Malware Protector 2008 Removal Guide
Do you know what Malware Protector 2008 is?
DESCRIPTION
Malware Protector 2008 or MalwareProtector 2008, is a rogue application that comes from the Zlob.Trojan group of infections. Malware Protector 2008 can be installed without your knowledge running in the background where it is able to display annoying popups and alert messages. Usually Malware Protector 2008’s popups state that you are infected with some type of infection which is totally bogus. Malware Protector 2008 uses this tactic to force computer users into purchasing the full Malware Protector 2008 program.
Do you have black bugs appearing on your screen like a screen saver that is eating away at your desktop image? This is a clear sign that you have a spyware infection or the rogue anti-spyware program Malware Protector 2008 installed. Many people have seen a screen saver where it has bugs eating away at the desktop but this time it is not for fun or for “saving your screen from burn-in. This time Malware Protector 2008 will not only eat away at your screen but potentially eat away at your wallet if you ever slip up and pay for this worthless program.
In non-techie terms: Malware Protector 2008 does not remove any spyware or malware on your computer as it claims too. Ultimately you will be wasting your money if you purchase Malware Protector 2008. The malwareprotector2008.com website was set up for the purpose of downloading and selling the Malware Protector 2008 program. Do not visit this website or purchase the Malware Protector 2008 application.
Malware Protector 2008 screen shot image:
MalwareProtector2008.com website image:
Aliases: Malware Protector 2008, MalwareProtector 2008, MalwareProtector2008.com.
Malware Protector 2008 has an interstitial page that displays the following message:
Reported Insecure Browsing: Navigation blocked.
Insecure Internet activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, install an antivirus and antispyware software. We recommend you to protect your PC now and continue safe Internet browsing. Click here to get full advanced real-time protection and continue browsing.
Continue to this website unprotected (not recommended)
What is an interstitial page?
An Interstitial page is a web page that is displayed before the actual expected content page. This type of page is widely used mainly as an advertisement page. If you click on a link on some web pages before it sends you to the desired web page, it will redirect you to a temporary page where an ad is displayed. Many rogue anti-spyware programs or infections are using this method where instead of an ad page it is part of a malicious page that may entice the distribution, sell or install of spyware.
Malware Protector 2008 Automatic Removal Instructions
This automatic removal method is for non-techie computer users. If you’re too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.
- Download and save SmitFraudFix to your desktop.
- Restart your computer in Safe Mode (how to do safe mode). Once the
desktop appears, double click on the SmitfraudFix.exe on your desktop. - After the credits screen, you’ll see a menu. Select the option number 2, which is ‘Clean (safe mode recommended)’, and then
press Enter to delete infect files. - SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.
- Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
- SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
file?’ Answer by typing Y (Yes) and hit Enter. - Reboot your computer to complete the cleaning process.
- After reboot, a Notepad screen may appear containing a log of all the files
removed from your computer. If it doesn’t appear, a file will be created called
rapport.txt in the root of your drive, (Local Disk C:). - Restart your computer in Safe Mode (how to do safe mode).
- Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
click Yes to confirm that you want all the items to go to the Recycle Bin. - Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
you want all the items to go to the Recycle Bin. - Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.
Malware Protector 2008 Manual Removal Instructions
This manual removal method is for techie computer users. Malware Protector 2008 manual removal may be difficult and time consuming to remove. There’s no guarantee that Malware Protector 2008 will be removed completely. So read the Malware Protector 2008 removal steps carefully and good luck.
Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.
- Uninstall Malware Protector 2008 Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall Malware Protector 2008 if found. - To stop Malware Protector 2008 processes (view process removal steps)
Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
Search and stop these Malware Protector 2008 processes:
%ProgramFiles%\shcev9j0e1b1\Uninstall.exe
MalwareProtector2008Setup.exe
shcas8j0ec0t.exe
shcev9j0e1b1.exe
%ProgramFiles%\shcev9j0e1b1\shcev9j0e1b1.exe
MalwareProtector2008.exe
For each unwanted process, right-click on it and then select “End task”. - To Unregister Malware Protector 2008 DLLs (view DLL removal steps)
Search and unregister these Malware Protector 2008 DLLs:
%ProgramFiles%\shcev9j0e1b1\msvcr71.dll
%ProgramFiles%\shcev9j0e1b1\shcev9j0e1b1Skin.dll
%ProgramFiles%\shcev9j0e1b1\MFC71ENU.DLL
%ProgramFiles%\shcev9j0e1b1\MFC71.dll
%ProgramFiles%\shcev9j0e1b1\msvcp71.dll
To locate the Malware Protector 2008 DLL path, go to Start > Search > All Files or Folders. Type Malware Protector 2008 and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
Once you have the Malware Protector 2008 DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister). - To unregister Malware Protector 2008 registry keys (view registry keys removal steps)
Go to Start > Run > type regedit > press OK.
Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
Search and delete these Malware Protector 2008 registry keys: - If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
- Remove Malware Protector 2008 Directories.
To find Malware Protector 2008 directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.Right-click on the Malware Protector 2008 folder and select Delete.
A message will appear saying ‘Are you sure you want to remove the folder Malware Protector 2008 and move all its contents to the Recycle Bin?’, click Yes.
Another message will appear saying ‘Renaming, moving or deleting Malware Protector 2008 could make some programs not work. Are you sure you want to do this?’, click Yes. - To remove Malware Protector 2008 icons on your Desktop, drag and drop them to the Recycle Bin.
You’ve completed the Malware Protector 2008 manual removal instructions!
I hope this article has helped you solve your Malware Protector 2008 problems. If you want to contribute to this article, post your comment below.
Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There’s no guarantee that Malware Protector 2008 will be completely removed from your computer. Seek professional help if your computer continues to experience problems.
Did You Find this Article Helpful?
Subscribe to Spyware Techie for more!
Or get latest articles to your via email:
After automatic removal instruction step 5, I clicked “y” for “Registry cleaning - do you want to clean the registry” the Notepade report showed up already before I reboot the computer.
I rebooted it anyway and back in safe mode but step 6 did not come up.
I skipped step 6, 7, 8, and 9. then proceed to step 10, 11 and rebooted back to normal mode.
The malware protector 2008 spyware still showed up in my normal mode and I still could not find my screen saver in control panel - display icon.
Can anyone help me?
What did I do wrong?
Thanks Spyware Techie. Woke up this morning with Malware Protector eating my screen and flashing warnings at me. Doesn’t help that I have Spyware Dr. and AVG both running at all times! At least I knew it was a fake and headed to your site. I’m not very computer literate, but I did get thru your instructions and seem to have won this round of attacks! I found that the second set of instructions for Manual Removal worked really well. The malware has added a second round of manipulation. Now when you tell it to uninstall, it threatens you in a popup with a “charge back” policy for uninstalling! Jerks! Thanks again.
I just want to thank you for your post and instructions for removing the Malware Protection 2008. My husband’s computer was infected and I have spent more hours than I care to think about trying to fix it. Not exactly the way I had planned on spending this beautiful day in California! Anyhow, I have followed your instructions and I am happy to say the little munching bugs on the blue screen are now gone… thanks again for taking the time to post this info.
Thank you for the easy to follow instructions! I am happy to have the problem fixed and have no more bugs crawling on that annoying blue screen. Just wish I would have tried this to fix first before going out and buying an antivirus w/ antispyware program and wasting time and money only to not have the problem fixed! Thanks again for the post.
Ok so I have done both off these steps above and i still have these bugs and the annoying program coming up. Now When i try and uninstall it , it says that the uninstall file cant be found and it has the flashlight looking around and asks if i would like to try and find the file myself. When i try and delete the folder from program files i get the message” Cannot delete MFC71.dll access is denied.” and it says t to make sure that its not protected. I’m really frustrated and don’t want to have to re install windows because thats a pain but all these sites say the same thing as above and aren’t any help. PLEASE HELP ME!!!!
Have done rmoved the program using all those methods, but still have those dam bugs eating my screen.
Have even gone in and found “blacklog.scr” and removed that. it seems to only come on if I dont use the mouse and not all the time, is there something I am missing.
Is there no way of stopping, making illegal or sueing these companies or people.
for the time wasted or just for the interference of personal property. ie our pc’s
Ron
Malware Protector 2008 also affected my wallpaper and my screen properties. It replaced my wallpaper with its own screen and then altered the screen properties, so now when I right-click the screen and select properties my Desktop and Screensaver tabs are missing.
Do you know where in the registry to go to restore those tabs? I was able to go into the registry and manually change the wallpaper to my original settings, but it would be nice to have the tabs back.
Another change that was made affected the login that was in use when I was infected. If I login as administrator I can open all the user folders except the one for the user that was logged in when infected. When I try to open that one it refuses to open. All the other user folders show a + except for that one. If I log on as that user then I can access all the files in that folder. Any Ideas? I suspect that this also requires a registry tweak.
Thanks. This removed it but I have a couple of residual problems. I no longer can access my “desktop” or “screensaver” tabs in my display properties so I cannot get rid of the wallpaper it installed or the bug screensaver. I manually changed both but it keeps resetting it. My Trend AntiVirus keeps blocking the screensaver but the file is not actually located in the system32 directory as it says it is so I can’t remove it. It is still perpetuating these two things. Any solutions?
ok. so i did the second step and it got rid of the annoying program, but what about the background and the screensaver? my background still has the spyware warning and the screensaver showing the bsod still shows up. id be worried that it’s a real bsod but as soon as i move my mouse it disappears. well anyway, anyone have any hints?
I tried using the non-techie version. I did everything the directions stated, and the malware protection program is still there. i cant get it off.
google “hide screen saver tab” and you should find a guide to get your screen saver and desktoptabs back. it involves using run -> regedit
i followed all the instructions and its still on my compurter!
I have the same problem as chayun…
i deleted the malware protector but the bsod screensaver keeps coming back!
So any ideas how i could delete the screensaver thing.
everytime i delete it its back 5minutes later so any ideas??
I manually removed all of the malware protector files, but like a lot of people above, i still can’t get my desktop tab and screensaver back! i don’t know what to do!! any advice?
Malware Protector 2008 decided to install itself on my computer a few days ago, and I just today (hopefully) got rid of it.
Instead of being named MalwareProtector 2008, it disguised itself on my system as “shcvosj0e5c1.exe” so I don’t know if anyone else has found that.
I used their own damn software to figure this out >D
When MalwareProtector 2008 tries to run a test on your computer, click on “Processees Running” Then go down to the icon that is the same as Malware Protector 2008 and write down the name it has given itself.
Then, go to “My Computer” and click for a search folder. Type that name into the computer searcher and delete any files that have that name.
This worked for me, but I’m not a huge computer techie so don’t take my absolute word for it.
Thanks for the initial directions, though! ^_^ They helped me get rid of that shitty software.
And I didn’t have bugs crawling on the screen, instead I had a screensaver pop up that says I have to re-start my computer, and then it “shows” windows restarting, and just kind of keeps repeating that. I still have the screensaver problem, even if the pop-up crap is gone, so I gotta figure out how to fix that…
And one way you can temporarily change your background is to find the picture you want as your background on the internet, right click and go down to “place as background” That worked for me, until I had to re-start my computer ><
malware protector 2008 installed itself on my computer also, and after many tries, and the software continuing to reload itself, I logged on in safe mode and deleted the files manually and then went into the registry and ran search on the main file and deleted all entries. That took care of it. I then installed threatfire from PC Tools and it caught it trying to connect to the malware main server and reload itself.
Lynn
To get the desktop and screensaver tabs back - as Matt says above, Google “hide screen saver tab” - the method I used was to run gpedit.msc from a command line (Group Policy Editor), then navigate to User Configuration / Administrative Templates / Control Panel / Display. There should be several settings including “Hide Screen Saver tab” and “Hide Desktop tab.” You want those two (and probably all the others) to show “Not configured” on the right - but here’s the trick - if they’re already set to “Not configured” you might need to double-click each one, select Enabled and hit OK, then go back into it and select Not Configured again, before it will take effect.
Hi, I had the same problem with this malware protector. Managed to remove the stuff but couldn’t change the wallpaper as the tab had been removed. To get it back I had to do the following:
To resolve this problem, follow these steps:1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following registry subkey:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
3. In the right-pane, right-click the NoDispAppearancePage value if the value exists, and then click Delete.
4. Repeat step 3 for the following registry values if these values exist in the registry:• NoDispCPL
• NoDispBackgroundPage
• NoDispScrSavPage
• NoDispSettingsPage
Note Locate any registry value that says “Wallpaper” if it exists. In the right pane, right-click the registry value, click Delete, and then click OK.
5. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE_\Software\Microsoft\Windows\CurrentVersion\Policies\System
6. In the right-pane, right-click the NoDispAppearancePage value if the value exists, and then click Delete.
7. Repeat step 6 for the following registry values if these values exist in the registry:• NoDispCPL
• NoDispBackgroundPage
• NoDispScrSavPage
• NoDispSettingsPage
Note Locate any registry value that says “Wallpaper” if it exists. In the right pane, right-click the registry value, click Delete, and then click OK.
8. For the changes to take effect, you may have to restart the computer after you delete these registry values.
I have the same problem as Marisa, except that in step 11 I don’t even have a \Local Settings\Temp in any of my users in documents and settings
if anyone know what the problem is, please email me
any help would be much appreciated…
hi i dont know what im doing wrong i do everything it says to do and its still on my computer, it randomly restarts off and on i need help please help me ! i have an XP
Everything is back to normal except my screensaver and desktop tabs, I deleted it from the registry but when I restart my pc, it is back to Malware Protector 2008 settings… I need help… please.
This website[malware] uploaded itself on my computer yesterday, I believe it is a rogue company also who can do nothing but sell false help, I have reported it
to all the networks, my daughter said she had the same problem, called slayton
computer co. in charlotte nc and he finally got rid of it, it may take a computer co
to get rid of it, I cannot seem to delete it from my files,so I may have to call the above, I did not have a protector and that may be how it picked up on me, no matter how carefull I was.
Thanks Redmeister, that worked perfectly. Got back my display and screen saver tabs. Didn’t even have to restart.
I have tried everything provided on this list of instructions. Now I can not open any of my programs. When I searched “MSVCR71.DLL” it was attached to just about every program on my computer. As was “MFC71.DLL” Am I completely screwed????
Also when I went to the “Run” box and typed in “CMD” for the command box, it opened and then immediately closed. I have tried it a few times to no avail.
Any help from you folks would be GREATLY appreciated.
Thank you shcvosj0e5c1.exe SUCKS !!
Everybody follow what he did, i did exactly the same and it got rid of it finally after having it for about 2 weeks!
when the malware loads, go to process running and find the one that has the logo the same as malware- it should look like a red and blue badge?
and then go to Start, Search, all files put in malware protector 2008 look in local hardrive c
To follow exactly what he did-
His post is from June 15, 2008
What a great site! Thank you so much for posting the removal instructions, and thanks to everybody who posted supplemental info. I got hit at work Friday when I was goofing around, and would have been in deep doo-doo if I hadn’t been able to clear the problem with the help of this site.
Now, here’s something I can contribute that will help. I followed all of the instructions but, like several of you, couldn’t get rid of everything. Here’s the key: The file names seem to change from user to user; the software doesn’t use the same naming convention every time. When I looked under processes, I didn’t see shcev9j0e1b1 but I saw something similar, so I took a chance and deleted that. I also realized that my lingering problem files all had “ee3t” in the name, so I searched for those at each step and deleted them. That’s how I got rid of the screen saver and warning message that wouldn’t go away. I found three files in c:\windows\prefetch and three in c:\windows\system32. Once I deleted those, problem solved.
Thanks again and good luck to everyone (except the scumbags who created this problem for the rest of us).
The most exciting part of this virus, after I finally destroyed, I think, is that I get to choose a new Wallpaper for my desktop, lol.
I am having a really tough time getting rid of this thing… i tried the directions above and also tried the spyware doctor program which proclaims it can remove this insidious program… Has anyone else run into difficulties??? Should i load the malware proctector 2008 and try to run through the above checklist again??? Any suggestions are much appreciated.
Thank you.
thanks to shcvosj0e5c1.exe and Brett,
I followed the those directions, slightly modifiied. I rebooted so it would start its scan again, tracked down its icon and file name like you said, had to first turn off its processes through windows task manager in processes and only then could I delete it from searching through files on my computer. It seems to have piggy backed onto my hard drive with another one called “antivirus xp 2008″. that’s my new task.
good luck everyone