Prozac Online Buy Antabuse Cipro Online Buy Cymbalta Toprol XL Online Buy Cipro Elimite Online Buy Neurontin Nexium Online Buy Seroquel

PCTotalDefender is a fake anti-spyware application that uses fraudulent and crooked methods of advertising to try and trick or scare you into buying the useless program. PCTotalDefende is related to other rogue applications such as AntiSpywareMaster, AntiSpywareSuite, AntivirusForAll, AVSystemCare and WinSecureAV. Your PC becomes infected with PCTotalDefender through a Trojan that may come bundled in a fake video codec download. When PCTotalDefende becomes installed, a fake system scanner will warn you of imaginary infections. Pop-ups and phony alerts will also bombard your PC screen. All of these scam tactics are done in order to con you into buying the full paid version of the PCTotalDefender “trashware” application. PCTotalDefender claims to “defend” your PC system, but the fact is your PC actually needs to be defended from the scam PCTotalDefender program. Keep your money and get rid of this pesky infection right away.

Automated Detection for PCTotalDefender

PCTotalDefender Manual Removal Instructions

Stop PCTotalDefender system processes:

%SYSTEMROOT%\\pctdf.exe
pctdf.exe
18647bf490824b42f6cd90172b8dbd13.exe

Unregister PCTotalDefender DLLs:

%SYSTEMROOT%\\system32\\rmd-.dll
rmd.dll

Remove PCTotalDefender files:

Uninstall PCTotalDefender.lnk
PCTotalDefender.lnk
rmd.dll
pctdf.exe
18647bf490824b42f6cd90172b8dbd13.exe

Remove PCTotalDefender registry values:

DE5F80FD-8A16-4E53-A670-25EDD1152274
PCTotalDefender
Microsoft\\Windows\\CurrentVersion\\Explorer\\MenuOrder\\Start Menu2\\Programs\\PCTotalDefender
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE\\overinstall
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{DE5F80FD-8A16-4E53-A670-25EDD1152274}
HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{BE7E2D8D-C62F-47B0-A42F-1AD5D66EC710}\\1.0\\FLAGS
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{BE7E2D8D-C62F-47B0-A42F-1AD5D66EC710}\\1.0\\HELPDIR
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{BE7E2D8D-C62F-47B0-A42F-1AD5D66EC710}\\1.0\\0\\win32
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{BE7E2D8D-C62F-47B0-A42F-1AD5D66EC710}\\1.0\\0
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{BE7E2D8D-C62F-47B0-A42F-1AD5D66EC710}\\1.0
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{BE7E2D8D-C62F-47B0-A42F-1AD5D66EC710}
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Ieremainder.Remainder\\CurVer
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Ieremainder.Remainder\\CLSID
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Ieremainder.Remainder.1\\CLSID
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Ieremainder.Remainder.1
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Ieremainder.Remainder
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DE5F80FD-8A16-4E53-A670-25EDD1152274}\\VersionIndependentProgID
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DE5F80FD-8A16-4E53-A670-25EDD1152274}\\Programmable
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DE5F80FD-8A16-4E53-A670-25EDD1152274}\\TypeLib
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DE5F80FD-8A16-4E53-A670-25EDD1152274}\\InprocServer32
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DE5F80FD-8A16-4E53-A670-25EDD1152274}
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\CLSID\\{DE5F80FD-8A16-4E53-A670-25EDD1152274}\\ProgID
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{18D792C0-5144-40C0-BBB7-CE4791959DFB}\\ProxyStubClsid32
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{18D792C0-5144-40C0-BBB7-CE4791959DFB}\\ProxyStubClsid
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{18D792C0-5144-40C0-BBB7-CE4791959DFB}
HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Interface\\{18D792C0-5144-40C0-BBB7-CE4791959DFB}\\TypeLib

Important Disclaimer

PCTotalDefender is related to:

  » No related posts

This entry was posted on Thursday, July 10th, 2008 at 11:52 am and is filed under Rogue Anti-Spyware Program. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.