How to Remove TheDefend, TheDefend Removal Guide
By Bryan on December 17, 2009 | Rogue Antispyware
TheDefend is not a real antivirus application. It is a fraud made to infect the system with parasites and take money for it. TheDefend presents itself as a legitimate security program meant for protecting computer from viruses and other infections. However, all The Defend is capable of is imitating some of the actions performed by real ativiruses and annoying the user.
TheDefend is acquired online at various corrupt websites. By using trojans TheDefend downloads and installs itself without the user's notice. The parasite loads irritating system scans and pop-up messages warning about some non-existent security threats. Here are some of the warnings generated by The Defend:
Security Center Alert!
Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropper or similar.
Do you want TheDefend to block this attack?
Recommendations…
Windows Security Center
Your computer is infected by spyware – threat have been found while scanning your files and registry. It is strongly recommended that you disinfect your PC and activate Realtime protection against future intrusions.
Recommendation
Register the TheDefend antispyware to clean your computer and prevent new security and privacy attacks. You will be able to downloads database updates and get online protection against Internet attacks.
Spyware Alert!
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of TheDefend and remove spyware threats from your PC.
Beware! Do not purchase TheDefend as it is a rogue tool which is not capable of protecting your computer. It is a malware that violates the security system and may harm your machine. Remove TheDefend immediately upon detection.
New processes created
TheDefend.exeuninstall.exe Learn how to remove malicious processes
New TheDefend registry entries created
HKEY_CURRENT_USER\Software\TheDefendHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TheDefend
HKEY_LOCAL_MACHINE\SOFTWARE\TheDefend
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "TheDefend.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ".exe" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries
New files and directories created
c:\Documents and Settings\All Users\Desktop\TheDefend.lnkc:\Documents and Settings\All Users\Start Menu\Programs\TheDefend
c:\Documents and Settings\All Users\Start Menu\Programs\TheDefend\1 TheDefend.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\TheDefend\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\TheDefend\3 Uninstall.lnk
c:\Program Files\TheDefend Software
c:\Program Files\TheDefend Software\TheDefend
c:\Program Files\TheDefend Software\TheDefend\TheDefend.exe
c:\Program Files\TheDefend Software\TheDefend\uninstall.exe
c:\WINDOWS\10536ha9ktozl5fa.bin
c:\WINDOWS\10697spamz5t44f9.bin
c:\WINDOWS\10754trz9293.cpl
c:\WINDOWS\system32\.exe
c:\WINDOWS\system32\.exe
c:\WINDOWS\system32\3d03d9wnl5ader227z.cpl
c:\WINDOWS\system32\3fe1downlzade923815.dll
c:\WINDOWS\system32\3z2fback5oo924.dll
%Temp%\.exe Learn how to unregister malicious DLL files
Symptoms in a Hijackthis log
O4 - HKCU\..\Run: [.exe] C:\WINDOWS\system32\.exeO4 - HKCU\..\Run: [TheDefend.exe] C:\Program Files\TheDefend Software\TheDefend\TheDefend.exe
How to remove TheDefend
To remove TheDefend manually you must block rogue TheDefend related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious TheDefend files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.
Scan your computer
More Rogue Antispyware news
Remove Malware Protection Center fraud
Malware Protection Center is designed to look like a decent security program but the looks are deceiving. The tool is actually malicious and fraudulent. If Malware Protection Center reports "infections" on a screen of your PC, it’s Malware Protection Center itself that should be deleted with no hesitation.Malware Protection Center is quite pesky as it loads enormous amounts of counterfeit security alerts. Read more.- Remove Antivirus Smart Protection scam
- Remove Internet Security 2012 fraud
- Remove Smart Internet Protection 2012 malware
- Smart Protection 2012 uninstall guide
- Internet Security Guard removal tutorial
- Remove HomeSecurityEssentials fraud
- WindowsXP Internet Security 2012 removal tutorial
- Remove Windows 7 Internet Security 2012 fraud
- Windows Vista Internet Security 2012 uninstall guide
- System Check removal tutorial
