Welcome to remove-malware.net

How to remove Windows PC Defender rogue anti-spyware

Malware Description:
Windows PC Defender (aka PC Defender) is a new mutation of the previously known rogue security product called WinPC Defender which caused lots of alarm in the computer world last spring. Now, the nasty badware seems to be back – only disguised under a similar name of Windows PC Defender. The malicious application being described has all the features which enable us to refer it to the rogue anti-spyware malware category; hence, Windows PC Defender activity is based on pretending to be something it’s not at all. Windows PC Defender can infiltrate your system without even the slightest notification or other authentication sign. Such stealthy intrusion is possible for the sole reason that Windows PC Defender unregistered version is a trojan-based multitude of executables which locate backdoors in the host PC security to get in without your knowledge and consent. Having crept inside imperceptibly, Windows PC Defender will flood the compromised system with its misleading virus detection reports that claim you got malware apps in great numbers on your computer. Then, Windows PC Defender will go yet further and get down to triggering bogus security scanners which also report lots of security issues. Having accomplished that part of its mission, Windows PC Defender will try to be as persuasive as possible to make the user purchase its full commercial version which is promised to assist you in removal of all the previously detected infections. Well, unless you feel like removing non-existent infections with a paid rogue anti-spyware tool, go ahead. But we strongly recommend you to remove Windows PC Defender malware once it gets noticed on your PC (please, see the info below to learn how).

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Windows PC Defender Free Scanner and Remover: Download Now

Windows PC Defender GUI Screenshot:

How to remove Windows PC Defender manually:
Manual removal of Windows PC Defender is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Documents and Settings%\All Users\Application Data\345d567
• %Documents and Settings%\All Users\Application Data\345d567\8424.mof
• %Documents and Settings%\All Users\Application Data\345d567\mozcrt19.dll
• %Documents and Settings%\All Users\Application Data\345d567\sqlite3.dll
• %Documents and Settings%\All Users\Application Data\345d567\WP345d.exe
• %Documents and Settings%\All Users\Application Data\345d567\WPCD.ico
• %Documents and Settings%\All Users\Application Data\345d567\WPCDSys
• %Documents and Settings%\All Users\Application Data\345d567\WPCDSys\vd952342.bd
• %Documents and Settings%\All Users\Application Data\WPCDSys
• %Documents and Settings%\All Users\Application Data\WPCDSys\wpcd.cfg
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows PC Defender.lnk
• %UserProfile%\Application Data\Windows PC Defender
• %UserProfile%\Application Data\Windows PC Defender\cookies.sqlite
• %UserProfile%\Application Data\Windows PC Defender\Instructions.ini
• %UserProfile%\Desktop\Windows PC Defender.lnk
• %UserProfile%\Recent\cid.dll
• %UserProfile%\Recent\CLSV.tmp
• %UserProfile%\Recent\ddv.dll
• %UserProfile%\Recent\eb.exe
• %UserProfile%\Recent\eb.sys
• %UserProfile%\Recent\energy.sys
• %UserProfile%\Recent\exec.tmp
• %UserProfile%\Recent\fix.exe
• %UserProfile%\Recent\FS.drv
• %UserProfile%\Recent\kernel32.drv
• %UserProfile%\Recent\PE.drv
• %UserProfile%\Recent\PE.tmp
• %UserProfile%\Recent\ppal.exe
• %UserProfile%\Recent\runddlkey.drv
• %UserProfile%\Recent\tempdoc.dll
• %UserProfile%\Start Menu\Windows PC Defender.lnk
• %UserProfile%\Start Menu\Programs\Windows PC Defender.lnk
• %Program Files%\Mozilla Firefox\searchplugins\search.xml

The registry entries that need to be removed are as follows:

• HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
• HKEY_CLASSES_ROOT\WP345d.DocHostUIHandler
• HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=201&q={searchTerms}”
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PRS” = “http://127.0.0.1:27777/?inj=%ORIGINAL%”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “UID” = “201″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform “89770891803″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Windows PC Defender”

Please, be aware that manual removal of Windows PC Defender is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Windows PC Defender, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove Windows Protection Suite rogue anti-spyware
How to remove Windows Additional Guard rogue anti-spyware
How to remove Windows Security Suite rogue anti-spyware
How to remove Win-pc-defender.com hijacker