Monday, September 13, 2010

Remove IronDefender (The Fake One)

IronDefender (Iron Defender) is a name that is used to designate two different programs. One of these programs is quite legitimate software while another is a rogue antispyware of quite notorious family.
The fake one has a motto “Help protect your PC” and a logo that resembles a shield with white cross. Such logo resembles that of Windows official programs.
Fake IronDefender Removal may be impossible due to the rootkits that deny access to its relevant entries. It is of crucial importance for your computer system to be delivered from the threat as the trojan that makes a core of it will perform actions aimed at system properties deterioration. Click here to get rid of IronDefender rogue antispyware and to repair the damage caused by it.

IronDefender screenshot:



IronDefender removal tool:


IronDefender manual removal instructions:
Delete IronDefender files:
c:\Documents and Settings\All Users\Start Menu\Programs\IronDefender.lnk
c:\Program Files\FDFCA\
c:\Program Files\FDFCA\F0E84.exe
c:\Program Files\FDFCA\Uninstall.exe
c:\WINDOWS\.exe
c:\WINDOWS\.bin
c:\WINDOWS\.dll
c:\WINDOWS\.cpl
c:\WINDOWS\system32\.exe
c:\WINDOWS\system32\.bin
c:\WINDOWS\system32\.dll
c:\WINDOWS\system32\.cpl
%UserProfile%\Desktop\hash
%UserProfile%\Desktop\IronDefender.lnk
%UserProfile%\Local Settings\Temp\.exe
Delete IronDefender registry entries:
HKEY_CURRENT_USER\Software\IronDefender
HKEY_LOCAL_MACHINE\SOFTWARE\IronDefender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IronDefender
HKEY_CURRENT_USER\Software "Install_Dir" = "C:\Program Files\FDFCA"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "vur4.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"

No comments: