AntiMalware Defender Rogue Anti-Spyware - removal guide

AntiMalware Defender

Created: 2010-02-09 04:27:32 Author: Gaby C.

Information about AntiMalware Defender

Antimalware Defender is a fake security program that might be installed mistaken it with an update through Windows automatic updates. This is done with a help of Trojan virus. The Trojan generates a window that looks exactly like an ordinary Windows update that is downloaded and installed automatically. The message in the Window looks like this:

Antimalware security update for Windows XP (KB961118)
Size: 433KB
This critical update will install System Security Update 2010.01.023 (Antimalware Defender Upgrade; KB648759)

As soon as the Trojan installs Antimalware Defender, the program launches its scanner which actually doesn’t perform a real scan and only pretends to do so. Once it finishes, Antimalware Defender generates a message stating the infections found. The files displayed as infections actually don’t even exist on your computer or they are programs necessary for a proper Windows operation. That is why you shouldn’t try to remove them.

Besides, Antimalware Defender will ask you to pay for its license in order to fix the detected threats. It is just a way to gain money from computer users, so please don’t be tricked and don’t reveal your private data to the creators of Antimalware Defender.

You must remove Antimalware Defender right after you notice it on your system. Take a look at our removal instructions below and eliminate Antimalware Defender manually or download a legitimate anti-spyware tool that will fix this infection and the ones that might infiltrate into the system while Malware Defender was doing its malicious activity there.

AntiMalware Defender Facts

For automatic AntiMalware Defender removal, please download Spyware Doctor:

Spyware Doctor

AntiMalware Defender pretends to increase security of your PC
AntiMalware Defender free version will show popups, alerts and fake results to convince you to pay
AntiMalware Defender creators will not deliver license keys upon paying or the full version will not be functional
AntiMalware Defender might be used to download and advertise other malicious software
AntiMalware Defender might disable some of your PCs or its programs functions

Manual AntiMalware Defender removal instructions

Note: Manual removal of parasite AntiMalware Defender is tedious and dangerous task if done incorectly. Stoping and deleting incorrect executables and DLLs, deleting registry entries might harm your PC. Thus we recommend using Spyware Doctor of PCTools for automatical scan and removal of computer parasites, or another reputable spyware remover.

1

Remove malicious Registery entries:

How to remove malicious registry entries

HKEY_CLASSES_ROOT\CLSID\{ca84c702-c758-4421-974e-b02662e76d7c}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ca84c702-c758-4421-974e-b02662e76d7c}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ca84c702-c758-4421-974e-b02662e76d7c_6"

2

Remove harmful Files:

How to remove harmful files

ca84c702-c758-4421-974e-b02662e76d7c_6.avi (random named avi file in C:\WINDOWS\system32\ )
c:\Documents and Settings\All Users\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.avi
c:\Documents and Settings\All Users\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.ico
c:\Documents and Settings\All Users\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.mkv
c:\Documents and Settings\All Users\Start Menu\Programs\Antimalware Defender
c:\Documents and Settings\All Users\Start Menu\Programs\Antimalware Defender\Antimalware Defender.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Startup\ca84c702-c758-4421-974e-b02662e76d7c_6.lnk
c:\Program Files\Antimalware Defender
c:\Program Files\Antimalware Defender\Antimalware Defender.dll
c:\WINDOWS\system32\ca84c702-c758-4421-974e-b02662e76d7c_6.avi
c:\WINDOWS\system32\ca84c702-c758-4421-974e-b02662e76d7c_6.ico
%UserProfile%\Local Settings\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.avi
%UserProfile%\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.avi
%UserProfile%\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.avi
%UserProfile%\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.ico
%UserProfile%\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.mkv
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antimalware Defender.lnk
%UserProfile%\Desktop\Antimalware Defender.lnk
%UserProfile%\Local Settings\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.avi
%UserProfile%\Local Settings\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.ico
%UserProfile%\Local Settings\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_6.mkv
%UserProfile%\Start Menu\Programs\Antimalware Defender
%UserProfile%\Start Menu\Programs\Antimalware Defender\Antimalware Defender.lnk
%UserProfile%\Start Menu\Programs\Startup\ca84c702-c758-4421-974e-b02662e76d7c_6.lnk

3

Scan your System:

Scan your System with free scanners for remaining computer parasites

*Name
*E-mail

Antimalware Tool

Created: 2011-04-20 10:56:43 Author:Renata Mykolaityte

Antimalware Tool is a rogue antispyware program that was designed by the same computer hackers that previously created Security Defender. These two programs are extremely similar and the only difference between them is their names. The program uses Trojan viruses in order to infiltrate into random systems and then does everything in order to make computer user purchase its license. Antimalware Tool is loaded with each system reboot. It pretends scanning your system for infections and after...

Posted in: Rogue Anti-Spyware

No comments yet

Internet Defender

Created: 2011-02-24 02:31:54 Author:Gaby C.

Internet Defender is the most annoying program which was created by hackers with a reason to get users’ money. These cyber criminals who released Internet Defender seem to be trying to increase their income through misleading alerts offering to install malware’s license. Before that here come fake system scanners and alerts that report tons of viruses detected. Even though Internet Defender may seem completely legitimate for you, keep in mind that it must be eliminated. Being...

Posted in: Rogue Anti-Spyware

No comments yet

Security Defender

Created: 2011-02-17 02:50:02 Author:Gaby C.

Security Defender is a typical example of scareware that displays continuous scanners and alerts creating a need to update security software on your computer. However, all these notifications that can be predetermined to report numerous viruses in reality are invented by the same Security Defender in order to swindle your money. Security Defender just like its earlier variant Antimalware Defender has nothing in common with PC protection and spyware removal functions, so remember not to pay...

Posted in: Rogue Anti-Spyware

No comments yet