McAfee Enhanced Protection Mode

Posted: July 28, 2011

McAfee Enhanced Protection Mode Description

ScreenshotMcAfee Enhanced Protection Mode is a rogue anti-virus program that tries to hide itself as a part of McAfee anti-virus products. However, McAfee Enhanced Protection Mode isn't a legitimate McAfee program and will try to destroy your computer's security while displaying some information that makes it seem as though all is well. Like many rogue security programs and Trojans that are related to them, our malware researchers have discovered that McAfee Enhanced Protection Mode infects computers by pretending to be a fake media update. Since McAfee Enhanced Protection Mode is an extreme security risk, you should delete McAfee Enhanced Protection Mode from your PC with an anti-virus program of good repute the very moment you spy McAfee Enhanced Protection Mode on your computer.

Tiptoeing Around McAfee Enhanced Protection Mode and Its Copycat Rogue Anti-Virus Programs

Even though McAfee Enhanced Protection Mode desperately wants you to think that McAfee Enhanced Protection Mode is just a normal part of McAfee-brand software, McAfee Enhanced Protection Mode is neither a real anti-virus program nor a program that has any real anti-virus features. Other rogue anti-virus programs that share their symptoms with McAfee Enhanced Protection Mode include Microsoft Security Essentials Enhanced Protection Mode, Microsoft Defender Enhanced Protection Mode, Dr.Web Enhanced Protection Mode, Comodo Enhanced Protection Mode, Avira Enhanced Protection Mode and ESET Smart Security Enhanced Protection Mode.

Our research team has found that McAfee Enhanced Protection Mode and related rogue security programs tend to infect new PCs by using Flash update links; similar fake media updates are also used by Trojans, such as Zlob and Fake Microsoft Security Essentials Alert, to install other families of rogue security programs. To avoid ever needing to worry about how to remove McAfee Enhanced Protection Mode from your PC, obtain your Flash and other media-related updates from official and trustworthy websites.

Dispelling McAfee Enhanced Protection Mode's Shoddily-Crafted Illusion of Security

McAfee Enhanced Protection Mode can't detect viruses or other infections and doesn't even try to do so. However, what McAfee Enhanced Protection Mode does do an excellent job of is disabling your security programs to soften your PC up for other attacks. One major risk that our malware analysts have found coinciding with McAfee Enhanced Protection Mode infections is the possibility of other rogue security programs being installed, although other attacks, such as the installation of spyware or recruitment of your PC into a botnet, are also possible.

To find McAfee Enhanced Protection Mode before it's too late, look out for two primary signs of infection that pertain to all rogue anti-virus programs in its subgroup:

  • Inaccurate update times for your threat definition databases. McAfee Enhanced Protection Mode will link the displayed update times to your login times so that it looks like you never need to update your virus protection.
  • McAfee Enhanced Protection Mode will also add an icon to your taskbar that displays an 'enhnaced protection mode' message and a virus warning. This pop-up exists just to give a false explanation about why your real McAfee software isn't working with the following message:

    "Attention! [Rogue security program name] operates under enhanced protection mode. This is a temporary measure necessary for immediate response to threat from virus. No action is required from you."

Only deleting McAfee Enhanced Protection Mode will allow you to use your McAfee anti-virus software normally once again. If McAfee Enhanced Protection Mode blocks any attempts to remove McAfee Enhanced Protection Mode with another form of security software, consider using Safe Mode to disable McAfee Enhanced Protection Mode.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to McAfee Enhanced Protection Mode may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\Software\McAfee Enhanced Protection ModeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "McAfee Enhanced Protection Mode"

Additional Information

The following messages's were detected:
# Message
1McAfee ENHANCED PROTECTION MODE Attention! McAfee operates under enhanced protection mode. This is temporary measure necessary for immediate response to the threat from virus. No action is required from you.

Home Malware Programs Rogue Anti-Spyware Programs McAfee Enhanced Protection Mode


Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.