|
Free malware removal tool to get rid of Defense Center
|
|
Écrit par Administrator |
Samedi, 12 Juin 2010 04:22
|
|
There are no translations available. Defense Center is another rogue Antispyware from the Digital Protection family, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Defense Center. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Defense Center immediately from your system.

To remove Defense Center (Uninstall Defense Center)
- Download this free removal tool for Defense Center
- Extract it
- Launch
- Click on the delete button
Defense Center will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :
- defcnt.exe
- troj000.exe
- spam00[integer].exe
Files :
- %ProgramFiles%\Defense Center\cntprot.exe
- %ProgramFiles%\Defense Center\cnthook.dll
- %ProgramFiles%\Defense Center\about.ico
- %ProgramFiles%\Defense Center\activate.ico
- %ProgramFiles%\Defense Center\buy.ico
- %ProgramFiles%\Defense Center\help.ico
- %ProgramFiles%\Defense Center\scan.ico
- %ProgramFiles%\Defense Center\settings.ico
- %ProgramFiles%\Defense Center\splash.mp3
- %ProgramFiles%\Defense Center\uninstall.exe
- %ProgramFiles%\Defense Center\update.ico
- %ProgramFiles%\Defense Center\cnt.db
- %ProgramFiles%\Defense Center\cntext.dll
- %ProgramFiles%\Defense Center\virus.mp3
- %Programs%\Defense Center\About.lnk
- %Programs%\Defense Center\Activate.lnk
- %Programs%\Defense Center\Buy.lnk
- %Programs%\Defense Center\Scan.lnk
- %Programs%\Defense Center\Settings.lnk
- %Programs%\Defense Center\Update.lnk
- %Programs%\Defense Center\Defense Center Support.lnk
- %Programs%\Defense Center\Defense Center.lnk
- %AppData%\Microsoft\Internet Explorer\Quick Launch\Defense Center.lnk
- %Desktop%\Defense Center Support.lnk
- %Desktop%\Defense Center.lnk
- %ProgramFiles%\Defense Center
- %Programs%\Defense Center
- %Temp%\[random].mof
- %Temp%\[random].tmp
- %Temp%\[random].exe
- %Temp%\[random]
- %Temp%\[random].dat
Registry
Registry keys created
- HKEY_LOCAL_MACHINE\SOFTWARE\Defense Center
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows\MCIAVI
- HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
- HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Defense Center
Registry values created
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
- HKEY_LOCAL_MACHINE\SOFTWARE\Defense Center
- Settings_0 = 0x00000001
- SecStatus_3 = 0x00000001
- SecStatus_4 = 0x00000001
- SecStatus_5 = 0x00000001
- FD = 0x00000000
- GUID = "840920988409073084089362"
- Data = ":1920:2160:2280:2640:2760:2880:3120:3240:3360:3480:3720:"
- swver = "3.0"
- dbver = "1.1"
- dbsigns = "62577"
- dbverf = "1.1"
- dbsignsf = "62577"
- InfectedFiles = "%System%\slbrccsp.dll,%System%\wavemsp.dll,%System%\wscsvc.dll,%System%\Drivers\usb8023.sys,"
- LastScan = 0x4BC29F83
- Infected = 0x00000004
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Video For Windows\MCIAVI
- DefaultOptions = 0x00000000
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- WarnOnZoneCrossing = 0x00000000
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- Defense Center = ""%ProgramFiles%\Defense Center\defcnt.exe" -noscan"
Registry keys modified
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3

|