How to Remove TheDefend | TheDefend Removal Guide



TheDefend is a rogue antivirus program that is one of the latest incarnations of the wini family of rogues. It will introduce itself onto your system through aggressive advertising claiming to be a video codec update or flash player update that may be required to see a highly sought after video. Once the user tries to download the codec they have loaded a trojan which installs the software and then they are buried with popups and complaints of security problems on their computer and multiple viral infected files. The catch here is that they claim they cannot repair the problems unless you purchase their software. Read on for how to remove TheDefend.


First you may wish to visit he control panel and use add/remove programs to uninstall thedefend. If that works then you are lucky and you should proceed to install malwarebytes antimalware or superantispyware and then scan with that and install a REPUTABLE antivirus program like avg/avira or trendmicro (their online housecall scan should be fine. Then make sure to scan until your computer is clear.

You will find a download link for malwarebytes antimalware on my virus removal toolkit page. While you are there you may wish to also download process explorer as it may be useful later for killing off the programs associated with this rogue.

When you have downloaded malwarebytes (or superantispyware) and try to install you may be unable to install it. Here are a few tricks you can try to get the software installed 1) rename the installer from mbam-setup.exe to something like iexplore.exe and then retry the install, update and scan. 2) reboot into safe mode, try the install there (possibly using trick #1) then retry the install, update and scan or 3) continue to the next manual removal step which is killing off the running processes of thedefend and then retry your install, update and scan.

The following programs are associated with thedefend and should be killed off using the task manager to manually remove thedefend from your computer. If you are unable to launch the task manager you may try 1) copying the executable for task manager (taskmgr.exe) to the desktop and then rename it to something like firefox.exe. 2) reboot into safe mode and see if the programs listed are running. 3) use process explorer instead of task manager to kill off the following files:

thedefend.exe
uninstall.exe
RANDOM.exe

Some of the files above (and below) are named randomly when this rogue installs itself on your system. You should use what you find on your computer along with the locations listed below to determine which files should be killed off or deleted.

The following files and folders should be deleted to remove thedefend from your computer:

%docs%All UsersDesktopTheDefend.lnk
%docs%All UsersStart MenuProgramsTheDefend
%docs%All UsersStart MenuProgramsTheDefend1 TheDefend.lnk
%docs%All UsersStart MenuProgramsTheDefend2 Homepage.lnk
%docs%All UsersStart MenuProgramsTheDefend3 Uninstall.lnk
%progfiles%TheDefend Software
%progfiles%TheDefend SoftwareTheDefend
%progfiles%TheDefend SoftwareTheDefendTheDefend.exe
%progfiles%TheDefend SoftwareTheDefenduninstall.exe
%win%10536ha9ktozl5fa.bin
%win%10697spamz5t44f9.bin
%win%10754trz9293.cpl
%win%system32RANDOM.exe
%win%system323d03d9wnl5ader227z.cpl
%win%system323fe1downlzade923815.dll
%win%system323z2fback5oo924.dll
%tmp%RANDOM.exe

At this point your manual removal of TheDefend is almost finished and you should follow up with a scan with malwarebytes antimalware or superantispyware as well as a scan with a reputable antivirus application such as AVG/avira/norton/mcafee/etc. (Online scans such as trendmicros housecall should be fine as well.)

Related Posts

Blog Traffic Exchange Related Posts
  • How to Remove ProtectPCs | ProtectPCs Removal Guide ProtectPCs is a rogue antivirus application from the Wini family of rogues. It will push itself through claims of it being a video codec update or flash player update. Usually these appear on a site that shows up in the search results for whatever latest greatest sought after video clip......
  • How to Remove AntiAid | AntiAid Removal Guide AntiAid is a rogue antivirus/security program that is from the Wini family of Rogues. This is a bit of a departure from much of the long recent history of these rogues due to a new user interface. This rogue (and it's family) is usually advertised (pushed would be a better......
  • How to Remove SecurityFighter | Security Fighter Removal SecurityFighter is making the rounds as yet another rogue security application. It installs itself via trojans and web popups and creates files that it then claims are viral and need to be cleaned out for your computer to be safe. Of course, they never can do that without you first......
Blog Traffic Exchange Related Websites
  • Low Cost Computing for a Baby Boomer Lifestyle I rely heavily on personal computers for work and home activities. So do you. One of my objectives over the past couple of years has been to reduce the cost of computing in the one area where cost-control is easiest: software. I have found many free software applications that work......
  • Avoid Becoming A Victim Of Debit Card Fraud The use of debit cards has increased dramatically over the last decade, resulting in a dramatic increase in the number of cases of debit card fraud reported each year.  As companies try to combat the techniques that scammers are using to obtain debit card information, the best thing for individual......
  • What to Look for in Your Blogging Software There are so many choices for blogging software on the market, that it can be very difficult to choose the right one. Every software choice has its advantages and disadvantages which means that you will have to make some decisions on your needs. This will help you to determine which......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site