PC Defender 360

Posted: August 12, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	10/10
Infected PCs:	28

First Seen:	August 12, 2013
Last Seen:	April 1, 2020
OS(es) Affected:	Windows

PC Defender 360 is a rogue anti-malware scanner that detects fake infections on your computer as a means of encouraging you to purchase its registration key – even though the 'registered' version of PC Defender 360 is just as unable to help your computer as the original version. PC Defender 360 has not been documented to have any self-distributing features, and SpywareRemove.com malware researchers warn that PC Defender 360 infections are likely to coincide with related attacks by other PC threats, such as Trojan downloaders like Zlob, that may harm your computer in additional ways. As scamware, PC Defender 360 doesn't need to be purchased, and reliable anti-malware tools should be considered for removing PC Defender 360 and related malware as soon as possible.

PC Defender 360: A Paper-Thin Defense that's All Looks and No Substance

PC Defender 360 is crafted closely to resemble a legitimate anti-malware product but lacks any features that would allow PC Defender 360 to find or remove malware from your PC. After PC Defender 360 infects your PC, PC Defender 360 will change your Registry to allow itself to launch automatically, and uses this window of opportunity to display its simulated system scans. SpywareRemove.com malware experts haven't found any accuracy to PC Defender 360's scanner results, although they do note that its results are designed to look realistic and include PC threats that are 'detected' according to technical names. Along with detecting legitimate files as being infected, PC Defender 360 also may be complicit in attacks like:

Creating fake malware files on your PC – harmless junk files that don't include any real malicious code.
Displaying fake pop-up alerts as modified browser windows, taskbar alerts, etc.
Blocking legitimate anti-malware and security applications without your consent.

Accordingly, in spite of its resemblance to a real anti-malware product, PC Defender 360, as a member of the FakeRean family, should be considered a danger to your PC and SpywareRemove.com malware research team urge you to remove PC Defender 360 immediately once PC Defender 360 is been detected.

The Best Defense Against a Questionable Defender

As a precaution to prevent PC Defender 360 and related PC threats from interfering with the disinfection of your computer, SpywareRemove.com malware experts recommend attempting to disable all active malware before using anti-malware tools to delete PC Defender 360, as well with is varied relatives that include Antivirus 2008 Pro, Antivirus XP 2008, Windows Antivirus 2008, Vista Antivirus 2008, PC Clean Pro, Antivirus Pro 2009, Rogue.Vista Antivirus 2008, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, XP Security 2012, XP Home Security 2012 and AntiVirus PRO 2015.. Safe Mode is one of many security features that are recommended for such procedures and can help your anti-malware products remove PC Defender 360 with as little trouble as necessary.

If you should attempt to purchase or register PC Defender 360 before learning of its true nature as a rogue anti-malware program, you should consider any personal information that's transferred this way to be compromised. Contact your credit card company or any other relevant financial institution if it's required to prevent criminals exploiting PC Defender 360 to use your personal information for further misdeeds.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%ALLUSERSPROFILE%\ifdstore\pcdefender.exe

File name: pcdefender.exe
Size: 123.37 KB (123378 bytes)
MD5: a437f77b1a2789b7a23a19f098fd37fb
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\ifdstore
Group: Malware file
Last Updated: April 1, 2020

%CommonAppData%\ifdstore\

File name: %CommonAppData%\ifdstore\
Group: Malware file

%CommonAppData%\ifdstore\idfdata.bin

File name: %CommonAppData%\ifdstore\idfdata.bin
File type: Binary File
Mime Type: unknown/bin
Group: Malware file

%CommonAppData%\ifdstore\cache.bin

File name: %CommonAppData%\ifdstore\cache.bin
File type: Binary File
Mime Type: unknown/bin
Group: Malware file

%CommonAppData%\ifdstore\uninst.ico

File name: %CommonAppData%\ifdstore\uninst.ico
Mime Type: unknown/ico
Group: Malware file

%CommonAppData%\ifdstore\support.ico

File name: %CommonAppData%\ifdstore\support.ico
Mime Type: unknown/ico
Group: Malware file

%CommonAppData%\ifdstore\app.ico

File name: %CommonAppData%\ifdstore\app.ico
Mime Type: unknown/ico
Group: Malware file

%CommonAppData%\ifdstore\pcdefender.exe

File name: %CommonAppData%\ifdstore\pcdefender.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

%CommonStartMenu%\Programs\PC Defender 360\

File name: %CommonStartMenu%\Programs\PC Defender 360\
Group: Malware file

%Desktop%\PC Defender 360.lnk

File name: %Desktop%\PC Defender 360.lnk
Mime Type: unknown/lnk
Group: Malware file

%CommonStartMenu%\Programs\PC Defender 360\PC Defender 360.lnk

File name: %CommonStartMenu%\Programs\PC Defender 360\PC Defender 360.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

%CommonStartMenu%\Programs\PC Defender 360\PC Defender 360 Help and Support.lnk

File name: %CommonStartMenu%\Programs\PC Defender 360\PC Defender 360 Help and Support.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

%CommonStartMenu%\Programs\PC Defender 360\Remove PC Defender 360.lnk

File name: %CommonStartMenu%\Programs\PC Defender 360\Remove PC Defender 360.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = "4g"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "idefsvc" = "%CommonAppData%\ifdstore\pcdefender.exe /min"HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = ""%CommonAppData%\ifdstore\pcdefender.exe" /ex "%1" %*"HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ifdstore

Additional Information

The following directories were created:

%ALLUSERSPROFILE%\ifdstore

The following messages's were detected:

#	Message
1	PC Defender 360 Firewall Alert iexplore.exe is infected with Trojan-Downloader.JS.Agent.ftu. Private data can be stolen by third parties, including credit card details and passwords.
2	Security Alert Unknown program is scanning your system registry right now! Identity theft detected! Threat: Hoax.HTML.OdKlas.a
3	Security Alert Vulnerabilities Found Background scan for security breaches has been finished. Serious problems have been detected. Safeguard your system against exploits, malware and viruses right now by activating Proactive Defence. Upgrade to full version of PC Defender 360 software package now! Clean your system and ward off new attacks against your system integrity and sensitive data. FREE daily updates and online protection from web-based intrusions are already in the bundle.