Title: ProtectDefender

Type: Rogue Antispyware

Remove ProtectDefender. Removal instructions

Also known as: Protect Defender

Severity scale:

(68 / 100)

ProtectDefender is a fake anti-spyware application that claims to scan your PC for malware but in reality it only imitates system scan and reports premeditated infections or system security threats to scare you into thinking that your computer is infected with malicious software. This rogue program is from the WiniSoft family and a clone of ArmorDefender scareware. Basically, it will do all its best to make you pay for this bogus software. That includes not only false scan results but also fake security alerts and browser hijacking. Once installed it will report numerous infections and then will prompt you to buy it in order to remove the supposed infections. Don't buy it. ProtectDefender is a scam. Please use the removal guide stated below to remove this virus manually or download an automatic removal tool.

[Figure 1. ProtectDefender graphical user interface]

More technically speaking, ProtectDefender is a Trojan virus. Usually, such programs come from fake online scanners or fake websites that impersonates well known and reliable sites. For example, cyber criminals creates a websites that is very similar to Youtube. Usually there are several videos on such websites or just images that look like Youtube player. When a user click play button to view video it gets a fake pop-up stating that you must install the latest version of Flash player in other to play particular video. As a result, you get a Trojan virus which later displays ProtectDefender screen and many fake security alerts. Trojans even impersonate Widows Security Center to make the whole scam look more realistic.

If you find that your computer is infected with ProtectDefender, please read the below guide about how to remove this virus from your PC manually for free or just simply download an automatic removal tool. Remember, do not purchase it. Contact your credit card company as soon as possible if you have inadvertently purchased it.

Related files: ProtectDefender.lnk, always_delete.xml, always_skip.xml, ProtectDefender.exe, 25911s9z34b.exe, quarantine.xml, 19530hacktoo569z.dll, 242cbac59oor19z8.ocx, 29577spyzb9.bin, 45a8thz5at154259.dll, 7975d9wzloader2321.dll, 5565virz9099.bin, 96048ziru5698.ocx, za915hief1227.cpl

ProtectDefender properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Automatic ProtectDefender removal:

remover for ProtectDefender

SpyHunter is recommended remover to uninstall ProtectDefender. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of ProtectDefender and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove ProtectDefender using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

Tested and Confirmed! STOPzilla removes ProtectDefender (2010-01-20 04:43:13)

Malwarebytes Anti Malware

download | review

Tested and Confirmed! Malwarebytes Anti Malware removes ProtectDefender (2010-01-20 04:43:13)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing ProtectDefender (2010-01-20 08:34:17)

XoftSpySE Anti Spyware

download | review

ProtectDefender manual removal:

FORUM:
Discuss ProtectDefender in
spyware removal forum

Kill processes:
ProtectDefender.exe 25911s9z34b.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProtectDefender
HKEY_LOCAL_MACHINE\SOFTWARE\ProtectDefender
HKEY_CURRENT_USER\Software\ProtectDefender
HKEY_CURRENT_USER\Software\ProtectDefender\agents
HKEY_CURRENT_USER\Software\ProtectDefender\general
HKEY_CURRENT_USER\Software\ProtectDefender\realtime
HKEY_CURRENT_USER\Software\ProtectDefender\scanner
HKEY_CURRENT_USER\Software\ProtectDefender\tasks
HKEY_CURRENT_USER\Software\ProtectDefender\tasks\0
HKEY_CURRENT_USER\Software\ProtectDefender\tasks\1
HKEY_CURRENT_USER\Software\ProtectDefender\updates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ProtectDefender.exe" -min"
HKEY_CURRENT_USER\Software\ProtectDefender\tasks\1
HKEY_CURRENT_USER\Software\ProtectDefender\tasks\0
HKEY_CURRENT_USER\Software\ProtectDefender\updates
HKEY_CURRENT_USER\Software\ProtectDefender\scanner
HKEY_CURRENT_USER\Software\ProtectDefender\realtime
HKEY_CURRENT_USER\Software\ProtectDefender\general
HKEY_CURRENT_USER\Software\ProtectDefender\agents

HELP:
how to remove registry entries

Unregister DLLs:
19530hacktoo569z.dll 45a8thz5at154259.dll 7975d9wzloader2321.dll

HELP:
how to unregister malicious DLLs

Delete files:
ProtectDefender.lnk always_delete.xml always_skip.xml ProtectDefender.exe 25911s9z34b.exe quarantine.xml 19530hacktoo569z.dll 242cbac59oor19z8.ocx 29577spyzb9.bin 45a8thz5at154259.dll 7975d9wzloader2321.dll 5565virz9099.bin 96048ziru5698.ocx za915hief1227.cpl

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\ProtectDefender Software
C:\Program Files\ProtectDefender Software\ProtectDefender
C:\Program Files\ProtectDefender Software\ProtectDefender\quarantine

Information added: 2010-01-20 04:43:13
Information updated: 2010-01-20 05:57:02

Additional resources related to ProtectDefender:

Attention: If you know or you have a website or page about ProtectDefender removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about ProtectDefender parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.