Welcome to remove-malware.net

How to remove Win-pc-defender.com hijacker

Malware Description:
Win-pc-defender.com is a fraudulent website involved in the corrupt scheme of promoting the infamous rogue anti-spyware called PC Defender. Technically, handling PC Defender and Win-pc-defender.com hijacker is the same issue but considering the fact that the superior and more hazardous malware here is PC Defender, it’s the rogue that this post is basically about. Win-pc-defender.com has been designed in conformance with the general features inherent to hijacker-sites. You may wonder what it means? Well, first of all, you are very unlikely to follow Win-pc-defender.com domain by your own wish – you will be typically forcedly redirected to this URL. And the redirection itself is possible if your browser settings allow this. And the browser must have been attacked by the hijacker which is technically a backdoor Trojan. Sounds like an intricate technique, but it proved to work for the enormous quantity of hijackers existing on the web. Win-pc-defender.com is just one of such browser hijackers. Win-pc-defender.com will display tons of misleading adware praising the sponsoring rogue PC Defender. In addition, Win-pc-defender.com will probably welcome you with its fake scanner that runs and reports a variety of infections in your system that cannot be removed unless you buy PC Defender license. Do not get tricked by any of the deceptive content you may get on Win-pc-defender.com – it’s all fabricated and pursues the one and only goal to scare you into wasting your money for the useless registered version of PC Defender scam. Besides being worthless, PC Defender is quite dangerous if you install its full version – it may slow your PC down and make it exposed to outer hazards. Please, review the guide below to remove PC Defender rogue anti-spyware and its hijacker Win-pc-defender.com ASAP if infected.

Malware Type: Browser Hijackers

Malware Author: Innovagest2000

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

PC Defender Free Scanner and Remover: Download Now

PC Defender GUI Screenshot:

How to remove Win-pc-defender.com hijacker and PC Defender rogue manually:
Manual removal of Win-pc-defender.com hijacker and attendant malware PC Defender is feasible if you have sufficient expertise in dealing with program files, system processes, .dll files and registry entries.

The associated files to be deleted are listed below:

• %Documents and Settings%\All Users\Application Data\345d567
• %Documents and Settings%\All Users\Application Data\345d567\8424.mof
• %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
• %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
• %Documents and Settings%\All Users\Application Data\345d567\WP345d.exe
• %Documents and Settings%\All Users\Application Data\345d567\WPCD.ico
• %Documents and Settings%\All Users\Application Data\345d567\WPCDSys
• %Documents and Settings%\All Users\Application Data\345d567\WPCDSys\vd952342.bd
• %Documents and Settings%\All Users\Application Data\WPCDSys
• %Documents and Settings%\All Users\Application Data\WPCDSys\wpcd.cfg
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows PC Defender.lnk
• %UserProfile%\Application Data\Windows PC Defender
• %UserProfile%\Application Data\Windows PC Defender\cookies.sqlite
• %UserProfile%\Application Data\Windows PC Defender\Instructions.ini
• %UserProfile%\Desktop\Windows PC Defender.lnk
• %UserProfile%\Recent\cid.dll
• %UserProfile%\Recent\CLSV.tmp
• %UserProfile%\Recent\ddv.dll
• %UserProfile%\Recent\eb.exe
• %UserProfile%\Recent\eb.sys
• %UserProfile%\Recent\energy.sys
• %UserProfile%\Recent\exec.tmp
• %UserProfile%\Recent\fix.exe
• %UserProfile%\Recent\FS.drv
• %UserProfile%\Recent\kernel32.drv
• %UserProfile%\Recent\PE.drv
• %UserProfile%\Recent\PE.tmp
• %UserProfile%\Recent\ppal.exe
• %UserProfile%\Recent\runddlkey.drv
• %UserProfile%\Recent\tempdoc.dll
• %UserProfile%\Start Menu\Windows PC Defender.lnk
• %UserProfile%\Start Menu\Programs\Windows PC Defender.lnk
• %Program Files%\Mozilla Firefox\searchplugins\search.xml

The related registry entries to be removed are as follows:

• HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
• HKEY_CLASSES_ROOT\WP345d.DocHostUIHandler
• HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=201&q={searchTerms}”
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “UID” = “201″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “89770891803″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows PC Defender”

Please, be aware that manual removal of Win-pc-defender.com hijacker and PC Defender rogue is a cumbersome procedure and does not ensure complete deletion of the malware, due to the fact that some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Win-pc-defender.com hijacker and affiliate malware, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.