WinXDefender

Description: Rogue Security Program
Risk Level: High
Date of First Occurence: Wednesday, April 23, 2008
Software Developer: (unknown)
Brief Info: Rogue/Suspect Anti-Spyware Product "Rogue/Suspect" means that these products are of unknown, questionable, or dubious value as anti-spyware protection.
Removal: This threat can be removed using "Spyware Terminator"

REMOVER SPYWARE »

Geographical Distribution of Threat "WinXDefender"

Threat Info

View All

Detected Items

  1. Detected Files: %PROGRAMFILES%\WinXDefender\WinXDefender.exe MD5: 59768ACB6512F8CD80454D3BFC97F48E Size:1512960 MD5: 2C4D9B6733B6992CCFECF46DD01C496F Size:1581056 MD5: 51B8AAAE6B0766DE8DE9673C8C0ED887 Size:1581056 MD5: 49E1FEC8B12CF31517B8198995EBA117 Size:1678848 MD5: ABF31C80FB3A554DAC6E23F6949A37C6 Size:1582080 %PROGRAMFILES%\WinXDefender\Uninstall.exe MD5: 20EA02DE6A0D99F35510E412BD0918A0 Size:30720 MD5: BAD2CBDEF61EFEAD00D4A3B1CFC58FFF Size:30720 MD5: 76D27F7D731D2F8A45B6C7F8DBC3F7B3 Size:36432 MD5: 9E27DB5E4049FA53BDA81A5C2A1A6344 Size:36440
  2. Detected Files with variable Filenames:

Detecting items list:

  1. Files by Name %APPDATA%\WinXDefender\base.dat %APPDATA%\WinXDefender\base2.dat %APPDATA%\WinXDefender\Desc.dat %DESKTOP%\WinXDefender.lnk %START_PROGRAMSALL%\WinXDefender\Purchase License.lnk %START_PROGRAMSALL%\WinXDefender\Start WinXDefender.lnk %START_PROGRAMSALL%\WinXDefender\Support Page.lnk %START_PROGRAMSALL%\WinXDefender\WinXDefender Uninstall.lnk %ProgramFiles%\WinXDefender\Buy.url %ProgramFiles%\WinXDefender\Help.url %ProgramFiles%\WinXDefender\HowToBuy.txt %ProgramFiles%\WinXDefender\Lng\English.lng %ProgramFiles%\WinXDefender\Uninstall.exe %ProgramFiles%\WinXDefender\WinXDefender.exe
  2. Files by Directories %ProgramFiles%\WinXDefender %START_PROGRAMSALL%\WinXDefender %APPDATA%\WinXDefender
  3. Registry Values HKCU\Software\Microsoft\Windows\CurrentVersion\Run ValueName=WinXDefender

« Go to Software Database