TrustDefender

TrustDefender is a rogue security application created by cyber-criminals. This rogueware is not associated with the security company called TrustDefender. TrustDefender aka Trust Defender spreads via Trojans and once it is inside a machine it will modify the browser settings and create a start-up registry entry. TrustDefender will also display fake scanners, system alerts and pop-up warnings to scare victims and convince them that their systems are infected with dangerous malware. Then TrustDefender will prompt its victims to purchase its non-existent full version to remove the falsely detected malware threats. Never waste your money purchasing TrustDefender; it is a useless application.

File System Details

TrustDefender may create the following file(s):
# File Name Detections
1. c:\Program Files\RegistryClever Software\RegistryClever\RegistryClever.exe
2. %UserProfile%\Local Settings\Temp\[random].exe
3. c:\Program Files\FDFCA\Uninstall.exe
4. c:\Program Files\RegistryClever Software\RegistryClever\uninstall.exe
5. c:\WINDOWS\system32\[random].exe
6. c:\Program Files\FDFCA\F0E84.exe
7. c:\Program Files\RegistryClever Software\RegistryClever\RegistryCleverTray.exe
8. c:\WINDOWS\[random].dll
9. C:\Documents and Settings\\Start Menu\Programs\RegistryClever\Homepage.lnk
10. c:\Program Files\RegistryClever Software\RegistryClever\license.txt
11. c:\WINDOWS\[random].bin
12. c:\WINDOWS\system32\[random].bin
13. C:\Documents and Settings\\Start Menu\Programs\TrustDefender.lnk
14. C:\Documents and Settings\\Start Menu\Programs\RegistryClever\Uninstall.lnk
15. %UserProfile%\Desktop\TrustDefender.lnk
16. c:\WINDOWS\system32\[random].cpl
17. C:\Documents and Settings\\Desktop\RegistryClever.lnk
18. C:\Documents and Settings\\Start Menu\Programs\RegistryClever\RegistryClever.lnk
19. c:\Program Files\RegistryClever Software\RegistryClever\Styles\Vista.cjstyles
20. c:\WINDOWS\[random].cpl

Registry Details

TrustDefender may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random].exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TrayScan"
HKEY_LOCAL_MACHINE\SOFTWARE\TrustDefender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "F0E84.exe"

Trending

Most Viewed

Loading...