• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Rogue Anti Spyware
    • Virus
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

My AntiSpyware

Free antispyware software, Online Scanners, Instructions on how to remove spyware and malware.

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Rogue Anti Spyware
    • Virus
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools
Home › Malware removal › Rogue Anti Spyware › How to remove PC Defender (Uninstall instructions)

How to remove PC Defender (Uninstall instructions)

Myantispyware team February 20, 2010     1 Comment    

PC Defender is a new rogue antispyware program that distributed through the use of trojans, which usually pretend to be a program required to watch a video online. When the trojan is started, it will install the fake security application onto your computer without your permission. The same trojan will also configure PC Defender to run automatically when Windows loads.

When the fake security program is running, it it will imitate a scan of your PC and label legitimate Windows files as trojans, backdoors and malware that will not be fixed unless you first purchase the program. Important to know, all of these reported infections are fake, so you can safely ignore the scan results that PC Defender gives you.

Last but not least, while the rogue is running, it will display numerous fake security warnings. Of course, these warnings – a fake and like false scan results should be ignored!

As you can see, PC Defender is a scam and should be removed from your computer upon detection. Do not be fooled into buying the program! Instead of doing so, follow the removal guidelines below in order to remove PC Defender and any associated malware from your computer for free.

More screen shoots of PC Defender


Symptoms in a HijackThis Log

F2 – REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,”C:\Program Files\Def Group\PC Defender\Antispyware.exe”

Use the following instructions to remove PC Defender (Uninstall instructions)

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for PC Defender infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.


Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start PC Defender removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.

Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.

PC Defender creates the following files and folders

C:\Program Files\Def Group\PC Defender
C:\Documents and Settings\All Users\Start Menu\Programs\PC Defender
C:\WINDOWS\Installer\{FC2ABC8E-3715-4A32-B8B5-559380F45282}
C:\Program Files\Def Group\PC Defender\proccheck.exe
C:\Program Files\Def Group\PC Defender\Antispyware.exe
C:\Program Files\Def Group\PC Defender\hook.dll
C:\Documents and Settings\All Users\Start Menu\Programs\PC Defender\PC Defender.lnk
C:\WINDOWS\Installer\{FC2ABC8E-3715-4A32-B8B5-559380F45282}\_BF2DDB0AC7FD40D5AAEDAF.exe
C:\WINDOWS\Installer\{FC2ABC8E-3715-4A32-B8B5-559380F45282}\_C507892FD1860AF6477A61.exe
C:\Documents and Settings\All Users\Desktop\PC Defender.lnk

PC Defender creates/changes the following registry keys and values

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FC2ABC8E-3715-4A32-B8B5-559380F45282}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon | Userinit = “C:\WINDOWS\system32\userinit.exe, “C:\Program Files\Def Group\PC Defender\Antispyware.exe””

Malware removal Rogue Anti Spyware

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

1 Comment

  1. iomio
    ― April 16, 2010 - 2:01 pm  Reply

    Vista defender virus a created by Spyware Doctor to force you to buy they protection, this is gangsters.

Leave a Reply Cancel reply




New Guides

Files encrypted with .wbxd extension
How to remove Wbxd ransomware, Decrypt .wbxd files.
Luuming.com
How to remove Luuming.com pop-ups (Virus removal guide)
LiveRadioSearch
How to uninstall LiveRadioSearch from Chrome, Firefox, IE, Edge
click allow
How to remove Antnormo.top pop-ups (Virus removal guide)
Loupsofinoad.com
How to remove Loupsofinoad.com pop-ups (Virus removal guide)

Follow US

Search

Useful Guides

This setting is enforced by your administrator (Removal guide)
Tech Support Scam
Remove Tech Support Scam pop-up virus [Microsoft & Apple Scam]
remove android virus
How to remove virus from Android phone
DNSChanger
How to remove DNSChanger malware virus [Updated Apr. 2018]
Managed by your organization chrome virus
Chrome Managed by your organization malware removal guide

Recent Posts

How to remove Antimalware Doctor (Uninstall instructions)
How to remove Security Central (Uninstall instructions)
How to remove Personal Anti Malware (Uninstall instructions)
How to remove Security Essentials 2010 (Uninstall instructions)
How to remove My Security Wall (Removal guide)

MYANTISPYWARE.COM

  • About Us
  • Contact Us
  • Privacy Policy

NEED A HELP ?

If you're seeing unwanted pop-ups or ads in your web-browser, you might have an adware installed on your computer. Use the following guide to stop pop-up ads and remove malicious software. Or ask for help here.

Links

  • Downloads
  • Instructions
  • Questions and Answers
  • Free Malware Removal Tools
Copyright © 2004 - 2020 My AntiSpyware - Free antispyware programs and Spyware Removal Instructions.