How to remove Windows PC Defender

Thursday, September 17th, 2009 at 12:18 am
Home » Rogue Antispyware » Windows PC Defender

Windows PC Defender description

Windows PC Defender is a fraudulent program trying to gain a purchase by presenting itself as part of Windows operating system. The look of this fraud is a copy of Windows Defender, the legitimate anti-spyware tool. WindowsPC Defender is a clone of Windows Guard Pro and Ultimate System Guard.

WindowsPCDefender

WindowsPCDefender delivers annoying security alerts encouraging people to pay for using the program. The warning messages are convincing but they are all fabricated. Windows PCDefender usually displays the following notifications:

System alert
Suspicious software, which may be malicious, has been detected on your PC. Click here to remove this threat immediately with Windows PC Defender

Warning! Your computer is infected
Warning! Trojan Found!
File name: crss.drv
Threat name: Trojan-Spy.HTML.Sunfraud.a

Windows PC Defender is a Rogue Antispyware software

How to manually remove Windows PC Defender

To remove Windows PC Defender spyware you must block Windows PC Defender sites, stop and remove processes, unregister DLL files, search and delete all other Windows PC Defender files and registry utility. Follow the Windows PC Defender detection and removal instructions below.

The most typical software removal method is to remove Windows PC Defender by using "Add or Remove Programs" service. However there may be hidden Windows PC Defender files, running processes and registries in your computer, so Windows PC Defender may recreate all other files after reboot.

Windows PC Defender manual removal instructions

Block Windows PC Defender sites:
windowspcdefender.com Read more how to block Windows PC Defender sites

Stop and remove Windows PC Defender processes:
ppal.exe
fix.exe
eb.exe
WP345d.exe Read more how to kill Windows PC Defender processes

Locate and delete Windows PC Defender registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WP345d.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=201&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "UID" = "201"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "89770891803"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows PC Defender" Read more how to delete Windows PC Defender registry entries
Download RegistryBooster 2010 to scan errors caused by Windows PC Defender

Search and unregister Windows PC Defender DLL libraries:
tempdoc.dll
ddv.dll
cid.dll
mozcrt19.dll
sqlite3.dll Read more how to unregister Windows PC Defender DLL files

Detect and delete other Windows PC Defender files:
c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\345d567\8424.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\WP345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\WPCD.ico
c:\Documents and Settings\All Users\Application Data\345d567\WPCDSys
c:\Documents and Settings\All Users\Application Data\345d567\WPCDSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WPCDSys
c:\Documents and Settings\All Users\Application Data\WPCDSys\wpcd.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows PC Defender.lnk
%UserProfile%\Application Data\Windows PC Defender
%UserProfile%\Application Data\Windows PC Defender\cookies.sqlite
%UserProfile%\Application Data\Windows PC Defender\Instructions.ini
%UserProfile%\Desktop\Windows PC Defender.lnk
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\fix.exe
%UserProfile%\Recent\FS.drv
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Start Menu\Windows PC Defender.lnk
%UserProfile%\Start Menu\Programs\Windows PC Defender.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml

We strongly recommend you to use spyware remover to track Windows PC Defender and automaticaly remove Windows PC Defender processes, registries and files as well as other spyware threats.


Tags: , , ,

3 Responses to

Windows PC Defender

  1. Carol Donsol
    December 13th, 2009 at 6:05 am

    hi! the spyware i install does not run in my computer, what will i do?

    Reply

    Luciana Reply:
    December 13th, 2009 at 10:46 pm

    I guess you’re talking about anti-spyware. Some of the infections are able to block security tools, but you can run those in a safe mode.

    Reply

Trackbacks

  1. Remove Windows System Defender, WindowsSystemDefender removal

Leave a Reply

« SoftSafeness
TrustWarrior »