Home Rogue Websites Defender-soft.com

Defender-soft.com

Posted: April 23, 2010

Defender-soft.com (or Defender-soft.net) is a rogue website related to a fake antivirus program. Defender-soft.com will redirect the browser to a fake system scanner which produces bogus results claiming the system is infected with malware. Defender-soft.com will then try and sell you a rogue antivirus program to get rid of the so-called threats. Do not fall for this scam and do not click on anything this rogue site produces, instead remove it with a updated antivirus program immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string].exe
    2 %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]tssd.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\AvScanHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random string]"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random string]"
Loading...