Home Malware Programs Rogue Anti-Spyware Programs Major Defense Kit

Major Defense Kit

Posted: August 24, 2010

ScreenshotMajor Defense Kit is a rogue security program that spreads via Trojans. Once Major Defense Kit is inside a computer system it will modify the browser settings and create a start-up registry entry to prevent easy removal. Then Major Defense Kit will display fake security alerts and run a fake system scan that will claim that the system is infected with harmful malware. The victim will be prompted to purchase the "licensed version" of Major Defense Kit in order to remove the computer threats. Users should ignore the security alerts displayed by Major Defense Kit and never purchase this useless application.


ScreenshotScreenshotScreenshotScreenshot

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\Application Data\PAV\
    2 antispy.exe
    3 defender.exe
    4 Temp\kjkkklklj.bat
    5 tmp.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%UserProfile%\Application Data\antispy.exe"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "tmp"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"HKEY_CURRENT_USER\Software\PAV

3 Comments

  • Joanna says:

    Hi

    I have just battled this thing....get a USB and download a free trojan remover (on another uninfected computer), we used Loaris.

    I was able to plug in the usb and access it....had to start computer in safe mode, allow the bodgy scan to run through, then access the usb via computer.

    The scan was able to run, I wasnt able to pay for the activation key because I couldnt get online, but the scan must have disabled the virus so I was able to access normal computer, rerun the scan and delete the virus.

    The Loaris costs $50, but the initial scan disabled the virus....Im sure you could do the same Spyhunter....try downloading the Spyhunter onto a USB on another computer. I wasnt able to access In Ex, Moz or chrome.....open in safe mode, let the bodgy scan run through until finished, desktop should open in safe mode.

    Go to 'computer' (usb is now plugged in), run the scan....the computer had to be shut down, and I was then able to access normal and all internet. Hope this helps.

  • shawna-lynn says:

    hi im just wondering how to delete the whole program major defence kit it pops up as soon as i turn my computer on and i did what it says to do but it wont work...what else can i do????

  • William says:

    Thanks for posting Joanna, I have the trojan, but AVG never picked it up, so I hope that loaris will work.

Loading...