PC Defender 2008 - Guida alla rimzione

PC Defender 2008, un nuovo rogue apparentemente appartenente alla famiglia del vecchio Winfixer

Il suo scopo é uguale a quello di altri rogue, ingannare l'utente e spingerlo a comprare la versione completa del falso software..

ecco qualche screen:





Files e cartelle associati al rogue

Codice:

C:\Documents and Settings\All Users\Desktop\PC Defender 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\PC Defender 2008
C:\Documents and Settings\All Users\Start Menu\Programs\PC Defender 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\PC Defender 2008\How to Register PC Defender 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\PC Defender 2008\License Agreement.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\PC Defender 2008\PC Defender 2008.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\PC Defender 2008\Register PC Defender 2008.lnk
C:\Program Files\thcrkrj0etfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Defender 2008.lnk
%UserProfile%\Application Data\thcrkrj0etfg

Chiavi di registro:

Codice:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\thcrkrj0etfg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "pcdefender2008"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SMthcrkrj0etfg"
HKEY_LOCAL_MACHINE\SOFTWARE\thcrkrj0etfg

SmitfraudFix rimuove l'infezione
http://www.steven.altervista.org/files/tools.html#tools3