How to Remove Major Defense Kit
by Frank Jovine on 08/23/2010 in Fake Antivirus, Security
Major Defense Kit is a Rogue Anti-Spyware program. Major Defense Kit downloads and installs itself via a Trojan automatically without the users knowledge and consent. When a user downloads Major Defense Kit and runs a scan, the program reports false scan alerts. The user is then prompted to pay for a full license of the application in order to remove the threats.
Type: Misleading Application
Name: Major Defense Kit
Website: Unknown
Risk Impact: Medium
Systems Affected: Windows 2000, Windows Server 2003, Windows Vista, Windows XP and Windows 7
Behavior: Major Defense Kit is a misleading application that may give exaggerated reports of threats on the computer.
Major Defense Kit Removal
Major Defense Kit processes:
antispy.exe
defender.exe
tmp.exe
Major Defense Kit registry values:
HKEY_CURRENT_USER\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnPostRedirect” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “tmp”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “SelfdelNT”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\antispy.exe”
Other malicious Major Defense Kit files:
%UserProfile%\Application Data\PAV\
%UserProfile%\Application Data\antispy.exe
%UserProfile%\Application Data\defender.exe
%UserProfile%\Application Data\tmp.exe
%UserProfile%\Local Settings\Temp\kjkkklklj.bat
Automatic Removal
Download and install SUPERAntiSpyware and Malwarebytes Anti-Malware. Both security programs come with free versions.
I recommend that you run multiple passes of SUPERAntiSpyware and Malwarebytes Anti-Malware.
It’s important that you keep your security programs up to date. I highly recommend downloading the WOT (Web of Trust) add-on for IE and/or Firefox. The WOT add-on warns you about risky sites before you click.
Related Articles
How to Remove Desktop Security 2010
How to Remove AdWare Pro Rogue Software
Security Tool Installs as a Firefox and Flash Update
Beware of Antispymv.com a Malicious Website
How to Remove MedicCop Rogue AntiSpyware
How to Remove Antivir Solution Pro
Kevin
Aug 24th, 2010
Really interesting blog; part of me wants to admire the ingenuity of the scammers. I think lots of those of the older generation who are less comfortable with technology would be easily taken in by these sorts of attacks. My mother will blame viruses for the slightest problem(including unplugged power cords
) and would be taken in.
Keep up the good work.
Frank Jovine
Aug 24th, 2010
Kevin,
Some scammers are very creative and smart. These scammers know they can’t fool everyone, but they do make a nice penny.