How to remove WinPC Defender rogue anti-spyware

Malware Description:
WinPC Defender (also known as Win PC Defender) is a fake spyware remover developed by the same scammers who invented XP Police Antivirus threat. WinPC Defender may look like a legitimate program at first sight but a closer look proves the opposite. WinPC Defender is a rogue because it uses fake warnings and fabricated system scanners to promote itself. The basic objective of WinPC Defender is to make you think your machine has security risks and other malware problems. Having learned such sad news, most computer users will start looking for a tool to remove these corrupt “detections”. And here it comes – the WinPC Defender which is marketed as a malware removal utility. Now, the truth is – WinPC Defender is a counterfeit, it penetrates into computers illicitly via latent Trojan intrusion, and then pushes its commercial version by triggering tons of totally misleading alerts about infections that aren’t there. If you end up purchasing WinPC Defender license, you will soon face real computer problems. On the other hand, if you keep ignoring WinPC Defender fake annoying pop-ups, you will be hardly able to use your PC because of them. So, the most reasonable thing to do is to completely remove WinPC Defender from your computer – the sooner the better.

Malware Type: Rogue Anti-Spyware

Malware Author: Innovagest2000

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

WinPC Defender Free Scanner and Remover: Download Now

WinPC Defender Screenshot:

WinPC Defender

How to remove WinPC Defender and affiliated threats manually:
Manual removal of WinPC Defender is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %UserProfile%\Desktop\Launch WinPC Defender.lnk
  • %UserProfile%\Local Settings\Temp\delwdef2008.bat
  • %UserProfile%\Local Settings\Temp\[Random Name].tmp
  • %Program Files%\WinPC Defender\data.dat
  • %Program Files%\WinPC Defender\FwHookDrv.sys
  • %Program Files%\WinPC Defender\HOSTS.hst
  • %Program Files%\WinPC Defender\Manual.url
  • %Program Files%\WinPC Defender\options.xml
  • %Program Files%\WinPC Defender\reserve.dat
  • %Program Files%\WinPC Defender\rules
  • %Program Files%\WinPC Defender\Rules.txt
  • %Program Files%\WinPC Defender\siren.wav
  • %Program Files%\WinPC Defender\Support.url
  • %Program Files%\WinPC Defender\svo.scf
  • %Program Files%\WinPC Defender\temp
  • %Program Files%\WinPC Defender\Uninstall.exe
  • %Program Files%\WinPC Defender\Uninstall_st_st_.exe
  • %Program Files%\WinPC Defender\vfile
  • %Program Files%\WinPC Defender\WDefDemo.exe
  • %Program Files%\WinPC Defender\Web.url
  • %WINDOWS%\ieocx.dll

The registry entries that need to be removed are as follows:

  • HKEY_CURRENT_USER\Software\WinPC Defender
  • HKEY_CLASSES_ROOT\CLSID\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
  • HKEY_CLASSES_ROOT\IEocxApp.IEocx
  • HKEY_CLASSES_ROOT\IEocxApp.IEocx.1
  • HKEY_CLASSES_ROOT\Interface\{4B66E1DF-4DE3-4CDA-83B5-11673EADAB0B}
  • HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
  • HKEY_CLASSES_ROOT\TypeLib\{A54DC52D-7AAD-4D40-A126-337211631EDC}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96ad72e4-2e2b-4ffc-a5bb-279c2714af12}
  • HKEY_CURRENT_USER\Control Panel\don’t load “scui.cpl”
  • HKEY_CURRENT_USER\Control Panel\don’t load “wscui.cpl”
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “sysav”
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “Content”

Please, be aware that manual removal of WinPC Defender is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of WinPC Defender, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download WinPC Defender Remover

Like This Article? Let Others Know!

Reader's Comments:

  1. Casper |

    I cant install the remover. when i try to do it it just stops and goes to the desktop

  2. ian nicolson |

    This nasty Trogan grabed hold of my computer and there was little I could do to prevent it taking hold, I am now awaiting the down load of this remover. Heres hoping and thanks for the help [in advance]. Ian

  3. admin |

    Casper,
    Looks like the malware is preventing you from installing removal tools directly on the infected machine.
    In your individual case, we recommend you to try downloading our remover on a different computer that is not infected. Then, you should save it to a CD or flash memory and this way move it to the contaminated PC.
    Thanks for using Remove Malware!

  4. Mark S. |

    I tried a flash drive and a CD. My infected computer won’t recognize the flash drive, and the computer acts like it’s started to open the removal tool then it just stops.

  5. admin |

    Mark,
    We recommend you to try booting in Safe Mode to run the remover. Safe Mode can be accessed through continuously pressing F8 button when your computer starts. Then, follow the prompts to install and run Spyware Doctor, it’s simple.
    Hope it works! It should.
    Thanks for your comment!
    Regards,
    Remove Malware

  6. Jamie Snell |

    This virus is on my kids’ computer and it’s taken control of everything. I can’t access the registry, the taskbar, the internet, and half the time it just freezes up and stays that way. Even in safemode, I’m unable to access anything. The search function doesn’t work either. I can’t open discs or flash drives either. I’m at a complete and total loss. :(

  7. Jon |

    thank you so much XD this one was such a bitch didnt even know i dled it im usally good with this stuff :P
    watch out if ur looking for shows on the net all i did was click a play button and it pretty much dled thanks alot this site saved me

  8. admin |

    Jamie,
    Looks like you are undergoing the hard way of WinPC Defender malicious impact. The only thing we can advise it to try installing and registering our removal tool onto a removable drive (e.g. flash memory) on a computer which is not infected. Then, use this removable data medium to transfer Spyware Doctor to the infected PC. We hope it works out!
    Good luck and thanks for your comment!
    Regards,
    Remove Malware

  9. admin |

    Jon,
    U are welcome!
    Thanks for using Remove Malware!
    Regards,
    Remove Malware

Post a Comment: