Home / Spyware Encyclopedia / Fake Anti Spyware.TheDefend
 Fake Anti Spyware.TheDefend Technical Details
Category Fake Anti Spyware
Discovered 12/17/2009 4:40:30 PM
Modified 12/29/2009 1:25:09 PM
Threat Level High

Category Description

These are programs which look like any legitimate program but usually download without users permission, entice users into buying them by showing fake results to improve users PC performance. They may also download spyware and other unwanted programs.

Description

TheDefend is Rogue Security Program. TheDefend usually installed itself onto your PC without your permission, through Vundo Trojan, Virus or fake software. It uses aggressive and deceptive techniques to frighten the user into purchasing the program. It gives exaggerated report and claims of spyware found or false positives but will not remove spyware unless the user purchases the program.


Notice
Summary

The following http urls were started: NA
The hosts file was updated with the following url-to-ip mappings:
127.0.0.1 localhost
127.0.0.1 download.windowsupdate.com
127.0.0.1 http://update.microsoft.com
The following internet connection was established:
95.143.192.203 : 80

Process thedefend.exe
Drivers   N/A
Folder Created   %DAS.AU.SM.P%\TheDefend
%PF%\TheDefend Software

The following Files were created:

NameVersionPublisherSignature (MD5)File Size (in KB)
..\thedefend\thedefend.exe1.2.0.63Secure Software008a38bcfa867dcd35081e48cc5d59721638912
..\thedefend2.exe5.1.2600.5512Microsoft Corporationea96b43169b55b427f4c918af9b48fd3360960
..\thedefend1.exe  c63f804fe088a9899df2e129247bc56440448
..\thedefend.exe  089bd9c479bcb758ae2895a473059c8d1735145

The following Registry Entries were created:

..\Software\Microsoft\Windows\CurrentVersion\Uninstall\thedefend
..\Software\Microsoft\Windows\CurrentVersion\Run\\"thedefend.exe"\"%pf%\thedefend software\thedefend\thedefend.exe"
..\Software\thedefend

The following images were captured:

Recommendation to remove Fake Anti Spyware.TheDefend

Spyware Detector can remove Fake Anti Spyware.TheDefend, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Search Threats
Customer Service Rating by LivePerson