Home Malware Programs Rogue Anti-Spyware Programs Malware Protector 2008

Malware Protector 2008

Posted: June 4, 2008

Threat Metric

Threat Level: 10/10
Infected PCs: 20
First Seen: July 24, 2009
Last Seen: October 1, 2019
OS(es) Affected: Windows

ScreenshotMalware Protector 2008 or MalwareProtector2008 is a fake anti-spyware program that may be installed by a Trojan infection. Malware Protector 2008 is known to display popups and system notifications warning computer users of an infection. This is usually a bogus attempt to get you to purchase the Malware Protector 2008 program. Malware Protector 2008 can be extremely difficult to manually remove.

Malware Protector 2008 is different from the average rogue anti-spyware program Internet users are use to falling for. Malware Protector 2008, or MalwareProtector 2008, displays a screensaver with bugs that are crawling on your screen and displays an interstitial ad page that reports that you're computer is under a virus attack.

Malware Protector 2008 interstitial page states the following:

"Reported Insecure Browsing: Navigation blocked.
Insecure Internet activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, install an antivirus and antispyware software. We recommend you to protect your PC now and continue safe Internet browsing. Click here to get full advanced real-time protection and continue browsing.
Continue to this website unprotected (not recommended)"

Malware Protector 2008 loads a rogue toolbar called Nmwegbsf Toolbar which shows icons: 'Remove Popups', 'Scan Spyware', 'Security Test' and 'Spam Protection'. Nmwegbsf Toolbar's icon all link to Malware Protector 2008 for now. Eventually, rogue toolbars like Nmwegbsf Toolbar change the destination of its links once there's a new rogue anti-spyware program to promote. Another Malware Protector 2008 symptom is that it hijacks your computer's wallpaper background and shows a box that states:

"Warning! Spyware detected on your computer!
Install an antivirus or spyware remover to clean your computer."

Malware Protector 2008 is a new breed of rogue anti-spyware programs and Internet users need to be aware that Malware Protector 2008 is not the last of the programs that will use malware screensavers and interstitial ad pages posing as security alerts. It is strongly recommended to remove Malware Protector 2008 from your system upon detection.

Screenshot

Aliases

Troj/FakeAV-U [Sophos]Malicious Software [Prevx1]Application/MalwareProtector2008 [Panda]Program:Win32/Malwareprotector [Microsoft]potentially unwanted program WinFixer [McAfee]not-a-virus:FraudTool.Win32.MalwareProtector.a [K7AntiVirus]Generic.Win32.Malware.Malwareprotector [Ikarus]FraudTool.Win32.MalwareProtector.a [F-Secure]Not-A-Virus.PUP.MalwareProtector.a [eWido]Trojan.FakeAV.Winifixer [ClamAV]Application.Generic.10375 [BitDefender]Win32:Adware-gen [Avast]SPR/Fake.MalProtect [AntiVir]Mal_Nucrp11 [TrendMicro]MalwareProtector2008 [Sunbelt]
More aliases (45)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Malware Protector 2008 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



shcl7cj0ea59.exe File name: shcl7cj0ea59.exe
Size: 1.56 MB (1564672 bytes)
MD5: c2a7adb6e2cca2ef0a47fcf632de4f8b
Detection count: 98
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
shcl7cj0ea59Skin.dll File name: shcl7cj0ea59Skin.dll
Size: 6.26 MB (6262784 bytes)
MD5: 9066250e926d9aefa8eac36821f9da0c
Detection count: 81
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009
shcas8j0ec0t.exe File name: shcas8j0ec0t.exe
Size: 1.16 MB (1167360 bytes)
MD5: f3a85f9c80101de37bc514cc3471f96c
Detection count: 60
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

5 Comments

  • hana says:

    Hey I removed everything but the wallpaper connected with this virus - how can I get rid of that?

  • Ruth says:

    IT WOULD OF BEEN USEFULL IF I UNDERSTOOD IT BETTER. I KNOW NOTHING ABOUT DELETING FILES, BUT I WOULD LIKE TO TRY TO DELETE THIS SPYWARE BEFORE IT RECKS MY COMPUTER. THANK YOU

  • Deaq says:

    Right Click your Desktop, go to properties, and go to the \"Desktop\" tab. You can pick any background you like that you have downloaded.

  • Kimi Miller says:

    I was trying to download a free screensaveer from Google, and wound up with this bug eating virus, and it keeps wanting me to buy its removal program. What nerve!

  • david standley says:

    send me a way to register threw my email or a phone number .....i need spyhunter