Internet Defender

27 February 2011 Rogue 7 Comments

For your own protection, never entrust your computer’s protection to Internet Defender. It is a fake security application that is often utilizes a Trojan as its distribution partner. It may invisibly inject self into the system without user’s knowledge. This type of program is malicious and was purposely spread to extract money from innocent victim’s credit card account. Like Security Defender, when Internet Defender is installed on the system, it will begin flashing various alerts and warning messages about the existence of threats. These are not an ordinary threat but rather created just to deceive users. It serves as an scare tactics. With this method, worried victims may be easily convinced to purchase the Internet Defender registration key.

Just ignore Internet Defender and all of its signs and warnings. As mentioned already, this unwanted product grabs a place in your computer without a permission. It will invade one’s computer and create a commotion in its objective to promote Internet Defender as the solution. The truth is, getting rid of Internet Defender will also eliminate annoyances and other forms of misbehavior on your PC. Put your trust only to legitimate program in removing Internet Defender virus. Alternatively, simply follow the removal procedure on this page to remove this malware in the best way we can conceive.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Added Registry Entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"

Associated Files and Folders:

c:\Program Files\Internet Defender\
c:\Program Files\Internet Defender\Internet Defender.dll
%AllUsersProfile%\Application Data\[random]_.mkv
%AllUsersProfile%\Application Data\[random].avi
%AllUsersProfile%\Application Data\[random].ico
%Temp%\wrk3.tmp
%Temp%\[random].dll

Restore Windows Components

If this virus enters your system, there is a big chance that Windows files, registry entries and other essential components are also infected. System Restore can reinstate clean system files by restoring the configuration to an earlier date. If you have a saved restore point before Internet Defender virus infiltrates the computer, please restore Windows to previous settings.

Manual Removal Procedure

1. Press Ctrl+Alt+Del on keyboard to stop the process associated to "Internet Defender". When Windows Task Manager opens, go to Processes tab. Find and end this process.
(random characters).exe

2. You need to update your installed antivirus software. Please connect to the Internet and download the most recent database. This is a one-click process from your AV program’s console.

3. Thoroughly scan the computer and remove any threats found by your antivirus program. If delete option is not available, your best next choice is to quarantine the infected file. There is also a need to manually locate and delete malicious files. Please see the file section for items that are relevant to Internet Defender.

4. Next, you need to remove registry entries created by Internet Defender. Please refer to registry section to view entries related to the rogue program.
- (Windows 2000/XP) Go to Start > Run, type "regedit" on dialog box then press Enter on keyboard.
- (Windows Vista/7) Go to Start > Search Program and Files, type "regedit" and press Enter.

5. Exit registry editor when you are done.

6. Get rid of Internet Defender start-up entry by going to Start > Run, type msconfig on the "Open" dialog box. It will launch a new window containing System Configuration Utility. Click on the Startup tab and uncheck the following item.
(random characters).exe

7. Click Apply. You need to restart the computer.

Internet Defender Removal Tool

In order to remove the threat completely, you need to download and run Malwarebytes Anti-Malware. This is a free malware removal tool. If Trojan infection blocks the downloading of this program, get it using a clean computer. Rename the executable file before executing on the infected PC.

Use A SAS Portable Scanner:
For complete removal of the virus, carry out a separate scan using different security program. This may catch infected items that evade your previous scan. Download and run SAS Portable Scanner.