XP Smart Defender Pro

By Domesticus in Rogue Anti-Spyware Program

XP Smart Defender Pro is a fake security tool, which masquerades as a real anti-spyware program. XP Smart Defender Pro was designed by cybercrooks to convince attacked computer users to purchase the so-called licensed version of bogus security software to supposedly remove imaginary malware threats allegedly detected on the compromised PC and, thus, steal money from victims. When installed on the corrupted PC, XP Smart Defender Pro starts a faux system scan and generates nonexistent malware infections to scare PC users into believing their computers are corrupted by various malware infections. XP Smart Defender Pro also shows fake pop-up security notifications that notify PC users their computers are in danger. XP Smart Defender Pro attempts to persuade victims to purchase the so-called licensed version of the falsified security application for supposed removal of imaginary malware infections. In truth, XP Smart Defender Pro does not have the ability to detect or remove any type of malware infections. To protect your computer from damage and save your money, you should not believe or pay for XP Smart Defender Pro because it's a misleading and dangerous security program. If your computer is infected with XP Smart Defender Pro, ESG malware analysts strongly advise you to uninstall XP Smart Defender Pro with a reputable anti-malware program.

File System Details

XP Smart Defender Pro may create the following file(s):
# File Name Detections
1. %AppData%\Local\[RANDOM CHARACTERS].exe
2. %AppData%\Local\[RANDOM CHARACTERS]
3. %AppData%\Roaming\Microsoft\Windows\Templates\[RANDOM CHARACTERS]
4. %Temp%\[RANDOM CHARACTERS]
5. %AllUsersProfile%\[RANDOM CHARACTERS]

Registry Details

XP Smart Defender Pro may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = '%1' = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Mozilla Firefox\firefox.exe"'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" – '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[RANDOM CHARACTERS].exe" /START "%Program Files%\Internet Explorer\iexplore.exe"'

Messages

The following messages associated with XP Smart Defender Pro were found:

Attention: Danger! Alert!
System scan for spyware, adware, Trojans and viruses is complete.
XP Smart Defender Pro detected 31 critical system objects. These security breaches may be exploited and lead to the following:
Your system becomes a target for spam and bulky, intruding ads;
Browser crashes frequently and web access speed decreases;
Your personal files, photos, document and passwords get stolen;
Your computer is used for criminal activity behind your back;
Bank details and credit card information gets disclosed.

Trending

Most Viewed

Loading...