BitDefender 2011 (the fake one Bit Defender 2011) is a rogue virus which tries to intimate to be a real and legitimate antivirus scan and virus removal software although it is a virus itself. This program is a scamware created by hackers to raise funds by selling fake computer and internet security/protection softwares. Programmers have used the name if Bit Defender antivirus software for this malware to trick more users into buying the fake BitDefender 2011. Please remember that is bogus and useless tool dose not belong to Bit Defender antivirus company so avoid making a purchase of this malware.
The malware is spread via malicious websites that offers free malware and virus removal services. Once this virus gets into your computer, it displays fake warnings and alerts telling you about insecure activity of your system and it offers you to run the full version of BitDefender 2011 to get rid of these viruses ands defend your system. When you select to install the full version, it asks you to pay the license fee which is the target of this virus. It dose not help your system even if your pay for it so its better to remove the fake BitDefender2011 instead of downloading and buying its updated version.
This fake program may display some errors on infected pc like:
Warning!
Virtumonde is an adware program that tends to monitor your Internet browsing habits and may display targeted advertisements onto your computer screen. Virtumonde may also create a malicious DLL file in order to log your keystrokes and send the recorded information to a third party website. Virtumonde is an unwanted application and recommended to be removed.
About Internet Explorer Emergency Mode
Your PC is infected with malicious software and browse couldn’t be launchedYou may use Internet Explorer in Emergency mode – internal service browser of Microsoft Windows system with limited usability.
Notice: Some sites refuse connection with Internet Explorer in Emergency Mode. In such case system warning page will be showed to you.
Warning! Identity theft attempt detected!
Attacker IP: <random IP address>
Attack Target: Microsoft Corp. Keys
Description: Remote host tries to get access to your personal information.
Warning! New virus detected!
Threat Detected: Keylogger.iSnake.Pro
Infected File: C:\WINDOWS\system32\asr_ldm.exe
Remember! All these warnings, alerts and virus removal offers made by BitDefender 2011 virus are fake. This program is totally a fake software and it is specially designed to extort your money by selling its fake security products. You should ignore these warnings, avoid purchase of this program, avoid clicking any link within its popups and do not install any component of it promoted. All you have to do is to immediately remove the fake BitDefender 2011 malware from your computer upon detection.
How to remove the fake BitDefender 2011 virus manually:
To remove this virus manually, complete the following set of tasks. Do not forget to create a backup before getting started to the manual removal guide.
Stop Bit Defender 2011 processes:
bitdefender.exe
[random].exe
Delete BitDefender 2011 fake Registry keys:
HKEY_CURRENT_USER\Software\EVAEC2
HKEY_CURRENT_USER\Software\MonEC2
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings “ProxyEnable” = ’0′
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “BitDefender 2011″ = ‘C:\Program Files\BitDefender 2011\bitdefender.exe’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe “Debugger” = ‘msiexecs.exe -sb’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe “Debugger” = ‘msiexecs.exe -sb’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe “Debugger” = ‘msiexecs.exe -sb’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe “Debugger” = ‘msiexecs.exe -sb’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safari.exe “Debugger” = ‘msiexecs.exe -sb’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “WinNT-EVI 21.04.2011″
Delete BitDefender 2011 files:
c:\Program Files\BitDefender 2011\
c:\Program Files\BitDefender 2011\bitdefender.exe
c:\Documents and Settings\All Users\Start Menu\BitDefender 2011\
c:\Documents and Settings\All Users\Start Menu\BitDefender 2011\BitDefender 2011.lnk
%AllUsersProfile%\Start Menu\BitDefender 2011\Uninstall.lnk
%UserProfile%\Desktop\BitDefender 2011.lnk
%Temp%\srvED4.ini
%Temp%\srvED4.tmp
Auto Removal
To remove this virus Automatically, We suggest following tools:
Malware Bytes Anti-Malware (Download)
StopZilla Anti-Spyware (Download)
