Windows 7 Defender 2013
Windows 7 Defender 2013 Description
Win 7 Defender 2013 – a Scam’s Retooling a Year Ahead of Schedule
Windows 7 Defender 2013 may attempt to look like a real anti-virus program but is readily-discernible as a copy of other fake AV products from its family. Newfound members of Windows 7 Defender 2013′s FakeRean family include Win 8 Home Security 2013, Vista Antivirus 2012, Win 8 Antispyware 2013, XP Security Plus 2013, Win Server Defender, XP Security 2013, Win 7 Defender, Windows XP Internet Security 2012, Win 7/Vista/XP Smart Defender, Windows Vista Internet Security 2012, Win 7 Security Cleaner Pro, Vista Smart Defender Pro, Windows Vista Antivirus 2012, XP Internet Security 2013, XP Security 2012, XP Total Security 2013, PCclean Pro, CleanThis, Internet Security 2012, Vista Antivirus 2008, Vista Antivirus 2008, Palladium Pro, Win 8 Defender 2013, XP Smart Defender Pro, Privacy Protection, XP Antispyware 2013, Vista Home Security 2013, Win 7 Antispyware 2013, Windows Antivirus 2008, Internet Security, Win 7 Home Security 2013, Vista Internet Security 2012, Win 8 Antivirus 2013, Vista Security 2012, XP Anti-Virus 2011, Windows Vista Security 2012, XP Security Cleaner Pro, Vista Defender, XP Home Security 2012, Antispyware Pro 2012, Win 8 Security System, XPdefender, XP Internet Security Pro 2013, Windows 7 Antispyware 2012, Vista Antivirus 2013, Spyware Protection 2010, XP Internet Security 2012, Vista Security Cleaner Pro, XP Home Security 2013, PC Defender Plus, Win 7 Internet Security 2013, Antivirus2008Pro, Win 7 Home Security Pro 2013, Antivirus2008, Vista Antispyware 2013, Win 7/XP/Vista Protection 2013, Win 7 Internet Security 2011, Antivirus Pro 2009, Windows 7 Internet Security 2012, AntiSpy Safeguard, Win 7 Smart Defender Pro, Windows Essentials Pro 2013, Vista Security 2013, Win 7 Antivirus 2013, Win 7 Security Plus 2013, Win 7 Security 2013, Win 7 Security 2012, Win 7 AntiVirus 2012, XP Antivirus 2013, Win 7 Internet Security Pro 2013, Win 7 Internet Security 2012, Vista Security Plus 2013, Internet Security 2013, Internet Protector, AntivirusXP 2008, Win 8 Security Suite 2013 and ThinkPoint. Windows 7 Defender 2013′s relatives are often distributed by Trojan downloaders, particularly members of the Tibs family (a Trojan network that infects computers via e-mail spam).
Besides several fake security features, including ‘proactive protection’ and a fake firewall, Windows 7 Defender 2013 also launches system scans and displays pop-ups automatically. These scans and pop-ups are designed to display inaccurate security information, and SpywareRemove.com malware experts warn that attempting to delete files that Windows 7 Defender 2013 considers ‘infected’ may damage innocent programs. Despite being a recent version of this FakeRean-based scam, Windows 7 Defender 2013 still wants the same old thing: money via an online registration process.
How Leaning on Windows 7 Defender 2013′s Defense Will Get You Stabbed in the Back
While Windows 7 Defender 2013 can’t protect your PC from viruses, worms or other types of malware that Windows 7 Defender 2013 claims to detect, Windows 7 Defender 2013 is likely to include at least one well-function capability: the ability to block unrelated programs, particularly security and anti-malware software. If Windows 7 Defender 2013 blocks anti-malware software that could be used in Windows 7 Defender 2013′s removal, SpywareRemove.com malware researchers suggest disabling Windows 7 Defender 2013 before you try to get rid of Windows 7 Defender 2013 and any Trojans that may be linked to its presence.
Disabling Windows 7 Defender 2013 can use either Safe Mode (available to all Windows PCs) or a fresh system boot from a USB device. After Windows 7 Defender 2013 is disabled, any tolerably-competent software security product should be able to identify and delete Windows 7 Defender 2013 without requiring that you register Windows 7 Defender 2013 or spend money on Windows 7 Defender 2013. Because Windows 7 Defender 2013 may also make undesirable settings changes that increase the danger to your web-browsing experience, you should be certain that all web browser-related Registry settings are at normal levels once you’ve removed Windows 7 Defender 2013.
Aliases
Win32.Bancos [Ikarus]Trojan/Win32.Diple [AhnLab-V3]TR/Bancos.CDL.8 [AntiVir]Trojan.KillProc.15905 [DrWeb]Win32.Bancos!IK [Emsisoft]Win32:Bancos-CDL [Spy] [Avast]W32/Suspicious_Gen4.ZLLT [Norman]Artemis!8A7BB35885CF [McAfee]Trojan.Generic.KDV.600965 [nProtect]Gen:Trojan.Heur.LP.iu8@aG6fpHgi (B) [Emsisoft]
More aliases (2215)
Windows 7 Defender 2013 Automatic Detection Tool (Recommended)
Is your PC infected with Windows 7 Defender 2013? To safely & quickly detect Windows 7 Defender 2013, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Windows 7 Defender 2013
What happens if Windows 7 Defender 2013 does not let you open SpyHunter or blocks the Internet?
Visual & GUI Characteristics
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 %TEMP%\ iglsldvx.exe 888 2 %PROGRAMFILES(x86)%\ Loaris\ Trojan Remover 1.2\ ltr12.exe 724 3 %PROGRAMFILES%\ Ticno\ Tabs\ TicnoTabsBho120605.dll 527 4 setup.exe 356 5 %PROGRAMFILES(x86)%\ PCSafeDoctor\ pcsafedoctor.exe 302 6 %UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe 145 7 %PROGRAMFILES%\ ScreensCorner\ Common\ msudt.dll 134 8 %TEMP%\ Imgtask.exe 6 9 %APPDATA%\ Microsoft\ Windows\ Templates\ spsreng.exe 1,096 10 %LOCALAPPDATA%\ Microsoft\ Windows\ Temporary Internet Files\ Content.IE5\ 3FCCG2QO\ musicoasis.exe 1,009 11 %CommonApplData%\[RANDOM CHARACTERS_2] N/A 12 %Temp%\[RANDOM CHARACTERS_2] N/A 13 %LocalAppData%\[RANDOM CHARACTERS_2] N/A 14 %UserProfile%\Templates\[RANDOM CHARACTERS_2] N/A
More files
Registry Modifications
Tutorial: To edit and delete registry entries manually, read the tutorial on
how to remove malicious registry entries.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Classes\.exeHKEY_CURRENT_USER\Software\Classes\.exe\ [RANDOM CHARACTERS_0]HKEY_CURRENT_USER\Software\Classes\.exe\Content Type application/x-msdownloadHKEY_CURRENT_USER\Software\Classes\.exe\DefaultIconHKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon\ %1HKEY_CURRENT_USER\Software\Classes\.exe\shellHKEY_CURRENT_USER\Software\Classes\.exe\shell\openHKEY_CURRENT_USER\Software\Classes\.exe\shell\open\commandHKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\ "[RANDOM CHARACTERS_1].exe" -a "%1" %*HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\IsolatedCommand "%1" %*HKEY_CURRENT_USER\Software\Classes\.exe\shell\runasHKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\commandHKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\ "%1" %*HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\IsolatedCommand "%1" %*HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\ ApplicationHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\Content Type application/x-msdownloadHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\DefaultIconHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\DefaultIcon\ %1HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shellHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\openHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\commandHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\command\ "[RANDOM CHARACTERS_1].exe" -a "%1" %*HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\open\command\IsolatedCommand "%1" %*HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runasHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\commandHKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\command\ "%1" %*HKEY_CURRENT_USER\Software\Classes\[RANDOM CHARACTERS_0]\shell\runas\command\IsolatedCommand "%1" %*
Posted: October 1, 2012 | By SpywareRemove
Share:
Threat Level: 10/10
Rate this article:
Detection Count: 12,458


More
