Tweet
The Windows Defender Prevented Malicious Software Scam is a Trojan from the Trojan.Tech-Support-Scam family that displays a fake Windows login screen that pretends that the Windows defender has blocked access to the computer because malicious files were found. This is done to try and trick the user into calling the listed remote tech support number in order to sell them unnecessary software and services.
Fake Windows Defender Prevented Malicious Software Scam Removal Guide
The Windows Defender Prevented Malicious Software Scam is a Trojan from the Trojan.Tech-Support-Scam family that displays a fake Windows login screen that pretends that the Windows defender has blocked access to the computer because malicious files were found. This is done to try and trick the user into calling the listed remote tech support number in order to sell them unnecessary software and services.
The text of this alert is:
Please Enter Product Key
Windows Defender prevented an unrecognized and malicious software on your computer. Please enter your Windows Product Key. The Product Key should be on a label or the card inside the box that Windows Disk came in or in the confirmation email you recieved after buying it. if you have upgraded to Windows 10, you have a digital license instead of a key.
A product key is a 25 character code used to active Windows. It look like this:
PRODUCT KEY: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
Customer Support : 1-877-360-0485
The good news is that this tech support scam comes with a build in passcode that you can enter to close the screen and scan your computer with a an anti-malware program. To close the screen you can enter THTY4-89LK6-RTI23-XZTOP-05ERY as the product key. Once the screen is closed you can then scan your computer to remove the infection.
How did the Windows Defender Prevented Malicious Software Scam get on my computer?
It is important to note that this Trojan is installed by other programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.
As you can see, this scam was created to trick you into calling the listed number so that the developers can try and convince you into purchasing unnecessary services or software. For no reason should you call this number, and if you have already have purchased services, I advise you to dispute the charges with your credit card company. To remove this Trojan and any related software for free, please use the removal guide below.
Array
View Associated Fake Windows Defender Prevented Malicious Software Scam Files [path_to]\Adobe Acrobat.exe
View Associated Fake Windows Defender Prevented Malicious Software Scam Registry Information HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Adobe Flash Player [path_to]\Adobe Acrobat.exe
Click here to view the article.
Fake Windows Defender Prevented Malicious Software Scam Removal Guide
- Fri, 02 Dec 2016 15:16:01 EST
- Read 937 times
The Windows Defender Prevented Malicious Software Scam is a Trojan from the Trojan.Tech-Support-Scam family that displays a fake Windows login screen that pretends that the Windows defender has blocked access to the computer because malicious files were found. This is done to try and trick the user into calling the listed remote tech support number in order to sell them unnecessary software and services.
The text of this alert is:
Please Enter Product Key
Windows Defender prevented an unrecognized and malicious software on your computer. Please enter your Windows Product Key. The Product Key should be on a label or the card inside the box that Windows Disk came in or in the confirmation email you recieved after buying it. if you have upgraded to Windows 10, you have a digital license instead of a key.
A product key is a 25 character code used to active Windows. It look like this:
PRODUCT KEY: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
Customer Support : 1-877-360-0485
The good news is that this tech support scam comes with a build in passcode that you can enter to close the screen and scan your computer with a an anti-malware program. To close the screen you can enter THTY4-89LK6-RTI23-XZTOP-05ERY as the product key. Once the screen is closed you can then scan your computer to remove the infection.
How did the Windows Defender Prevented Malicious Software Scam get on my computer?
It is important to note that this Trojan is installed by other programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.
As you can see, this scam was created to trick you into calling the listed number so that the developers can try and convince you into purchasing unnecessary services or software. For no reason should you call this number, and if you have already have purchased services, I advise you to dispute the charges with your credit card company. To remove this Trojan and any related software for free, please use the removal guide below.
Array
View Associated Fake Windows Defender Prevented Malicious Software Scam Files [path_to]\Adobe Acrobat.exe
View Associated Fake Windows Defender Prevented Malicious Software Scam Registry Information HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Adobe Flash Player [path_to]\Adobe Acrobat.exe
Click here to view the article.