Free malware removal tool to remove ArmorDefender

Written by Administrator | Saturday, 23 January 2010 16:29

ArmorDefender is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is ArmorDefender. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall ArmorDefender immediately from your system.

ArmorDefender

To remove ArmorDefender (Uninstall ArmorDefender)

Download this free removal tool for ArmorDefender
Extract it
Launch
Click on the delete button

ArmorDefender will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

ArmorDefender.exe
%WINDOWS%\[random].exe
%system%\[random].exe

Files :

%ProgramFiles%\ArmorDefender Software
%ProgramFiles%\ArmorDefender Software\ArmorDefender
%ProgramFiles%\ArmorDefender Software\ArmorDefender\ArmorDefender.exe
%ProgramFiles%\ArmorDefender Software\ArmorDefender\Uninstall.exe
%Desktop%\ArmorDefender.lnk
%StartMenu%\Programs\ArmorDefender.lnk
%WINDOWS%\[random].cpl
%WINDOWS%\[random].exe
%WINDOWS%\[random].bin
%system%\[random].exe
%system%\[random].ocx

Registry

HKEY_CURRENT_USER\Software\ArmorDefender
HKEY_LOCAL_MACHINE\SOFTWARE\ArmorDefender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ArmorDefender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- [random].tmp.exe = "[system]\[random].tmp.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
- ArmorDefender = "%ProgramFiles%\ArmorDefender Software\ArmorDefender\ArmorDefender.exe" -min