Home Malware Programs Rogue Anti-Spyware Programs ESET Smart Security Enhanced Protection Mode

ESET Smart Security Enhanced Protection Mode

Posted: July 27, 2011

ScreenshotESET Smart Security Enhanced Protection Mode is another rogue security program that fakes being part of any previously-installed ESET-brand software on your PC, while ESET Smart Security Enhanced Protection Mode deactivates all of your computer's real security features. Many ESET Smart Security Enhanced Protection Mode infections have been acquired from fake media updates, and particular care should be taken to avoid unofficial update sources if you want to lower your risk of being attacked by ESET Smart Security Enhanced Protection Mode. You can identify the ESET Smart Security Enhanced Protection Mode infection by checking for certain unusual pop-ups and taskbar icons, and once found, ESET Smart Security Enhanced Protection Mode can be removed with any good anti-malware program.

It's Not So Smart to Trust ESET Smart Security Enhanced Protection Mode

ESET Smart Security Enhanced Protection Mode is careful to show only the barest signs of its existence on your PC, since ESET Smart Security Enhanced Protection Mode wants to blend in with your real ESET anti-virus programs. Although ESET Smart Security Enhanced Protection Mode is just one of many rogue anti-spyware programs that also borrow legitimate brands to conceal security-attacking behavior, our SpywareRemove.com malware analysts have found that all rogue anti-spyware applications in the ESET Smart Security Enhanced Protection Mode family exhibit similar attributes. The two defining characteristics of any ESET Smart Security Enhanced Protection Mode infection or any related infection include:

  • Having a threat database update status that always matches the time that you logged in to your computer. This ESET Smart Security Enhanced Protection Mode deception tries to trick you into thinking that you're always updated, so that there never is a need for you to try to update it by yourself.
  • A new icon on your taskbar that creates an apple-red pop-up with the following unusual and poorly-phrased message:

    "Attention! [rogue program name] operates under enhanced protection mode. This is a temporary measure necessary for immediate response to threat from virus. No action is required from you."

Regrettably, ESET Smart Security Enhanced Protection Mode doesn't keep track of your updates, nor does ESET Smart Security Enhanced Protection Mode try to protect you with any kind of enhanced security mode. In fact, ESET Smart Security Enhanced Protection Mode infections will do the exact opposite and disable as much of your security software as they can manage.

Staying Alert for ESET Smart Security Enhanced Protection Mode's Slander on the ESET Brand

ESET Smart Security Enhanced Protection Mode will try to infect your PC by disguising itself as a Flash player or other media-related update. To avoid this common rogue security program infection route, simply download all updates from the most direct and legitimate sources that are available.

Similar infections that are related to ESET Smart Security Enhanced Protection Mode can also be acquired in the same way. Although ESET Smart Security Enhanced Protection Mode's relatives use different brands to name themselves, our SpywareRemove.com research team has found that they show the same generically malicious characteristics. Copies of ESET Smart Security Enhanced Protection Mode include Avira Enhanced Protection Mode, Norton Enhanced Protection Mode and Avast Enhanced Protection Mode.

When uninstalling a rogue security program like ESET Smart Security Enhanced Protection Mode, the use of a good anti-virus program is always recommended, since ESET Smart Security Enhanced Protection Mode and other rogue security applications will typically alter the Registry and make other advanced changes to your system settings. If ESET Smart Security Enhanced Protection Mode prevents you from using your anti-virus software, booting from Safe Mode or an external device can disable ESET Smart Security Enhanced Protection Mode's startup routine.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%Windows%\l1rezerv.exe File name: %Windows%\l1rezerv.exe
File type: Executable File
Mime Type: unknown/exe
%Windows%\systemup.exe File name: %Windows%\systemup.exe
File type: Executable File
Mime Type: unknown/exe
%Windows%\sysdriver32.exe File name: %Windows%\sysdriver32.exe
File type: Executable File
Mime Type: unknown/exe
%Users%\[UserName]\Downloads\OTS.exe File name: %Users%\[UserName]\Downloads\OTS.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINE\Software\ESET Smart Security Enhanced Protection ModeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "ESET Smart Security Enhanced Protection Mode"

Additional Information

The following messages's were detected:
# Message
1ESET Smart Security ENHANCED PROTECTION MODE Attention! ESET Smart Security operates under enhanced protection mode. This is temporary measure necessary for immediate response to the threat from virus. No action is required from you.

Loading...