Windows Protection

Malware Analysis:

Wow, the mean malware guys are really far-sighted and future-oriented, AVDefender 2011 (aka AV Defender 2011) rogueware being the evidence of this. This phony antivirus program from AV Defender 2011 Inc. is a new method for retrieving money being applied by cyber criminals. This product is rotated through blackhat SEO and social engineering. Every case of AVDefender 2011 invasion is based on the use of trojans, i.e. small fragments of malcode that bear the determinative definitions of the associated rogue. These trojan viruses tend to interfere with the targeted computer system in a radical way. They change proxy settings, create harmful files and unwanted Registry values. All of these modifications call forth serious havoc inside your Operating System. You will shortly start encountering the symptoms of AVDefender 2011 functioning. These will include fake security notifications, counterfeit system scanners and browser redirect activity. Talking about the bogus popup ads triggered by AVDefender 2011, it’s a must to refrain from clicking them otherwise you will get rerouted to a website that recommends you purchase one of the available versions of this scam software: AVDefender 2011 Basic, AVDefender 2011 Pro or AVDefender 2011 Platinum. These are all equally worthless apps; the only difference is their price. If you do nothing about AVDefender 2011 on your computer, it’s going to make things worse and slow down your system by far. It’s therefore critical to remove AVDefender 2011 rogue anti-spyware ASAP. Before sticking to the uninstall guide below, it might be handy to access Safe Mode with Networking via repeatedly hitting F8 key during system launch. Good luck eradicating AVDefender 2011 infection!

Determine if your PC is infected with AVDefender 2011:

Download AVDefender 2011 Malware Free Scanner with Remover

AVDefender 2011 Homepage Screenshot:

How to remove AVDefender 2011 manually:

To perform manual removal of AVDefender 2011, you should do the following:

Delete AVDefender 2011 corrupt files (it could be one of the listed items or a few running simultaneously):

• %UserProfile%\Local Settings\Application Data\[random]
• %UserProfile%\Local Settings\Application Data\\[random]shdw.exe
• %UserProfile%\Local Settings\Application Data\\[random]tssd.exe
• %UserProfile%\Local Settings\Application Data\\[random]sysguard.exe

Remove the following associated registry entries:

• HKEY_CURRENT_USER\Software\wnxmal
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter “Enabled” = “0″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:6522″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = “.exe”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]“
• HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache “%UserProfile%\Desktop\flash_player_installer\flash_player_installer.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random]“
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = “no”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” =”1″

Please note that manual removal of AVDefender 2011 is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download AVDefender 2011 Removal Tool