Friday, October 8, 2010

TrustDefender Removal GuideTrustDefender Removal Guide

TrustDefender is a fake antivirus program that looks like a legitimate antivirus. In fact, TrustDefender cannot help protect your PC. TrustDefender is created to cheat the user to buy the full version of TrustDefender. When TrustDefender is accidentally installed in the computer, it will scan the computer automatically when Windows boot and it will surely produce fake report that the computer is infected by malwares. Do not believe the report as TrustDefender cannot detect and remove any malware.

TrustDefender also installs RegistryClever which is another fake registry cleaner. Besides, it will also show fake Windows Security Center window and ask the user to register TrustDefender. TrustDefender provide fake feature like Full Scan, System Scan, Scan Basic Locations, Scan Removable Media, Scan Folder and Realtime Protection.

TrustDefender should be removed immediately!

TrustDefender Removal Guide
Kill Process
(How to kill a process effectively?)
F0E84.exe
RegistryClever.exe
RegistryCleverTray.exe
[random].exe

Delete Registry
HKEY_CURRENT_USER\Software\RegistryClever
HKEY_CURRENT_USER\Software\TrustDefender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TrustDefender
HKEY_LOCAL_MACHINE\SOFTWARE\RegistryClever
HKEY_LOCAL_MACHINE\SOFTWARE\TrustDefender
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrayScan"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"

Remove Folders and Files
%ALLUSERSPROFILE%\Desktop\RegistryClever.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\TrustDefender.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\RegistryClever
%ProgramFiles%\FDFCA
%ProgramFiles%\RegistryClever Software
%UserProfile%\Desktop\TrustDefender.lnk
%UserProfile%\Local Settings\Temp\[random].exe
%windir%\[random].dll
%windir%\[random].bin
%windir%\[random].cpl
%windir%\system32\[random].cpl
%windir%\system32\[random].exe
%windir%\system32\[random].bin

No comments:

Post a Comment