Microsoft Security Essentials Enhanced Protection Mode

Posted: July 28, 2011

Microsoft Security Essentials Enhanced Protection Mode Description

ScreenshotRather than being the Microsoft product that its name implies, Microsoft Security Essentials Enhanced Protection Mode is a rogue security program that fakes being part of Security Essentials so that Microsoft Security Essentials Enhanced Protection Mode can disable your computer's security. PCs that have a Microsoft Security Essentials Enhanced Protection Mode infection may seem to be fully-protected, but this is a dangerous illusion that's created Microsoft Security Essentials Enhanced Protection Mode while it quietly shuts down all real Microsoft Security Essentials features. Since this may lead to remote attacks by criminals or attempts to install spyware, Trojans, worms or other malicious software, our SpywareRemove.com malware researchers recommend removing Microsoft Security Essentials Enhanced Protection Mode with expediency and an accommodating anti-malware scanner.

Don't Think That Microsoft Won't Disown Microsoft Security Essentials Enhanced Protection Mode

Microsoft Security Essentials Enhanced Protection Mode is another member of a burgeoning family of rogue anti-virus programs that use well-known PC anti-virus brands to hide their infections. Our SpywareRemove.com research team has managed to find quite a few new members of this rapidly-growing group, including Microsoft Defender Enhanced Protection Mode, McAfee Enhanced Protection Mode, Comodo Enhanced Protection Mode, Dr.Web Enhanced Protection Mode, Avira Enhanced Protection Mode and Avast Enhanced Protection Mode.

You can differentiate between Microsoft Security Essentials Enhanced Protection Mode and a normal Microsoft Security Essentials program by keeping an eye out for the following giveaway signs:

  • The appearance of Microsoft Security Essentials Enhanced Protection Mode on your PC will coincide with the appearance of a new Windows taskbar icon. If you happen to click this icon, an unfamiliar red-hued pop-up will appear and show the following text:

    "Attention! [Rogue security program name] operates under enhanced protection mode. This is a temporary measure necessary for immediate response to threat from virus. No action is required from you."

    However, there is no real 'enhanced protection mode' in Microsoft Security Essentials, and this pop-up doesn't detect any real virus-related infections on your PC.

  • Microsoft Security Essentials Enhanced Protection Mode will also attempt to make it appear as though your Security Essentials threat databases are always up-to-date. Microsoft Security Essentials Enhanced Protection Mode does this by changing the 'last updated' statistics to match whatever day and time it was when you last logged in to your computer. Microsoft Security Essentials Enhanced Protection Mode does not, of course, actually bother to update your threat databases.

The Real Functions Behind Microsoft Security Essentials Enhanced Protection Mode's Back

While Microsoft Security Essentials Enhanced Protection Mode is making you think that all is well with false info like the above, Microsoft Security Essentials Enhanced Protection Mode actually will try to disable Microsoft Security Essentials and other security programs. Our SpywareRemove.com malware analysts have found that these actions will leave your computer vulnerable to other attacks, including remote attacks that control your entire PC. Since deleting Microsoft Security Essentials Enhanced Protection Mode should use real security software when possible, you may want to reboot from an external storage device or use Safe Mode to access any software that Microsoft Security Essentials Enhanced Protection Mode has blocked.

Although Microsoft Security Essentials Enhanced Protection Mode isn't related to the last-known family of rogue anti-virus programs that are installed by Fake Microsoft Security Essentials Alert, any Microsoft Security Essentials Enhanced Protection Mode infection is still likely to come along with other infections such as ZlobTrojans. Our SpywareRemove.com malware experts have spotted Microsoft Security Essentials Enhanced Protection Mode being distributed by fake Flash update links, and you should take extra care to acquire your media updates only from legitimate sources.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Microsoft Security Essentials Enhanced Protection Mode may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

Registry Modifications


The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\Software\Microsoft Security Essentials Enhanced Protection ModeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft Security Essentials Enhanced Protection Mode"

Additional Information

The following messages's were detected:
# Message
1Microsoft Security Essentials ENHANCED PROTECTION MODE Attention! Microsoft Security Essentials operates under enhanced protection mode. This is temporary measure necessary for immediate response to the threat from virus. No action is required from you.

Home Malware Programs Rogue Anti-Spyware Programs Microsoft Security Essentials Enhanced Protection Mode

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.