Free malware removal tool to remove Advanced Defender

Written by Administrator | Tuesday, 23 February 2010 17:41

Advanced Defender is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Advanced Defender. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Advanced Defender immediately from your system.

Advanced Defender

To remove Advanced Defender (Uninstall Advanced Defender)

Download this free removal tool for Advanced Defender
Extract it
Launch
Click on the delete button

Advanced Defender will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

advanceddefender.exe
winscent.exe
certofsystem.exe
explorers.exe
regp.exe
spoos.exe

Files :

%AllUsersProfile%\Microsoft PData\track.wid
%DesktopDir%\Advanced Defender.lnk
%Programs%\Advanced Defender\Advanced Defender.lnk
%ProgramFiles%\Advanced Defender\advanceddefender.exe
%ProgramFiles%\Advanced Defender\base.wdb
%ProgramFiles%\Advanced Defender\baseadd.wdb
%ProgramFiles%\Advanced Defender\conf.wcf
%ProgramFiles%\Advanced Defender\quarant.wdb
%System%\winscent.exe
%ProgramFiles%\Advanced Defender\queue.wdb
%Windows%\certofsystem.exe
%Windows%\explorers.exe
%Windows%\microsoftdefend.dll
%Windows%\regp.exe
%Windows%\secureit.com
%Windows%\spoos.exe
%Windows%\Temp\scs1.tmp
%Windows%\Temp\scs2.tmp
%Windows%\Temp\scs3.tmp
%Windows%\Temp\scs4.tmp
%Windows%\Temp\scs5.tmp
%Windows%\Temp\scs6.tmp
%Windows%\Temp\scs7.tmp
%Windows%\Temp\scs8.tmp
...
%Windows%\tempfile2.bat

Registry

Registry keys created

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Defender
HKEY_LOCAL_MACHINE\SOFTWARE\Advanced Defender
HKEY_LOCAL_MACHINE\SOFTWARE\Advanced Defender\Soft
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Registry values created

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- advanceddefender = "%ProgramFiles%\Advanced Defender\advanceddefender.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Defender
- DisplayName = "Advanced Defender"
- UninstallString = "%ProgramFiles%\Advanced Defender\advanceddefender.exe /uninstall"
- InstallDate = "1012350135"
HKEY_LOCAL_MACHINE\SOFTWARE\Advanced Defender\Soft
- sKey = "5C5CF9EE460EAF2066D9ADE4BD9B5571"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
- DisableTaskMgr = "1"