How to Remove TheDefend | TheDefend Removal Guide



TheDefend is a rogue antivirus program that is one of the latest incarnations of the wini family of rogues. It will introduce itself onto your system through aggressive advertising claiming to be a video codec update or flash player update that may be required to see a highly sought after video. Once the user tries to download the codec they have loaded a trojan which installs the software and then they are buried with popups and complaints of security problems on their computer and multiple viral infected files. The catch here is that they claim they cannot repair the problems unless you purchase their software. Read on for how to remove TheDefend.


First you may wish to visit he control panel and use add/remove programs to uninstall thedefend. If that works then you are lucky and you should proceed to install malwarebytes antimalware or superantispyware and then scan with that and install a REPUTABLE antivirus program like avg/avira or trendmicro (their online housecall scan should be fine. Then make sure to scan until your computer is clear.

You will find a download link for malwarebytes antimalware on my virus removal toolkit page. While you are there you may wish to also download process explorer as it may be useful later for killing off the programs associated with this rogue.

When you have downloaded malwarebytes (or superantispyware) and try to install you may be unable to install it. Here are a few tricks you can try to get the software installed 1) rename the installer from mbam-setup.exe to something like iexplore.exe and then retry the install, update and scan. 2) reboot into safe mode, try the install there (possibly using trick #1) then retry the install, update and scan or 3) continue to the next manual removal step which is killing off the running processes of thedefend and then retry your install, update and scan.

The following programs are associated with thedefend and should be killed off using the task manager to manually remove thedefend from your computer. If you are unable to launch the task manager you may try 1) copying the executable for task manager (taskmgr.exe) to the desktop and then rename it to something like firefox.exe. 2) reboot into safe mode and see if the programs listed are running. 3) use process explorer instead of task manager to kill off the following files:

thedefend.exe
uninstall.exe
RANDOM.exe

Some of the files above (and below) are named randomly when this rogue installs itself on your system. You should use what you find on your computer along with the locations listed below to determine which files should be killed off or deleted.

The following files and folders should be deleted to remove thedefend from your computer:

%docs%All UsersDesktopTheDefend.lnk
%docs%All UsersStart MenuProgramsTheDefend
%docs%All UsersStart MenuProgramsTheDefend1 TheDefend.lnk
%docs%All UsersStart MenuProgramsTheDefend2 Homepage.lnk
%docs%All UsersStart MenuProgramsTheDefend3 Uninstall.lnk
%progfiles%TheDefend Software
%progfiles%TheDefend SoftwareTheDefend
%progfiles%TheDefend SoftwareTheDefendTheDefend.exe
%progfiles%TheDefend SoftwareTheDefenduninstall.exe
%win%10536ha9ktozl5fa.bin
%win%10697spamz5t44f9.bin
%win%10754trz9293.cpl
%win%system32RANDOM.exe
%win%system323d03d9wnl5ader227z.cpl
%win%system323fe1downlzade923815.dll
%win%system323z2fback5oo924.dll
%tmp%RANDOM.exe

At this point your manual removal of TheDefend is almost finished and you should follow up with a scan with malwarebytes antimalware or superantispyware as well as a scan with a reputable antivirus application such as AVG/avira/norton/mcafee/etc. (Online scans such as trendmicros housecall should be fine as well.)

Related Posts

Blog Traffic Exchange Related Posts
  • How to Remove SecurityFighter | Security Fighter Removal SecurityFighter is making the rounds as yet another rogue security application. It installs itself via trojans and web popups and creates files that it then claims are viral and need to be cleaned out for your computer to be safe. Of course, they never can do that without you first......
  • How to Remove DefendAPC | DefendAPC Removal Guide DefendAPC is the latest variation on the Wini family of rogue antivirus. It is typically promoted via the use of trojans, malware and aggressive advertising. Once installed on the system it will run supposed scans of the system claiming that you have viruses on your system and that you have......
  • How to Remove RESpyWare | RESpyWare Removal Guide ReSpyWare is a rogue antivirus/ antimalware application in the same family as Reanti,keepcop and secure keeper and unfortunately a very very long line of other predecessors. They are not much different except in their names. Probably the biggest shared trait is the annoying warnings about supposed viruses on your computer......
Blog Traffic Exchange Related Websites
  • Most Popular and Useful Security Apps for a Smart Phone The following is a post from staff writer Crystal at Budgeting in the Fun Stuff, where she writes about finding the balance between paying your bills, saving for your future, and budgeting in the fun stuff along the way. Buying a smart phone is a major investment because you spend......
  • How To Remove Vista Internet Security 2011 Virus You may be the latest victim of Vista Internet Security 2011. This name-changing virus has the different version, but no matter what version you have, the issues are the equivalent. The cyberpunks who formulated this virus were quite professional to make the program dynamically change its name according to windows......
  • What to Look for in Your Blogging Software There are so many choices for blogging software on the market, that it can be very difficult to choose the right one. Every software choice has its advantages and disadvantages which means that you will have to make some decisions on your needs. This will help you to determine which......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site