Strong Malware Defender

If you are in the market for a powerful security tool that will be able to protect your PC against known and unknown threats, then you certainly do not want to invest in Strong Malware Defender. This rogue antispyware application was designed not to offer any benefit but instead to rip honest consumers off. Strong Malware Defender will enter the system without the user’s permission and will remain hidden until such time that it is able to start its attack against the system. This will happen by Strong Malware Defender initiating a fake security scan of the system which will inform the user that his PC is being attacked. It will also inform the user that in order to stave off these attacks, he will need to purchase a license for Strong Malware Defender.

Shortly following this a number of falsely generated security messages will begin to spam the user. These messages will inform the user of the same things the fake scan warned him about, and also urge the user to pay for Strong Malware Defender. This rogue will prevent the user from executing applications on the infected PC, and will block access to the Internet. Never pay for any Strong Malware Defender product, and instead destroy Strong Malware Defender the moment it is detected on the PC using a powerful security tool.

UPDATE

The security risk that you can face after you`re infected with Strong Malware Defender is very high, because this rogue is a direct descendant of Malware Protection Center, Home Malware Cleaner, Smart Anti-Malware Protection and other dangerous rogue antispyware applications.

It is known to scare innocent users into believing that their computer is under attack by sending various fake pop-up messages such as this one:

Warning! Virus detected
Threat detected: Trojan-PSW.Win32.Antigen.a.
Security Risk: 4/5
Infected file: (file path)
Description: This Trojan named ANTIGEN.EXE scans system files for your Internet passwords to steal and misuse them. It also scans your data for more private information: phone (...)
Recommended: Please click “Remove all” button to erase all infected files and protect your PC.

It is obvious that you should not follow its instructions, because purchasing the full version of Strong Malware Defender can lead to a total loss of your hard earned money. Just as it has been mentioned above, acquire a legitimate security product that will help you to remove Strong Malware Defender automatically. Once you are done, do not forget to safeguard your computer against similar threats as well.

Download Spyware Removal Tool to Remove* Strong Malware Defender

Quick & tested solution for Strong Malware Defender removal.
100% Free Scan for Windows

Strong Malware Defender löschen	Rimozione Strong Malware Defender
Supprimer Strong Malware Defender	Fjerne Strong Malware Defender
Verwijderen Strong Malware Defender	Rens Strong Malware Defender
Eliminar Strong Malware Defender	Ta bort Strong Malware Defender

How to manually remove Strong Malware Defender

Files associated with Strong Malware Defender infection:

%UserProfile%\Recent\tjd.dll
%UserProfile%\Recent\ppal.sys
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\PE.exe
%UserProfile%\Recent\kernel32.tmp
%UserProfile%\Recent\grid.sys
%UserProfile%\Recent\fix.sys
%UserProfile%\Recent\energy.tmp
%UserProfile%\Recent\eb.drv
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\DBOLE.tmp
%UserProfile%\Recent\CLSV.sys
%UserProfile%\Desktop\Strong Malware Defender.lnk
%StartMenu%\Programs\Strong Malware Defender.lnk
%StartMenu%\Strong Malware Defender.lnk
%CommonAppData%\SMICFD\SMSIFRIED.cfg
%CommonAppData%\SMICFD\
%CommonAppData%\79b35\Quarantine Items\
%CommonAppData%\79b35\HMCSys\
%CommonAppData%\79b35\BackUp\
%CommonAppData%\79b35\sqlite3.dll
%CommonAppData%\79b35\mozcrt19.dll
%CommonAppData%\79b35\717.mof
%CommonAppData%\79b35\SMD.ico
%CommonAppData%\79b35\SMa76.exe
%CommonAppData%\79b35\
%AppData%\Microsoft\Internet Explorer\Quick Launch\Strong Malware Defender.lnk
%AppData%\Strong Malware Defender\ScanDisk_.exe
%AppData%\Strong Malware Defender\Instructions.ini
%AppData%\Strong Malware Defender\cookies.sqlite
%AppData%\Strong Malware Defender\

Strong Malware Defender DLL's to remove:

%UserProfile%\Recent\tjd.dll
%UserProfile%\Recent\ddv.dll
%CommonAppData%\79b35\sqlite3.dll
%CommonAppData%\79b35\mozcrt19.dll

Strong Malware Defender processes to kill:

%UserProfile%\Recent\PE.exe
%CommonAppData%\79b35\SMa76.exe
%AppData%\Strong Malware Defender\ScanDisk_.exe

Remove Strong Malware Defender registry entries:

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\dumped_patched.DocHostUIHandler
HKEY_CURRENT_USER\Software\3
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "IIL" = 0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "ltHI" = 0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "ltTST"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "CheckExeSignatures" = "no"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "UID" = 7
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "lib/7.00007"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer "DisallowRun" = 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "0" = "msseces.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "1" = "MSASCui.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "10" = "avgscanx.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "11" = "avgcfgex.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "12" = "avgemc.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "13" = "avgchsvx.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "14" = "avgcmgr.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "15" = "avgwdsvc.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "2" = "ekrn.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "3" = "egui.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "4" = "avgnt.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "5" = "avcenter.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "6" = "avscan.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "7" = "avgfrw.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "8" = "avgui.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "9" = "avgtray.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Strong Malware Defender"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgiproxy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfgwiz.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fnrb32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ldpromenu.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ndd32.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\pgmonitr.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\signcheck.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\VisthLic.exe
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://findgala.com/?&uid=7&q={searchTerms}"

Post comment — WE NEED YOUR OPINION!