Feb 09

Advanced Defender Adware Removal Instructions

The Emsi Software malware research team has discoverd a new outbreak of the Advanced Defender adware. a-squared Anti-Malware detects this malware as Adware.Win32.AdvancedDefender.

Advanced Defender is a rogue application. This rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.

Create new files:

  • %ProgramFiles%\Advanced Defender\baseadd.wdb
  • %ProgramFiles%\Advanced Defender\conf.wcf
  • %ProgramFiles%\Advanced Defender\quarant.wdb
  • %ProgramFiles%\Advanced Defender\queue.wdb
  • %ProgramFiles%\Advanced Defender\advanceddefender.exe
  • %ProgramFiles%\Advanced Defender\base.wdb
  • %AllUsersProfile%\Microsoft PData\track.wid
  • %UserProfile%\Desktop\Advanced Defender.lnk
  • %UserProfile%\Start Menu\Programs\Advanced Defender\Advanced Defender.lnk

Create new registry entries:

  • HKEY_LOCAL_MACHINE\software\Advanced Defender
  • HKEY_LOCAL_MACHINE\software\Advanced Defender\Soft
  • HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Uninstall\Advanced Defender
  • HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run, “advanceddefender”

Screenshots:

How to remove the infection of Advanced Defender (Adware.Win32.AdvancedDefender)?

To delete this malware infection, please download and install a-squared Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.

Tags: ,

Comments are closed.