Severity scale  
  (68/100)

ProtectDefender. How to Remove? (Uninstall Guide)

removal by - -   Also known as Protect Defender | Type: Rogue Antispyware
12
ProtectDefender is a fake anti-spyware application that claims to scan your PC for malware but in reality it only imitates system scan and reports premeditated infections or system security threats to scare you into thinking that your computer is infected with malicious software. This rogue program is from the WiniSoft family and a clone of ArmorDefender scareware. Basically, it will do all its best to make you pay for this bogus software. That includes not only false scan results but also fake security alerts and browser hijacking. Once installed it will report numerous infections and then will prompt you to buy it in order to remove the supposed infections. Don't buy it. ProtectDefender is a scam. Please use the removal guide stated below to remove this virus manually or download an automatic removal tool.

ProtectDefender graphical user interface
[Figure 1. ProtectDefender graphical user interface]

More technically speaking, ProtectDefender is a Trojan virus. Usually, such programs come from fake online scanners or fake websites that impersonates well known and reliable sites. For example, cyber criminals creates a websites that is very similar to Youtube. Usually there are several videos on such websites or just images that look like Youtube player. When a user click play button to view video it gets a fake pop-up stating that you must install the latest version of Flash player in other to play particular video. As a result, you get a Trojan virus which later displays ProtectDefender screen and many fake security alerts. Trojans even impersonate Widows Security Center to make the whole scam look more realistic.

If you find that your computer is infected with ProtectDefender, please read the below guide about how to remove this virus from your PC manually for free or just simply download an automatic removal tool. Remember, do not purchase it. Contact your credit card company as soon as possible if you have inadvertently purchased it. Related files: 5565virz9099.bin

ProtectDefender properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall ProtectDefender. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall ProtectDefender. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes ProtectDefender (2010-01-20 04:43:13)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes ProtectDefender (2010-01-20 04:43:13)
Plumbytes
We are testing Plumbytes's efficiency (2010-01-20 05:57)
Hitman Pro
STOPzilla
Tested and Confirmed! STOPzilla removes ProtectDefender (2010-01-20 04:43:13)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes ProtectDefender (2010-01-20 04:43:13)
Webroot SecureAnywhere AntiVirus

ProtectDefender manual removal

Kill processes:
ProtectDefender.exe
25911s9z34b.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProtectDefender
HKEY_LOCAL_MACHINE\SOFTWARE\ProtectDefender
HKEY_CURRENT_USER\Software\ProtectDefender
HKEY_CURRENT_USER\Software\ProtectDefender\agents
HKEY_CURRENT_USER\Software\ProtectDefender\general
HKEY_CURRENT_USER\Software\ProtectDefender\realtime
HKEY_CURRENT_USER\Software\ProtectDefender\scanner
HKEY_CURRENT_USER\Software\ProtectDefender\tasks
HKEY_CURRENT_USER\Software\ProtectDefender\tasks\0
HKEY_CURRENT_USER\Software\ProtectDefender\tasks\1
HKEY_CURRENT_USER\Software\ProtectDefender\updates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ProtectDefender.exe" -min"
HKEY_CURRENT_USER\Software\ProtectDefender\tasks\1
HKEY_CURRENT_USER\Software\ProtectDefender\tasks\0
HKEY_CURRENT_USER\Software\ProtectDefender\updates
HKEY_CURRENT_USER\Software\ProtectDefender\scanner
HKEY_CURRENT_USER\Software\ProtectDefender\realtime
HKEY_CURRENT_USER\Software\ProtectDefender\general
HKEY_CURRENT_USER\Software\ProtectDefender\agents
Unregister DLLs:
19530hacktoo569z.dll
45a8thz5at154259.dll
7975d9wzloader2321.dll

Delete files:
ProtectDefender.lnk
always_delete.xml
always_skip.xml
ProtectDefender.exe
25911s9z34b.exe
quarantine.xml
19530hacktoo569z.dll
242cbac59oor19z8.ocx
29577spyzb9.bin
45a8thz5at154259.dll
7975d9wzloader2321.dll
5565virz9099.bin
96048ziru5698.ocx
za915hief1227.cpl
Delete directories:
C:\Program Files\ProtectDefender Software
C:\Program Files\ProtectDefender Software\ProtectDefender
C:\Program Files\ProtectDefender Software\ProtectDefender\quarantine

Geolocation of ProtectDefender

Map reveals the prevalence of ProtectDefender. Countries and regions that have been affected the most are: United States.

Information updated:

Comments on ProtectDefender

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)