Vista Defender 2013

Vista Defender 2013 Description

Vista Defender 2013 is a fake anti-malware program that pretends to detect Trojans, spyware, viruses and other PC threats while, in all seriousness, Vista Defender 2013 lacks any threat-detection functions whatsoever. SpywareRemove.com malware researchers have noted that Vista Defender 2013 is just one of a lengthy family tree of FakeRean-based scamware, with Vista Defender 2013, like all of its kin, hoping to bully victims into buying its registration key. However, since Vista Defender 2013 is a danger to your computer, rather than the security software that Vista Defender 2013 pretends to be, you should terminate Vista Defender 2013 and delete Vista Defender 2013 with anti-malware software immediately to regain actual safety for your computer.

Why the Defense That Vista Defender 2013 Sells Isn’t One You’ll Be Wanting

Any attempts to remove this fake malware with Vista Defender 2013 will cause Vista Defender 2013 to prompt you to purchase its registration key to possess the ‘complete’ package of Vista Defender 2013, which is just as lacking in benign functions as any other member of the FakeRean family.

The Protection That Can Make a Mockery of Vista Defender 2013′s Sham Defense

One optional step in Vista Defender 2013′s removal is the possibility of registering Vista Defender 2013 for free, which can be done with the code 3425-814615-3990. Whether you choose this step or not, Vista Defender 2013 can block anti-malware software that could delete Vista Defender 2013 safely, and, for this reason, SpywareRemove.com malware researchers suggest shutting Vista Defender 2013 down before you make any further efforts to disinfect your PC. Safe Mode or, at worst, a system boot from a USB device, can be helpful for this purpose.

Vista Defender 2013′s branch of the FakeRean family has been noted to make changes to important Windows programs such as the Windows Firewall, Security Center and automatic update system. These changes are Registry-based and may not be removed even after your anti-malware software removes Vista Defender 2013. If appropriate security software isn’t able to reverse these system changes, SpywareRemove.com malware experts strongly recommend that you reset these programs to their factory default values. Methods for doing this differ with different versions of Windows (the sole OS that Vista Defender 2013 is designed to infect).

Aliases

Win32.Bancos [Ikarus]Trojan/Win32.Diple [AhnLab-V3]TR/Bancos.CDL.8 [AntiVir]Trojan.KillProc.15905 [DrWeb]Win32.Bancos!IK [Emsisoft]Win32:Bancos-CDL [Spy] [Avast]W32/Suspicious_Gen4.ZLLT [Norman]Artemis!8A7BB35885CF [McAfee]Trojan.Generic.KDV.600965 [nProtect]Gen:Trojan.Heur.LP.iu8@aG6fpHgi (B) [Emsisoft]

More aliases (2215)

Vista Defender 2013 Automatic Detection Tool (Recommended)

Is your PC infected with Vista Defender 2013? To safely & quickly detect Vista Defender 2013, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Vista Defender 2013 What happens if Vista Defender 2013 does not let you open SpyHunter or blocks the Internet?

Visual & GUI Characteristics

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	%TEMP%\ iglsldvx.exe	888
2	%PROGRAMFILES(x86)%\ Loaris\ Trojan Remover 1.2\ ltr12.exe	724
3	%PROGRAMFILES%\ Ticno\ Tabs\ TicnoTabsBho120605.dll	527
4	setup.exe	356
5	%PROGRAMFILES(x86)%\ PCSafeDoctor\ pcsafedoctor.exe	302
6	%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe	145
7	%PROGRAMFILES%\ ScreensCorner\ Common\ msudt.dll	134
8	%TEMP%\ Imgtask.exe	6
9	%APPDATA%\ Microsoft\ Windows\ Templates\ spsreng.exe	1,096
10	%LOCALAPPDATA%\ Microsoft\ Windows\ Temporary Internet Files\ Content.IE5\ 3FCCG2QO\ musicoasis.exe	1,009
11	%CommonApplData%\[RANDOM CHARACTERS_2]	N/A
12	%Temp%\[RANDOM CHARACTERS_2]	N/A
13	%LocalAppData%\[RANDOM CHARACTERS_2]	N/A
14	%UserProfile%\Templates\[RANDOM CHARACTERS_2]	N/A

More files

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.

The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Classes\.exeHKEY_CURRENT_USER\Software\Classes\.exe\ [RANDOM CHARACTERS_0]HKEY_CURRENT_USER\Software\Classes\.exe\Content Type application/x-msdownloadHKEY_CURRENT_USER\Software\Classes\.exe\DefaultIconHKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon\ %1HKEY_CURRENT_USER\Software\Classes\.exe\shellHKEY_CURRENT_USER\Software\Classes\.exe\shell\openHKEY_CURRENT_USER\Software\Classes\.exe\shell\open\commandHKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\ "[RANDOM CHARACTERS_1].exe" -a "%1" %*HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\IsolatedCommand "%1" %*HKEY_CURRENT_USER\Software\Classes\.exe\shell\runasHKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\commandHKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\ "%1" %*HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\IsolatedCommand "%1" %*HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\ ApplicationHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\Content Type application/x-msdownloadHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\DefaultIconHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\DefaultIcon\ %1HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shellHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\openHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\commandHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\command\ "[RANDOM CHARACTERS_1].exe" -a "%1" %*HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\command\IsolatedCommand "%1" %*HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runasHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\commandHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\command\ "%1" %*HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\command\IsolatedCommand "%1" %*

Additional Information

The following messages's were detected:

#	Message
1	Malware Intrusion Sensitive areas of your system were found to be under attack. Spy software attack or virus infection possible. Prevent further damage or your private data will get stolen. Run an anti-spyware scan now. Click here to start.
2	Security breach! Beware! Spyware infection was found. Your system security is at risk. Private information may get stolen, and your PC activity may get monitored. Click for an anti-spyware scan. Vista Defender 2013 Alert
3	Security breach! Beware! Spyware infection was found. Your system security is at risk. Private information may get stolen, and your PC activity may get monitored. Click for an anti-spyware scan.
4	System hacked! Unknown programs is scanning your system registry right now! Identity theft detected!
5	Vista Defender 2013 Alert Internet Connection alert! Suspicious network activity detected! Malware infection is possible!
6	Vista Defender 2013 Alert Internet Connection alert! Suspicious network activity detected! Malware infection is possible!
7	Vista Defender 2013 Alert System hacked! Unknown programs is scanning your system registry right now! Identity theft detected!