Showing posts with label Defense. Show all posts
Showing posts with label Defense. Show all posts

Saturday, June 12, 2010

DefenseCenter (Defense Center) Removal Information

Trojans are one of the most popular agents utilized by hackers to propagate DefenseCenter (Defense Center) in the worldwide web. Instant Messaging (IM) spam when user is invited to click the link is the art-of-the-day trick applied to drop the rogue into as much computers as possible. Inexperienced or impatient users are likely to click the link delivered with IM unintentionally trying to close the messenger. The downloading process starts automatically if there is no firewall and browser security preferences are low to medium.
The above scheme is not the only one applied and there are ways based on luring users to download DefenseCenter deliberately.
Remove DefenseCenter as a program of no benefits for you and of possible great damage to your working station. Even if the damage is local, DefenseCenter removal is reasonable as that would free captured by the rogue system resource.
What about threats and issues that the rogue pretends to look for, that point is that is just a pretending. Click here to get the list of true viruses and get rid of DefenseCenter scam, as well as all the viruses as specified in the final scan results table.

DefenseCenter screenshot:


DefenseCenter removal tool:



DefenseCenter manual removal guide:
Delete DefenseCenter files:

c:\Documents and Settings\All Users\Favorites\_favdata.dat
c:\Program Files\Defense Center
c:\Program Files\Defense Center\about.ico
c:\Program Files\Defense Center\activate.ico
c:\Program Files\Defense Center\buy.ico
c:\Program Files\Defense Center\def.db
c:\Program Files\Defense Center\defcnt.exe
c:\Program Files\Defense Center\defext.dll
c:\Program Files\Defense Center\defhook.dll
c:\Program Files\Defense Center\help.ico
c:\Program Files\Defense Center\scan.ico
c:\Program Files\Defense Center\settings.ico
c:\Program Files\Defense Center\splash.mp3
c:\Program Files\Defense Center\Uninstall.exe
c:\Program Files\Defense Center\update.ico
c:\Program Files\Defense Center\virus.mp3
%UserProfile%\Desktop\Defense Center Support.lnk
%UserProfile%\Desktop\Defense Center.lnk
%UserProfile%\Desktop\nudetube.com.lnk
%UserProfile%\Desktop\pornotube.com.lnk
%UserProfile%\Desktop\spam001.exe
%UserProfile%\Desktop\spam003.exe
%UserProfile%\Desktop\troj000.exe
%UserProfile%\Desktop\youporn.com.lnk
%UserProfile%\Start Menu\Programs\Defense Center
%UserProfile%\Start Menu\Programs\Defense Center\About.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Activate.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Buy.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Defense Center Support.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Defense Center.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Scan.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Settings.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Update.lnk
Delete DefenseCenter registry entries:
HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\secfile
HKEY_LOCAL_MACHINE\SOFTWARE\Defense Center
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Defense Center
HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Defense Center"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"



Saturday, December 19, 2009

Malware Defense - new rogue with known face

Malware Defense or MalwareDefense is adware that seems to be a subject to permanent modifications. That is, new tactics and techniques are applied in every new modification of Malware Defense in order to go ahead of antispyware and thus to avoid blocking and removal of Malware Defense. Another aim of the modification is to introduce new techniques of influence on users.
In particular, Malware Defense, at the very beginning, was typically propagated by means of trojan of Vundo type. It is now also propagated by trojans, but there are lots of evidences indicating that current modification of Malware Defense is aimed rather at user’s decision to download and install it. Naturally, such a decision is made under hard oppression of intrusive advertisement.
To get rid Malware Defense adware you thus need to use a reliable antispyware that has been keeping track of its modifications and ready to provide effective solution to remove Malware Defense irrespective of its version concerned. Click here to start free system scan and apply verified and examined Malware Defense removal tool (Spyware Doctor).

Malware Defense screenshot:

Malware Defense removal tool:

Malware Defense manual removal guide:
Delete Malware Defense files:

help.ico
md.db
mdefense.exe
mdext.dll
uninstall.exe
Malware Defense Support.lnk
Malware Defense.lnk
Uninstall Malware Defense.lnk
Delete Malware Defense registry entries:
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Malware Defense”