:

Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.

You may also see an 'Access Denied' message instead. This particular attack can be removed by default Windows applications, but Internet Protection 2011 will only re-create the issue if you don't remove Internet Protection 2011 as well.

Internet Protection 2011 may also use rootkit methods to corrupt other processes in memory or to conceal itself. This makes deleting Internet Protection 2011 a task that should be left to either a high-level computer expert or to anti-malware software designed to combat such threats. Trying to remove Internet Protection 2011 the way you would remove an ordinary program or file is likely to cause a variety of problems, such as loss of Internet access, while also not being successful at kicking out Internet Protection 2011.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 c:%UserProfile%\Desktop\Internet Protection.lnk
    2 c:%UserProfile%\Local Settings\Temp\ins1.tmp
    3 c:%UserProfile%\Local Settings\Temp\mv2.tmp
    4 c:\Documents and Settings\All Users\Application Data\[RANDOM CHARACTERS]\[RANDOM CHARACTERS].exe
    5 c:\Program Files\Internet Protection\
    6 c:\Program Files\Internet Protection\Internet Protection.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}KEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[RANDOM CHARACTERS]"

Additional Information on Internet Protection 2011

  • The following messages's were detected:
    # Message
    1 Internet Protection
    Spyware.IEMonster process is found. The virus is going to send your passwords from Internet browser (Explorer, Mozilla Firefox, Outlook & others) to the third-parties. Click here for further protection of your data with Internet Protection.
    2 Internet Protection
    External software tries to control variety of your system files. This may lead to breaking of some data in your system. Click here to protect remote access to your PC & delete these programs.
    3 Internet Protection Firewall Alert
    Warning
    Keylogger activity detected!
    Your account in social network is under attack. Click here to block unauthorized modification by removing threats (Recommended)
    4 Internet Protection
    Your system has come under attack of harmful software. Click here to deactivate it.
    5 Internet Protection Firewall Alert
    Internet Protection has prevent a program from accessing the Internet.
    "iexplore.exe" is infected with Trojan. This worm has tried to use "iexplore.exe" to connect to remove host and send your credit card information.
    6 Internet Protection Firewall Alert
    Suspicious activity in your registry system space was detected. Rogue malware detected in your system. Data leaks and system damage are possible. Please use a deep scan option.
    7 Internet Protection
    Your computer is under the infections threat. Run instant shield protection to safe your data and prevent internet access to your credit card information. Select this to run instant shield.
    8 Internet Protection Firewall Alert
    Your computer is being attacked from a remote machine!
    Block Internet access to your computer to prevent system infection.
    Attacker IP: [ip address]
    Attack type: RCPT exploit

Related Posts

Loading...