Malware Defense

20 December 2009 12 Comments

Malware Defense virus will keep on spreading over the Internet pretending to be legitimate antivirus software. Its goal is to deceive people with its protection features. When installed on computer, Malware Defense attempts to make changes on computer settings and tries to embed malicious codes on to legitimate system files. This will make Malware Defense undetectable to existing security programs. Once it has done necessary modifications, it will proceed with the promotion stage. A constant reminder and security alerts pop-up will come very timely from Malware Defense prompting users to buy the registered version of this useless program.

Malware Defense has no add/remove components included during installation so it is impossible to get rid of it automatically via Windows control panel. Don’t forget to remove Malware Defense associated virus and malicious files hiding inside the system. These remnants have a tendency to connect to a remote location and download the threat again. You last resort is to scan with a combination of antivirus and antimalware programs. To properly guide you with the removal of Malware Defense, please refer to procedure on this page.

Screen Shot Image:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Malware Defense Removal Procedures

1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on the file to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished, click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart Windows.

Technical Details and Additional Information:

Malicious Files Added by Malware Defense
%UserProfile%\Desktop\Malware Defense Support.lnk
%UserProfile%\Desktop\Malware Defense.lnk
%UserProfile%\Start Menu\Programs\Malware Defense\Malware Defense Support.lnk
%UserProfile%\Start Menu\Programs\Malware Defense\Malware Defense.lnk
%UserProfile%\Start Menu\Programs\Malware Defense\Uninstall Malware Defense.lnk
c:\Program Files\Malware Defense\help.ico
c:\Program Files\Malware Defense\md.db
c:\Program Files\Malware Defense\mdefense.exe
c:\Program Files\Malware Defense\mdext.dll
c:\Program Files\Malware Defense\uninstall.exe

File Location for Windows Versions:

• %UserProfile% for Vista/7 user is C:\Users\<Current User> for Windows Vista/7, for Windows XP/2000 this is C:\Documents and Settings\<Current User>.

Malware Defense Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Malware Defense”
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\SimpleShlExt
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\SimpleShlExt