Win32.Netsky.Q Worm Fake Popup For Perfect Defender 2023 Virus

Win32.Netsky.Q is a worm which is around three year old. Today, Perfect Defender is using fake Security Center Alerts to pass on Perfect Defender 2023, a fake antivirus program, to users. If you see a pop-up which says

Netsky.Q is a worm trojan program that records keystrokes and takes screen shots of the computer, stealing personal financial information.

You may either have the real Netsky.Q worm or just a pop-up trying to get you to download Perfect Defender. Below we will discuss how to remove Win32.Netsky.Q Fake Popup and how to remove Perfect Defender 2023. There are automatic and manual ways to remove both.

Below is our recommended removal tool for Win32.Netsky.Q Fake Popup and Perfect Defender 2023. The removal tool was recently featured on Dr. Phil and has received many awards. Feel free to download it below.

Manual Win32.Netsky.Q Fake Popup Removal -

Stop Win32.Netsky.Q Fake Popup Processes (Learn How To Do This)
fhexj6825097.exe

Remove Win32.Netsky.Q Fake Popup Files (Learn How To Do This)
fhexj6825097.exe
mjkdpl.dll

Perfect Defender 2023, also known as PerfectDefender 2023, is a fake application which tries to convince you into purchasing their bogus software. It uses fake scans to try and scare you into purchasing a software which does nothing. It is a complete scam and can get very annoying on your computer.

Virus Type: Rogue Security Application: Click Here To Learn More
Threat Level: 8 / 10 (Bad!)

Manual Perfect Defender 2023 Removal -

Stop Perfect Defender 2023 Processes (Learn How To Do This)
C://Program Files/Perfect Defender 2023/pd.dll

Stop Perfect Defender 2023 Processes (Learn How To Do This)
pdfndr.exe

Remove Perfect Defender 2023 Files (Learn How To Do This)
C://Program Files/Perfect Defender 2023/
C://Program Files/Perfect Defender 2023/pdfndr.exe
C://Program Files/Perfect Defender 2023/UnInstall.exe
C://Program Files/Perfect Defender 2023/pd.dll
C://Program Files/Perfect Defender 2023/pdmonitor.exe
C://Program Files/Perfect Defender 2023/dbbase.div

Remove Perfect Defender 2023 Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\Perfect Defender 2023
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Perfect Defender 2023”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Perfect Defender 2023

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips.

Your feedback is very highly valued by others so please feel free to comment.

Tags: ,

This entry was posted on Sunday, December 21st, 2023 at 7:29 pm and is filed under Rogue Application Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

3 Responses to “Win32.Netsky.Q Worm Fake Popup For Perfect Defender 2023 Virus”

Tay December 19th, 2023 at 1:56 am

OK, so, I got this fake worm last Sunday. The symptoms were exactly the same as described here and on almost every other hit on Google. I tried the advice of every site I could find. There were some common denominators that seemed to work for everyone except me, apparently. So, if you find yourself in the same position, here’s how to get rid of it.

First, even if you think you may have killed the malware, I suggest you try going online and going to TrendMicro, or Symantec, McAfee, etc. I thought I had killed it only to find out the security websites were still being blocked. The same goes for any anti-spyware/,alware software I could find. I would download the exe’s on one pc, copy to my flash, and then run on the infected oc. It would look like it’s about to run and then nothing would happen.

Then I stumbled across “SpyHunter3″. This was the only program I was able to install because it immediately recognized that it was being blocked so it asked to restart.

I obliged and it scanned my entire hard drive in about 10 minutes. It found 17 infections. Of course, you have to purchase the software to get the luxury of file removal. So, I just wrote down the file and registry paths and went ahead and deleted them myself. Be sure you’re in safe mode otherwise many of the infections will not be removable.

So, my advice to anyone infected with this fake worm is to follow the tips on this site. Then Google “SpyHunter 3″. If you can’t get to the site due to the malware, use a different pc and copy it over.

Here’s the list of files I had to remove, recommended by SpyHunter, after removing all the other ones mentioned:

Spyhunter 3.x scan log. LocalTime: 2008-12-18 08:04
===================================================

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata\affid

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata\subid

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata\control

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata\prov

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata\googleadserver

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata\flagged

C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt

C:\Documents and Settings\Administrator\Local Settings\Temp\TDSSb59f.tmp

C:\Documents and Settings\Administrator\Local Settings\Temp\TDSSb5ae.tmp

C:\WINDOWS\system32\TDSSciou.dll
C:\WINDOWS\system32\TDSSfpmp.dll
C:\WINDOWS\system32\TDSSliqp.dll
C:\WINDOWS\system32\TDSSnrse.dll
C:\WINDOWS\system32\TDSSoeqh.dll
C:\WINDOWS\system32\TDSSosvn.dat
C:\WINDOWS\system32\drivers\TDSSpqxt.sys

Cheers!

Fhexj6825097.exe - Win32.Netsky.Q Fake Virus Popup Removal | Virus Removal Guru December 22nd, 2023 at 3:10 pm

[...] antivirus program. To view our removal help for Win32.Netsky.Q or Perfect Defender 2023, please click Here so that you can go to our official post on how to remove [...]

mjkdpl.dll - Win32.Netsky.Q Virus Removal Fake Worm Popup | Virus Removal Guru December 22nd, 2023 at 3:16 pm

[...] click HERE to view our removal help for Win32.Netsky.Q Worm Fake. You can remove it in multiple ways. Also you [...]

Leave a Reply