RegDefense Description

RegDefense portrays itself as a legitimate registry repair software, generally installed manually by the user due to inexperience or faulty advertising. Once installed, RegDefense will scan the registry for any problems, and then display fictitious and sometimes grossly exaggerated infection results.

Type: Rogue Registry Cleaner

How Can You Detect RegDefense?

RegDefense creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegistryDefense
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”RDListener” = “%PROGRAMS_FILES%\Registry Defense\RDListener.exe”
• HKEY_CURRENT_USER\Software\Sysinternals\PsKill\”EulaAccepted” = “1″
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”RDAgent” = “%PROGRAMS_FILES%\Registry Defense\RDAgent.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\RegistryDefense

Important Article Disclaimer