Computer Tips -Tech Info



« | »

How to Remove Windows PC Defender | Windows PC Defender Removal

Windows PC Defender is a rogue antivirus application that resembles the legitimate antispyware known as Windows Defender from Microsoft. Their intent apparently is to mimic the look an theming of that application to trick potential customers into trusting and downloading (and paying for) their product. It is a clone of Windows Guard Pro and Ultimate System Guard. Like so many of these rogues, they simply change the names and recycle much of what they’ve used before. As most of these applications do, Windows PC Defender displays false claims of system problems and threats and claims to be able to remove them if you pay. So… on to removal of windows pc defender.


You will likely see the following popups on your system if it is infected with Windows PC Defender:

System alert
Suspicious software, which may be malicious, has been detected on your PC. Click here to remove this threat immediately with Windows PC Defender

Warning! Your computer is infected
Warning! Trojan Found!
File name: crss.drv
Threat name: Trojan-Spy.HTML.Sunfraud.a

The following sites should be blocked to protect against Windows PC Defender:

windowspcdefender.com

You may be able to use malwarebytes antimalware to perform an automatic removal of this pest, you can download it via a link on my virus removal toolkit page.

It might be possible to try safe mode for running a clean up with malwarebytes antimalware if it doesn’t work during the a normal boot of windows. Additionally killing the following processes via the task manager may help in the automated removal of this pest:

ppal.exe
fix.exe
eb.exe
WP345d.exe

These dlls need to be removed and unregistered:

tempdoc.dll
ddv.dll
cid.dll
mozcrt19.dll
sqlite3.dll

Then to continue with a manual removal you should look to delete the following files and folders:

%users%All UsersApplication Data345d567
%users%All UsersApplication Data345d5678424.mof
%users%All UsersApplication Data345d567mozcrt19.dll
%users%All UsersApplication Data345d567sqlite3.dll
%users%All UsersApplication Data345d567WP345d.exe
%users%All UsersApplication Data345d567WPCD.ico
%users%All UsersApplication Data345d567WPCDSys
%users%All UsersApplication Data345d567WPCDSysvd952342.bd
%users%All UsersApplication DataWPCDSys
%users%All UsersApplication DataWPCDSyswpcd.cfg
%UserProf%Application DataMicrosoftInternet ExplorerQuick LaunchWindows PC Defender.lnk
%UserProf%Application DataWindows PC Defender
%UserProf%Application DataWindows PC Defendercookies.sqlite
%UserProf%Application DataWindows PC DefenderInstructions.ini
%UserProf%DesktopWindows PC Defender.lnk
%UserProf%Recentcid.dll
%UserProf%RecentCLSV.tmp
%UserProf%Recentddv.dll
%UserProf%Recenteb.exe
%UserProf%Recenteb.sys
%UserProf%Recentenergy.sys
%UserProf%Recentexec.tmp
%UserProf%Recentfix.exe
%UserProf%RecentFS.drv
%UserProf%Recentkernel32.drv
%UserProf%RecentPE.drv
%UserProf%RecentPE.tmp
%UserProf%Recentppal.exe
%UserProf%Recentrunddlkey.drv
%UserProf%Recenttempdoc.dll
%UserProf%Start MenuWindows PC Defender.lnk
%UserProf%Start MenuProgramsWindows PC Defender.lnk
%ProgFiles%Mozilla Firefoxsearchpluginssearch.xml

After a manual removal it would be wise to run a scan and cleaning with Malwarebytes antimalware to ensure that you have cleaned out everything during your windows pc defender removal. (Make certain to update your antimalware program first.)

Related Posts

Blog Traffic Exchange Related Posts Blog Traffic Exchange Related Websites
www.pdf24.org    Send article as PDF   

Posted by on September 19, 2009.

Tags: , , , , , ,

Categories: antivirus, Rogue Security Software

« | »




Recent Posts


Pages



Switch to our desktop site