Mar 02

Threat Description:

Yourpcdefender.net is a malicious site related to the malvertising patterns of Antivirus Soft rogue security application. The website in question is not just one of the million domains containing some bulk information. It’s a hijacker, which means people get redirected there forcibly, i.e. via getting their browsers rerouted. It’s the activity of trojan viruses to blame for that. The trojans ‘representing’ Antivirus Soft get into your system and change certain parameters such as Windows HOSTS file and browser configuration. Consequently, the victim will be hardly capable of surfing the Internet normally. Almost every site you will want to visit will be replaced with Yourpcdefender.net which is definitely not safe to hit. On Yourpcdefender.net, you will see info on some basic definitions and functions of Antivirus Soft describing it from the better side. However, Antivirus Soft is just one of rogue anti-spyware tools inhabiting the worldwide web. It hunts for some profit and misleads people into believing it can actually do something. Considering Yourpcdefender.net to be a trusty site is a big illusion and must not come to your mind if you happen to get diverted there. It tries to make you buy the license for Antivirus Soft. So be sure to stay away from Yourpcdefender.net. In case you are being redirected there, take some urgent measures to remove the corresponding hijacker from your system once and for all.

Determine if your system is infected with Yourpcdefender.net hijacker and related threats:

Yourpcdefender.net Screenshot:

Yourpcdefender.net

How to remove this threat manually:

Yourpcdefender.net manual uninstall procedure:

Get rid of the related corrupt files:

  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sysguard.exe
  • %Documents and Settings%\[UserName]\Local Settings\Application Data\[random string]\[random string]sftav.exe

Delete the associated registry entries:

  • HKEY_CURRENT_USER\Software\AvScan
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyOverride” = “”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyServer” = “http=127.0.0.1:5555″
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random string]“
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “[random string]“

Please note that Yourpcdefender.net manual removal is a procedure of high complexity and should be performed with extreme caution. Lack of the required skills and even the slightest deviation from the instructions may cause irreparable system damage. To ensure trouble-free deletion, it is recommended to use the automatic removal tool below:

Download Yourpcdefender.net Removal Tool

Leave a Reply