Home Malware Programs Rogue Anti-Spyware Programs Win 7 Defender Pro

Win 7 Defender Pro

Posted: March 19, 2010

Win 7 Defender Pro is a rogue anti-spyware program which uses Trojans to enter a targeted computer system. Win 7 Defender Pro displays false warning alerts and pop ups on your screen telling you that your PC is infected in order to trick you into purchasing the Win 7 Defender Pro program. Don't be alarmed by these tactics and do not purchase the Win 7 Defender Pro program. Use a reliable antivirus program to remove all threats related to Win 7 Defender Pro.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %UserProfile%\AppData\Local\ave.exe
    2 ave.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%Program Files%\Mozilla Firefox\firefox.exe"HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%Program Files%\Mozilla Firefox\firefox.exe" -safe-modeHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%Program Files%\Internet Explorer\iexplore.exe"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1?HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1?
Loading...