Tuesday, November 6, 2012

Remove PC Defender PlusRemove PC Defender Plus

Remove PC Defender Plus
PC Defender Plus is a fake antivirus which will infect the computer after a Trojan opens a backdoor on the computer. Normally this program is installed to the computer without the permission of the users when they visit some websites. PC Defender Plus start automatically when the computer boot. It will scan the infected computer and shows that the computer has been infected by many malwares. In fact, the computer is infected by itself! Then, PC Defender Plus will persuade the user to purchase the license in order to activate it. This fake antivirus should be removed immediately.

PC Defender Plus provide fake features such as Scan Results, Internet Security, Personal Security, Proactive Defense, Firewall etc. All of them cannot protect computer from any kind of malware.

PC Defender Plus can be removed by stopping its processes [random].exe and the user should remember to kill the file. The registry settings should be restored by following the removal guide below.

PC Defender Plus must be removed from your computer immediately!

Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe

Delete Registry

HKEY_CLASSES_ROOT\.exe "(Default)" = "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\pcdfdata
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = ""%CommonAppData%\pcdfdata\[random].exe" /ex "%1" %*"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "pcdfsvc" = "%CommonAppData%\pcdfdata\[random].exe /min"


Remove Folders and Files

%AllUsersProfile%\Desktop\PC Defender Plus.lnk
%CommonAppData%\pcdfdata\
%CommonAppData%\pcdfdata\app.ico
%CommonAppData%\pcdfdata\config.bin
%CommonAppData%\pcdfdata\defs.bin
%CommonAppData%\pcdfdata\[random].exe
%CommonAppData%\pcdfdata\support.ico
%CommonAppData%\pcdfdata\uninst.ico
%CommonAppData%\pcdfdata\vl.bin
%CommonStartMenu%\Programs\PC Defender Plus\
%CommonStartMenu%\Programs\PC Defender Plus\PC Defender Plus Help and Support.lnk
%CommonStartMenu%\Programs\PC Defender Plus\PC Defender Plus.lnk
%CommonStartMenu%\Programs\PC Defender Plus\Remove PC Defender Plus.lnk

No comments:

Post a Comment