Armor Defender

Armor Defender is a misleading anti-spyware application that uses scare tactics to trick users into purchasing it. Armor Defender is distributed by Trojans that enter users systems via vulnerability exploits or drive-by downloads. Once Armor Defender is inside a system it will run a fake system scan that will claim that the system is severely infected with numerous malware. Armor Defender will also launch a number of pop-ups and security warnings in order to convince the victim that his/her PC is in trouble and the only remedy is to purchase the "full version" of Armor Defender. Armor Defender does not have the functionalities of a legitimate security application, ArmorDefender should not be trusted and must be removed as soon as possible.

File System Details

Armor Defender may create the following file(s):
# File Name Detections
1. c:\WINDOWS\system32\391dsz95are9458.exe
2. c:\Program Files\ArmorDefender Software\ArmorDefender\Uninstall.exe
3. c:\WINDOWS\124s7not-a-virus569.exe
4. c:\Program Files\ArmorDefender Software\ArmorDefender\ArmorDefender.exe
5. c:\WINDOWS\1247z5py369.exe
6. c:\WINDOWS\system32\3922tzr5at36552.ocx
7. c:\WINDOWS\1254zspa9bot612.cpl
8. c:\Program Files\ArmorDefender Software\ArmorDefender
9. %UserProfile%\Start Menu\Programs\ArmorDefender.lnk
10. c:\Program Files\ArmorDefender Software
11. %UserProfile%\Desktop\ArmorDefender.lnk
12. c:\WINDOWS\1244bzckd187465.bin

Registry Details

Armor Defender may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Uninstall\ArmorDefender
HKEY_LOCAL_MACHINE\SOFTWARE\ArmorDefender
HKEY_CURRENT_USER\Software\ArmorDefender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run "ArmorDefender"

Trending

Most Viewed

Loading...