Strong Malware Defender

Strong Malware Defender Description

Strong Malware Defender is both a clone of other variants of fake anti-malware products from the FakeVimes family and an indulger in a variety of anti-security attacks. Any PC that’s been infected by Strong Malware Defender is in danger of having its real security replaced by Strong Malware Defender’s fake offerings, as well as browser redirects and blocked applications while Strong Malware Defender attempts to persuade you to purchase Strong Malware Defender. SpywareRemove.com malware experts encourage you to reject Strong Malware Defender’s farcical form of promotion and remove Strong Malware Defender in the same fashion that you’d deal with any type of Trojan or rootkit – by using legitimate anti-malware products to delete Strong Malware Defender and related PC threats via in-depth system scans.

Strong Malware Defender: A Strongman at Handing Out Bad Threat Alerts

Strong Malware Defender is a duplicate of other rogue anti-malware scanners that lazily share both its looks and its promotion strategy, which relies on fake alerts and fraudulent scanner results. Strong Malware Defender’s cousins number amongst them VirusSecurity, Windows Shield Tool, Fast Antivirus 2009, Smart Internet Protection 2011, Windows Trouble Taker, Windows Safety Toolkit, Best Malware Protection, Windows First-Class Protector, Windows Internet Booster, Windows Pro Safety, Windows Anti-Malware Patch, Windows Maintenance Guard, Anti-Malware Lab, Windows High-End Protection, Antivirus Smart Protection, Windows Smart Warden, Windows Custodian Utility, Home Malware Cleaner, Windows Security System, My Security Wall, Windows Abnormality Checker, Home Safety Essentials, Windows Premium Console, Internet Security Essentials, Windows Activity Debugger, Windows Safety Wizard, Windows AntiHazard Helper, Windows Efficiency Accelerator, Windows Maintenance Suite, Internet Security Suite, Windows System Defender, Security Antivirus, Personal Security Sentinel, Windows Telemetry Center, Windows Threats Destroyer, Windows Safety Maintenance, CleanUp Antivirus, Windows Pro Web Helper, Windows Privacy Extension, Windows Debug Center, Windows Crucial Scanner, Keep Center Keeper, Windows Active Guard, Windows Antivirus Care, System Protection Tools, Extra Antivirus, Windows Antivirus Release, Windows Expert Series, Windows Premium Defender, Windows Instant Scanner, Windows Profound Security, Personal Internet Security 2011, Windows Advanced User Patch, Windows Privacy Counsel, Windows Privacy Module, Windows Security Suite, Windows Performance Catalyst, Windows Be-on-Guard Edition, Windows Secure Web Patch, Windows Interactive Safety, Windows Pro Rescuer, Windows ProSecurity Scanner, Windows Advanced Toolkit, Windows Ultimate Safeguard, Windows Secure Workshop, Smart Internet Protection 2012, Windows Secure Surfer, Windows No-Risk Agent, Windows Control Series, Windows Managing System, Windows Functionality Checker, Windows Risk Minimizer, Windows Guard Tools, PC Live Guard, Windows Custom Management, Windows Care Taker, Windows Ultimate Security Patch, Security Master AV, Windows Safety Checkpoint, Windows Process Director, Windows Premium Guard, Windows Pro Safety Release, Live PC Care, Windows Protection Master, Windows Tools Patch, Windows Software Saver, Windows ProSecure Scanner, Windows Web Combat, My Security Engine, Windows Guard Solutions, Windows Private Shield, Windows Antihazard Solution, PrivacyGuard PRO, Smart Engine, Windows Stability Guard, Windows Proprietary Advisor, Windows AntiHazard Center, Windows Multi Control System, Windows Health Keeper, Windows Custom Safety, Windows Virus Hunter, Windows Personal Doctor, Windows No-Risk Center, Windows Virtual Security, Windows Firewall Constructor, Windows Antivirus Rampart, Windows Web Commander, Best Antivirus Software, Windows Problems Stopper, Windows Secure Workstation, Enterprise Suite, Windows Guardian Angel, Windows Warding System, Windows Antivirus Patch, Windows PC Aid, Activate Ultimate Protection, Windows Active Defender, Windows Turnkey Console, Windows Virtual Angel, Smart Virus Eliminator, Windows Enterprise Suite, My Security Shield, Windows Protection Maintenance, Smart Security, Windows Protection Unit, Windows Pro Solutions, Windows Smart Partner, Windows PRO Scanner, Windows Defending Center, Live Enterprise Suite, Additional Guard, Windows Safety Module, Windows Shielding Utility, Windows Advanced Security Center, Smart Anti-Malware Protection, Windows Software Keeper, Windows Safety Manager, Windows Performance Adviser, Windows Interactive Security, Windows Virtual Firewall, Windows Safety Series, Virus Doctor, XP Smart Security, Total Anti Malware Protection, Windows Daily Adviser, Windows Home Patron, Windows Defence Counsel, Windows Proactive Safety, Windows Enterprise Defender, Windows Basic Antivirus, Windows Pro Defence, Windows Sleek Performance, Windows Security Renewal, Volcano Security Suite, Windows Antivirus Machine, Windows Malware Sleuth and Windows Safeguard Upgrade. Each of these fake anti-malware applications will try to lure you into spending money on a registered or activated version of their software, but since Strong Malware Defender and related PC threats don’t have legitimate security features, there’s no reason to do this. SpySpywareRemove.com malware analysts have provided the following examples of fake alerts that are used by Strong Malware Defender and other members of its scamware family:

System warning
No real-time malware, spyware and virus protection was found.

Click here to activate.

Security Center Alert
To help protect your computer, Security Center has blocked some features of this program.
Name: Win64.BIT.Looker.exe
Risk: High

ERROR MESSAGE:
Warning
Warning! Virus detected
Threat Detected: Trojan-Spy.HTML.Sunfraud.a

Warning! Identity theft attempt detected
Hidden connection IP: 128.154.26.11
Target: Microsoft Corporation keys

Security Center
Unauthorized remote connection!
Your system is making an unauthorized personal data transfer to a remote computer!
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
To protect your private data, please click ‘Prevent Connection’ button below.

WARNING! 371 threats detected
Detected malicious programs can damage your computer and compromise your privacy. It’s strongly recommended to remove them immediately [sic]!
Potential risks: Infecting other computers on your network
Continue unprotected Remove all threats now

Strong Malware Defender will launch itself without your permission by using typical Registry-based exploits, and as such, may try to scan your PC whenever you load Windows. Scanner results can also be ignored, even if they point to unfamiliar files on your computer since Strong Malware Defender may also create fake .dll and .sys file ‘infections’ explicitly for this purpose.

Beating Strong Malware Defender Out of Your PC in a Contest of Wills

Although, in normal scenarios, removing Strong Malware Defender should use a legitimate anti-malware program, SpySpywareRemove.com malware experts caution that you should also be alert for other attacks that Strong Malware Defender may make during this process. Common risks from Strong Malware Defender may also extend to:

Redirect attacks that force your web browser to load unusual websites.
Blacklisting arbitrary programs on your PC.

However, these issues can be disabled by using standard anti-malware procedures to stop Strong Malware Defender from launching itself (for example, by using a USB-based boot, booting into Safe Mode or using another OS). Afterwards, a complete scan of your PC should be able to delete Strong Malware Defender without lingering side effects or undesired damage to your OS.

Strong Malware Defender Automatic Detection Tool (Recommended)

Is your PC infected with Strong Malware Defender? To safely & quickly detect Strong Malware Defender, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Strong Malware Defender What happens if Strong Malware Defender does not let you open SpyHunter or blocks the Internet?

Visual & GUI Characteristics

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	%ALLUSERSPROFILE%\ 2dd492\ StrongMD.exe	703
2	%AllUsersProfile%\Application Data\[6 RANDOM CHARACTERS]\SM[RANDOM CHARACTERS]_[NUMBERS].exe	396
3	Strong Malware Defender.lnk	314
4	%AppData%\Strong Malware Defender	307
5	%AllUsersProfile%\Application Data\[5 RANDOM CHARACTERS]\SM[RANDOM CHARACTERS].exe	300
6	%AllUsersProfile%\[5 RANDOM CHARACTERS]\SM[RANDOM CHARACTERS].exe	293
7	%StartMenu%\Strong Malware Defender.lnk	N/A
8	%Programs%\Strong Malware Defender.lnk	N/A
9	%Desktop%\Strong Malware Defender.lnk	N/A
10	%CommonAppData%\[random]\ASE.ico	N/A
11	%CommonAppData%\[random]\[random].exe	N/A
12	%CommonAppData%\[random]\[random].cfg	N/A
13	%AppData%\Strong Malware Defender\Instructions.ini	N/A
14	%AppData%\Strong Malware Defender\ScanDisk_.exe	N/A
15	%AppData%\Microsoft\Internet Explorer\Quick Launch\Strong Malware Defender.lnk	N/A

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.

The following newly produced Registry Values are:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}Strong Malware DefenderHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Strong Malware Defender" "%CommonAppData%\[random]\[random].exe" /s /d

Posted: February 20, 2012 | By SpywareRemove