ByteDefender Adware Removal Instructions
The Emsisoft malware research team has discoverd a new outbreak of the ByteDefender adware. Emsisoft Anti-Malware detects this malware as Adware.Win32.ByteDefender.
ByteDefender is a rogue security program. This is a new variant from Winiguard/Winisoft family. The author of ByteDefender also made SystemIron, SecurePcAv, SafePcAv, GuardWWW, MyPcSecure, PcSecureNet, PcsSecure, APcSafe, APcSecure, ProtectSoldier, ProtectDefender, ArmorDefender, DefendAPc, SysDefenders, InSysSecure, SysProtector, APcDefender, PcProtectar, PcsProtector,… etc. To further convince victim, SystemIron will also create numerous junk files with random names on your computer that will be detected as malware when the program scans your computer, but will not allow you to remove them until you purchase it.
Create new files:
- %ProgramFiles%\ByteDefender Software\ByteDefender\ByteDefender.exe
- %ProgramFiles%\ByteDefender Software\ByteDefender\Uninstall.exe
- %ProgramFiles%\ByteDefender Software\ByteDefender\always_delete.xml
- %ProgramFiles%\ByteDefender Software\ByteDefender\always_skip.xml
- %ProgramFiles%\ByteDefender Software\ByteDefender\quarantine\quarantine.xml
- %AllUsersProfile%\Start Menu\Programs\ByteDefender.lnk
- %UserProfile%\Desktop\ByteDefender.lnk
Create new registry entries:
- HKEY_LOCAL_MACHINE\software\ByteDefender
- HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Uninstall\ByteDefender
- HKEY_CURRENT_USER\software\ByteDefender
- HKEY_CURRENT_USER\software\ByteDefender\agents
- HKEY_CURRENT_USER\software\ByteDefender\general
- HKEY_CURRENT_USER\software\ByteDefender\realtime
- HKEY_CURRENT_USER\software\ByteDefender\scanner
- HKEY_CURRENT_USER\software\ByteDefender\tasks
- HKEY_CURRENT_USER\software\ByteDefender\tasks\0
- HKEY_CURRENT_USER\software\ByteDefender\tasks\1
- HKEY_CURRENT_USER\software\ByteDefender\updates
- HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run, “ByteDefender”
- HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Run, “ByteDefender”
Screenshots:
How to remove the infection of ByteDefender (Adware.Win32.ByteDefender)?
To delete this malware infection, please download and install Emsisoft Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.
Tags: ByteDefender, Rogue