Internet Defender Removal Tool

Written by Administrator | Friday, 25 February 2011 14:08

Internet Defender is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. Internet Defender a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm telling that there are some malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is this Internet Defender. Internet Defender invites you to purchase a license for this bogus program to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you. Uninstall Internet Defender as soon as possible from your system with this removal tool for Internet Defender.

Internet Defender

To remove Internet Defender (Uninstall Internet Defender)

Restart your computer and as soon as your computer turns on hit the F8 key (repeatedly) until a screen comes up
Choose Start computer in SAFE MODE with network support
Open Internet Explorer
Go to Tools => Internet Options => Connections Tab => LAN Settings
Uncheck "Use a proxy server"
Recheck "Automatically detect settings"
Download this free removal tool for Internet Defender
Extract it
Launch
Click on the delete button

Internet Defender will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

[Random].exe

Files :

%AppData%\[Random].avi
%AppData%\[Random].ico
%StartUp%\[Random].lnk
%ProgramFiles%\Internet Defender
%ProgramFiles%\Internet Defender\Internet Defender.dll
%AppData%\Microsoft\Internet Explorer\Quick Launch\Internet Defender.lnk
%Desktop%\Internet Defender.lnk
%Startup%\[Random].lnk

Registry

HKEY_CLASSES_ROOT\CLSID\{ca84c702-c758-4421-974e-b02662e76d7c}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ca84c702-c758-4421-974e-b02662e76d7c}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- [Random] = %system32%\rundll32.exe" "%AppData%\[random].avi", start
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- [Random] = %system32%\rundll32.exe" "%AppData%\[random].avi", start