FacebookTwitterLinkedIn

Windows Defender Prevented An Unrecognized Software Scam

Also Known As: "Windows Defender prevented an unrecognized software" virus
Damage level: Severe

What is "Windows Defender Prevented An Unrecognized Software"?

"Windows Defender Prevented An Unrecognized Software" is a fake error discovered by MalwareHunterTeam. This error message claims that Windows Defender has detected suspicious activity/software on the system. Furthermore, "Windows Defender Prevented An Unrecognized Software" locks the computer screen, after which users are unable to take any further action.

Windows Defender Prevented An Unrecognized Software scam

As mentioned above, "Windows Defender Prevented An Unrecognized Software" claims to prevent suspicious applications from running and blocking the computer screen. This error instructs users to enter a Windows Activation Key. It also provides a customer support telephone number ("1-844-212-8344"), which users can call to request help.

Since this error is fake, entering a genuine activation key will not work - the computer will remain locked. Therefore, users have no other choice but to call the telephone number. Be aware, however, that the so-called "technical support" service is also fake. Cyber criminals generate revenue by scaring and tricking victims into calling and paying for services that are not required.

These people usually request remote access to users' computers. Immediately after connecting, criminals stealthily change system settings and/or install malware. They then claim to "detect" additional issues and offer their help for an extra fee. They are also likely to demand answers to various "yes" or "no" questions.

Criminals record "yes" responses and then use these as proof that users supposedly agreed to undertake various online transactions (e.g., credit card charge, online purchases, etc.) For these reasons, never attempt to contact these people.

Fortunately, MalwareHunterTeam provides a key ("85080 - 83080 - 04260 - 27040 - 32290"), which can be used to unlock compromised computers.

Threat Summary:
Name "Windows Defender prevented an unrecognized software" virus
Threat Type Ransomware, Crypto Virus, Files locker
Symptoms Can't open files stored on your computer, previously functional files now have a different extension, for example my.docx.locked. A ransom demanding message is displayed on your desktop. Cyber criminals are asking to pay a ransom (usually in bitcoins) to unlock your files.
Distribution methods Infected email attachments (macros), torrent websites, malicious ads.
Damage All files are encrypted and cannot be opened without paying a ransom. Additional password stealing trojans and malware infections can be installed together with a ransomware infection.
Malware Removal (Windows)

To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner.
▼ Download Combo Cleaner
To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

"Windows Defender Prevented An Unrecognized Software" is virtually identical to Microsoft Has Blocked The Computer, Windows Product Key Failure, Exploit.SWF.bd, and dozens of other fake errors.

Unlike "Windows Defender Prevented An Unrecognized Software", most of these errors are displayed by malicious websites, however, all are designed to extort money from unsuspecting users. Many users visit these websites inadvertently - they are redirected by various potentially unwanted programs (PUPs) that infiltrate systems without permission.

As well as causing redirects, potentially unwanted programs generate 'malvertising' ads (pop-ups, coupons, banners, etc.), gather various information, and potentially misuse system resources, thereby posing a direct threat to your privacy and Internet browsing safety.

How did potentially unwanted programs install on my computer?

It is currently unknown how criminals proliferate "Windows Defender Prevented An Unrecognized Software" scam, however, potentially unwanted programs are distributed using a deceptive marketing method called "bundling" and via 'malvertising' ads. "Bundling" is stealth installation of third party programs together with regular software/apps.

Developers hide PUPs within the "Custom/Advanced" settings or other sections of the download/installation processes. They do not adequately disclose such information.

Malvertising ads redirect users to malicious websites or, in some cases, execute scripts that download and install malware/PUPs. Many users rush the download/installation processes and click various ads. In doing so, they expose their systems to risk of various infections.

How to avoid installation of potentially unwanted applications?

To prevent this situation, be very cautious when browsing the Internet and especially when downloading/installing software. Cyber criminals invest a great deal of time and resources into designing malicious ads. Therefore, most appear legitimate - determining if they originate from the visited (legitimate) website is virtually impossible.

When clicked, these ads are notable, since they redirect to survey, gambling, adult dating, pornography, and other similar sites. If you encounter such ads, immediately remove all suspicious applications and browser plug-ins. Furthermore, analyze each window of the download/installation processes and cancel all additionally-included programs.

Never use any third party download/installation tools, since criminals monetize them by promoting dubious applications (the "bundling" method). The main reasons for computer infections are poor knowledge and careless behavior - the key to safety is caution.

"Windows Defender Prevented An Unrecognized Software" error message:

Customer Support: 1-844-212-8344
Microsoft Windows
Product Key
Please enter product key
Windows Defender prevented an unrecognised and malicious software on your computer. Please enter your windows product key. Your product key should be on the box that the windows DVD came in or an email that shows that you bought Windows which you'll find on your PC or inside the battery compartment of your laptop.
The product key looks similar to this:
PRODUCT KEY: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX

Pop-up presented once this virus is executed:

Windows Defender Prevented An Unrecognized Software virus start

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

"Windows Defender Prevented An Unrecognized Software" virus removal:

Step 1

Windows XP and Windows 7 users: Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer starting process press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, then select Safe Mode with Networking from the list.

Safe Mode with Networking

Video showing how to start Windows 7 in "Safe Mode with Networking":

Windows 8 users: Go to the Windows 8 Start Screen, type Advanced, in the search results select Settings. Click on Advanced Startup options, in the opened "General PC Settings" window select Advanced Startup. Click on the "Restart now" button. Your computer will now restart into "Advanced Startup options menu".

Click on the "Troubleshoot" button, then click on "Advanced options" button. In the advanced option screen click on "Startup settings". Click on the "Restart" button. Your PC will restart into the Startup Settings screen. Press "5" to boot in Safe Mode with Networking Prompt.

Windows 8 Safe Mode with networking

Video showing how to start Windows 8 in "Safe Mode with Networking":

Windows 10 users: Click the Windows logo and select the Power icon. In the opened menu click "Restart" while holding "Shift" button on your keyboard. In the "choose an option" window click on the "Troubleshoot", next select "Advanced options". In the advanced options menu select "Startup Settings" and click on the "Restart" button.

In the following window you should click the "F5" button on your keyboard. This will restart your operating system in safe mode with networking.

windows 10 safe mode with networking

Video showing how to start Windows 10 in "Safe Mode with Networking":

Step 2

Log in to the account infected with the "Windows Defender Prevented An Unrecognized Software" virus. Start your Internet browser and download a legitimate anti-spyware program. Update the anti-spyware software and start a full system scan. Remove all entries detected.


If you cannot start your computer in Safe Mode with Networking, try performing a System Restore.

Video showing how to remove viruses using "Safe Mode with Command Prompt" and "System Restore":

1. During your computer starting process, press the F8 key on your keyboard multiple times until the Windows Advanced Options menu appears, and then select Safe Mode with Command Prompt from the list and press ENTER.

Boot your computer in Safe Mode with Command Prompt

2. When Command Prompt Mode loads, enter the following line: cd restore and press ENTER.

system restore using command prompt type cd restore

3. Next, type this line: rstrui.exe and press ENTER.

system restore using command prompt rstrui.exe

4. In the opened window, click "Next".

restore system files and settings

5. Select one of the available Restore Points and click "Next" (this will restore your computer system to an earlier time and date, prior to the "Windows Defender Prevented An Unrecognized Software" virus infiltrating your PC).

select a restore point

6. In the opened window, click "Yes".

run system restore

7. After restoring your computer to a previous date, download and scan your PC with recommended malware removal software to eliminate any remnants of the "Windows Defender Prevented An Unrecognized Software" virus.

If you cannot start your computer in Safe Mode with Networking (or with Command Prompt), boot your computer using a rescue disk. Some viruses disable Safe Mode making it's removal complicated. For this step, you require access to another computer.

After removing "Windows Defender Prevented An Unrecognized Software" virus from your PC, restart your computer and scan it with legitimate anti-spyware software to remove any possible remnants of this security infection.

Other tools known to remove this scam:

▼ Show Discussion

About the author:

Tomas Meskauskas

Tomas Meskauskas - expert security researcher, professional malware analyst.

I am passionate about computer security and technology. I have an experience of over 10 years working in various companies related to computer technical issue solving and Internet security. I have been working as an author and editor for pcrisk.com since 2010. Follow me on Twitter and LinkedIn to stay informed about the latest online security threats. Contact Tomas Meskauskas.

PCrisk security portal is brought by a company RCS LT. Joined forces of security researchers help educate computer users about the latest online security threats. More information about the company RCS LT.

Our malware removal guides are free. However, if you want to support us you can send us a donation.

About PCrisk

PCrisk is a cyber security portal, informing Internet users about the latest digital threats. Our content is provided by security experts and professional malware researchers. Read more about us.

Malware activity

Global malware activity level today:

Medium threat activity

Increased attack rate of infections detected within the last 24 hours.

QR Code
Windows Defender prevented an unrecognized software virus QR code
Scan this QR code to have an easy access removal guide of "Windows Defender prevented an unrecognized software" virus on your mobile device.
We Recommend:

Get rid of Windows malware infections today:

▼ REMOVE IT NOW
Download Combo Cleaner

Platform: Windows

Editors' Rating for Combo Cleaner:
Editors ratingOutstanding!

[Back to Top]

To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.