Emsisoft New Malware Blog » AdvancedDefender http://www.anti-malware-blog.com Just another WordPress weblog Wed, 25 Jan 2012 06:47:18 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Advanced Defender Adware Removal Instructions http://www.anti-malware-blog.com/2010/02/09/advanced-defender-adware-removal-instructions/ http://www.anti-malware-blog.com/2010/02/09/advanced-defender-adware-removal-instructions/#comments Tue, 09 Feb 2010 15:58:18 +0000 emsi http://www.anti-malware-blog.com/?p=647 The Emsi Software malware research team has discoverd a new outbreak of the Advanced Defender adware. a-squared Anti-Malware detects this malware as Adware.Win32.AdvancedDefender.

Advanced Defender is a rogue application. This rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.

Create new files:

  • %ProgramFiles%\Advanced Defender\baseadd.wdb
  • %ProgramFiles%\Advanced Defender\conf.wcf
  • %ProgramFiles%\Advanced Defender\quarant.wdb
  • %ProgramFiles%\Advanced Defender\queue.wdb
  • %ProgramFiles%\Advanced Defender\advanceddefender.exe
  • %ProgramFiles%\Advanced Defender\base.wdb
  • %AllUsersProfile%\Microsoft PData\track.wid
  • %UserProfile%\Desktop\Advanced Defender.lnk
  • %UserProfile%\Start Menu\Programs\Advanced Defender\Advanced Defender.lnk

Create new registry entries:

  • HKEY_LOCAL_MACHINE\software\Advanced Defender
  • HKEY_LOCAL_MACHINE\software\Advanced Defender\Soft
  • HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Uninstall\Advanced Defender
  • HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run, “advanceddefender”

Screenshots:

How to remove the infection of Advanced Defender (Adware.Win32.AdvancedDefender)?

To delete this malware infection, please download and install a-squared Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.

]]> http://www.anti-malware-blog.com/2010/02/09/advanced-defender-adware-removal-instructions/feed/ 0