Home Malware Programs Rogue Anti-Spyware Programs Malware Protection

Malware Protection

Posted: April 15, 2011

Threat Metric

Threat Level: 10/10
Infected PCs: 12
First Seen: May 27, 2011
Last Seen: April 18, 2018
OS(es) Affected: Windows

Malware Protection is a rogue anti-malware application and uses bad scanning results along with a variety of fake system errors to force you to purchase Malware Protection. Any supposed positive feature of the rogue anti-malware application Malware Protection is entirely faked. Adding insult to injury, Malware Protection may also cancel downloads, hijack control of your web browser or prevent applications from running. Due to all of these threats and the simple fact that Malware Protection has nothing helpful to give your computer, you should remove Malware Protection as soon as you can by utilizing a genuine anti-malware program.

Malware Protection is Promoted and Enabled by Hijackers

Malware Protection is known to be promoted on the malicious website Sky-protection.com, although there may be other mirror domains for Malware Protection, too. This website, besides falsely promoting Malware Protection as a good anti-malware program, has a reputation for installing web browser hijacker components. This is likely to be done without your consent through the abuse of security holes in your browser, and can best be prevented by disabling JavaScript and Flash and then avoiding visiting Sky-protection.com and similar Malware Protection-affiliated sites.

Browser hijacks will prevent you from accessing normal sites by displaying errors or advertisements, alter your search results and homepage, and may directly force you towards a dangerous web domain. If you think your browser is being hijacked, chances are high that you've acquired Malware Protection or similar malware.

Malware Protection itself is anything but a good security program and may be strongly related to similar threats such as Best Malware Protection, Internet Security 2011, Internet Security Essentials and Internet Antivirus 2011. Aside from different names, these rogue anti-malware programs are close to identical in all notable and invariably harmful traits.

All of these fake anti-malware programs, including Malware Protection, are known mostly for creating fake system alerts and fake results on scanning displays. Most errors will include threats of keyloggers or other serious infections and will indicate that serious system components are corrupted. The latter is a ploy used to make you think that an unrelated infection is causing an important application (like Task Manager or your anti-virus scanner) to crash, when, in fact, it's Malware Protection causing the problem.

How to Handle Your Malware Protection Problem

Besides attacking your web browser and shutting down programs indiscriminately, Malware Protection may also prevent you from downloading files or change a variety of security-related settings for the worse. If left alone for a prolonged period of time, this state of affairs will almost certainly result in further harm to your PC. Protecting your computer from future threats as well as the present one in Malware Protection will require using good anti-malware software.

If you don't have such software available to turn to, you can reboot into Safe Mode with Networking to download the appropriate programs without Malware Protection launching during startup. Even if you already have what you need, you may want to switch to Safe Mode in any case, simply to prevent any possible malware attacks during the removal of Malware Protection.

Always have your scanners updated before you run a scan, since Malware Protection and other rogue anti-malware programs are known for creating new, less easily-detected versions of themselves on a regular basis. Remember to scan your entire PC rather than just scanning for Malware Protection, since Malware Protection is likely to come with related infections such as Trojans.

Malware Protection

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%AppData%\defender.exe File name: defender.exe
Size: 878.08 KB (878080 bytes)
MD5: 63cc8941ba65952edf8ddab1a6809260
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %AppData%
Group: Malware file
Last Updated: August 17, 2022

Related Posts


  • B. Grazioso says:

    I can\'t open the internet. How can I do this using another laptop?

  • Jcarr says:

    I cannot get into windows at all...cannot open in safe mode therefore. Malware blocks all operations. I totally fell for this scam...even paid for one yr service when told I had w32 worm et al problems. After giving cc info I entered code given to activate and no results.

    How do I fix this???????? Can I use another computer somehow? Buy disk somewhere, load and fix it????

    Help someone

  • Cubbles says:

    I have no idea how this got on my computer, but I managed to kill it with a simply enough method.

    Go to 'My Computer', then to your hard drive (Usually C:). This folder should have lots of files and folder. (Ex. Programs Files)

    Make the files organized by Date Modified. (You can use the right-click menu.)
    Near the top of the folders you should see a hidden folder called 'ProgramData'.

    If you don't have hidden folders shown, press ALT then go to 'tools' then 'folder options'. Go to view. Then under advance options you should see 'Show hidden folders'. Activate this.

    Now go into the "ProgramData" Folder. Now organize the files according to Date Modified again. At the top you should see 'defender.exe'. This is the accursed program. But, you can't delete it, because itโ€™s in use.

    Instead, rename it. (Right click menu) Specifically, rename the EXE part. (Ex. dafin.ee). Now move the file to your desktop.

    If you don't see the "exe" part to change it, go to the folder options in the same fashion as last time. Then go to the view and advance options again. This time fine 'Hide the file extensions...' deactivate this.

    Restart Computer.

    The program won't start. ๐Ÿ˜€ Delete the file knowing you outsmarted professional scumbags.

  • L B says:

    i rebooted, opened in safemode and followed the regedit instructions above and it seemed to work. the damn thing stopped me from opening the internet, task manager (it would open the immediately close), regedit - pretty much everything you could use to fix this problem so i had to reboot and then was lucky to remove it from my computer! thanks for the help!

  • Ben J says:

    I tried Cubble recommendation & It Worked! Thanks Cubbles, whoever you are.

  • Steve says:

    THanks a lot Cubbles, You saved my life. Appreciate your help.

  • TedE says:

    Cubbles, you're great...It worked...I was so stressed. My daughters laptop was completely taken over, couldn't do anything... I tried everything and it just kept going to the Malware Protection scan...your fix WORKED...
    Now to go in and delete the other files it put on

  • elainecroft@att.net says:

    Thank you CUBBLES! You are my new best friend. I followed your directions and I am now free of this malware.

  • Dave says:

    Cubbles is the man! I had to search for the defender.exe file in a couple of places but finally found it and I got control back on my computer. That was scary for awhile thinking about how much data I could lose.

  • Ellen says:

    follow Cubbles' steps, still cannot find the programdata, anyone can help to remove the M P?

  • mike says:

    the machine of mine that is infected run on windows xp. cant find the \\\\\\\"programdata\\\\\\\" file. anyone have any ideas. cant start in safe mode either. it says the start up file is missing or corrupt.

    thanks in adavance

  • Rod says:

    Hi all. I have the same problem and am completely blocked but cannot find the ProgramData directory. Show hidden files is activated. My computer runs on XP Professional. That may be the difference. If I try on normal mode I cannot not even run taskmgr or regedit. Any comments or suggestions? Thanks!! R

  • martin says:


  • WTENNErdy says:

    you must perform all this in safe mode the program cannot work in safe mode giving you the change to fallow the instructions, to get to safe mode at boot hit the F8 key and select boot safe mode, then start by looking in task manager, if not in there click start then run then type in REGEDIT it will take you to the registery editor, hope this helps everyone,

  • Magik says:

    Cubbles thank a million bro.

    If you're having trouble finding the "programdata" folder. Just click start on the taskbar, then click search. Then on the bottom left use the search companion. Search for all files under the tern "defender". The program will come up, then right click and "open file location". Follow the rest of Cubbles steps and you will be homefree!

  • jds says:

    I have all of the symptoms discussed but i cant find where it says defender i am in program data on safe mode. and i also searched for it. If i do find it and bring it to my desk top how do i delete it? will it be under uninstall?

  • Alex says:

    to get onto the internet safely go on safe mode with networking. Lets you go on the internet without viruses spamming you. To get onto safe mode with networking restart your computer and when the screen is black (normaly there is a little dash in the top left of the screen hit F8 then use the arrow keys to go down to >safe mode with networking< for me it inlarges everything so if it happens to you it is normal. I am running a scan right now and i hope i get rid of this horrable virus

  • Steph!! says:

    O.m.g... thanks to you Cubbles my computer is wayy better... i didnt even know what to do when it first came! haha wow u really worked wonders.. and i thank you HEAPS!

  • Amie says:

    I found the ProgramData folder, but could not find the defender.exe.
    I went to search, but could not find it either. Is there other name ?

  • Amie says:

    I found ProgramData, but could not see defender.exe.

    I want to search, but could not find it either.

    Does it come with other name sometimes ?
    I recent got infected today.

    Please help, i feel helpless and frustrated,.

  • Amie says:

    I finally found the defender.exe. It's not in the ProgramData, but in my user name. The best way to find its location is to right click on the Malware Protection icon, and you will see the path. Once find it, change the name, and it's done...

    OMG...Cubbles you have saved many lives here. Thank you very much.

  • Ripp says:

    dude cubbles knows what up. nothin else was working and then i read his post and did exactly what it said and it worked instantly. big time thanks to cubbles. saved a lot of time and stress. if u cant find defender.exe in ur files just search for it in my computer and it should show up.

  • Michael Devees says:

    Malware Protection looked like a legit program. I was fooled once, but twice, NO SIR! How so you remove the registry entries, having this pop-up every time I start up but I was able to get rid of Malware Protection. Any ideas?