Softwaredefense.net
Softwaredefense.net is a deceptive website that is only encountered by victims that have been infected with Trojans related to the malicious website. Softwaredefense.net is able to redirect a browser to a fake online system scanner that will indicate that your system is infected with dangerous malware. The scan is run by the rogue security application Ghost Antivirus, therefore all scan reports are fabricated. The aim of Softwaredefense.net is to scare users into purchasing the "full version" of Ghost Antivirus in order to remove the purportedly detected malware. If you encounter Softwaredefense.net on your system, it is recommended that you install a legitimate security application to completely remove Softwaredefense.net and all malware related to it.
File System Details
Softwaredefense.net may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %WINDOWS%\system32\[random].dll | |
| 2. | [random path]\[random]onin.exe | |
| 3. | %Program Files%\Ghost Antivirus\lib\WMILib.dll | |
| 4. | %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe | |
| 5. | %Program Files%\Ghost Antivirus\GhostAV.exe | |
| 6. | %UserProfile%\Application Data\Ghost Antivirus\unins000.exe | |
| 7. | %Program Files%\Ghost Antivirus\unins000.dat | |
| 8. | %Program Files%\Ghost Antivirus\working.log | |
| 9. | %Program Files%\Ghost Antivirus\lib\ghost.sql | |
| 10. | %Program Files%\Ghost Antivirus\lib\version.db | |
| 11. | %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus Home Page.lnk | |
| 12. | %UserProfile%\Application Data\Ghost Antivirus\ | |
| 13. | %UserProfile%\Application Data\Ghost Antivirus\Uninstall Ghost Antivirus.lnk | |
| 14. | %UserProfile%\Application Data\Ghost Antivirus\lib\properties | |
| 15. | %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png | |
| 16. | %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini | |
| 17. | %Program Files%\Ghost Antivirus\register.ico | |
| 18. | %Program Files%\Ghost Antivirus\web.ico | |
| 19. | %Program Files%\Ghost Antivirus\lib\ | |
| 20. | %Program Files%\Ghost Antivirus\lib\listing.cfg | |
| 21. | %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\ | |
| 22. | %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Purchase License.lnk | |
| 23. | %UserProfile%\Application Data\Ghost Antivirus\uill.ini | |
| 24. | %UserProfile%\Application Data\Ghost Antivirus\lib\links.txt | |
| 25. | %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Ghost Antivirus.lnk | |
| 26. | %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png | |
| 27. | %Program Files%\Ghost Antivirus\ | |
| 28. | %Program Files%\Ghost Antivirus\uninst.ico | |
| 29. | %Program Files%\Ghost Antivirus\Languages\ | |
| 30. | %Program Files%\Ghost Antivirus\lib\Infected.wav | |
| 31. | %Documents and Settings%\All Users\Desktop\Ghost Antivirus.lnk | |
| 32. | %Documents and Settings%\All Users\Start Menu\Programs\Ghost Antivirus\Ghost Antivirus.lnk | |
| 33. | %UserProfile%\Application Data\Ghost Antivirus\settings.ini | |
| 34. | %UserProfile%\Application Data\Ghost Antivirus\lib\ | |
| 35. | %UserProfile%\Application Data\Ghost Antivirus\lib\times.conf | |
| 36. | %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png |
Registry Details
Softwaredefense.net may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\FTP
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ghost Antivirus_is1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent
