print version

Malware Defender 2009

Malware Defender 2009

Pop-ups are irritating, but they do serve a purpose.  For rogue antivirus programs, they are essential tools for urging computer users to purchase their software.  For computer users, however, they're valuable signs that something is amiss in your computer.  Malware Defender 2009 may use pop-ups to tell you that you have security issues in your computer: and it's absolutely correct.  What they are not right about, however, is what is causing these issues.  The solution is most assuredly not Malware Defender.

What Is Malware Defender 2009?

Malware Defender 2009 uses the same techniques as other rogue antivirus programs with the goal of persuading computer users to purchase the full version. Particularly convincing are the pop-ups and false alert messages.  Malware Defender 2009 starts a "scan" each time you begin a Windows session and lists a host of infected files it has found.  The only way to remove these threats is to buy Malware Defender 2009, the ads warn.  It is important to know that the scan is not really a scan and the infections are not really infections. Malware Defender 2009 simulates a scan and does not really search your system.  The list that is presented to you is made up of nonexistent files and even legitimate, needed ones.  Deleting these with Malware Defender 2009 will negatively impact your computer's performance.

Signs of Malware Defender 2009 In Your System

While each rogue antivirus program is slightly different, most operate in the same ways and cause the same issues when they are present in your system.  You will most likely notice:

• Slow performance.  Malware Defender 2009 stays in your virtual memory and redirects your resources in order to run itself.  It is not unusual for programs like these to use as much as eighty percent of your CPU power, leaving very little for your legitimate programs. 
• Hijacked homepage.  When Malware Defender 2009 is installed in your computer, it is able to modify your host file in order to redirect you to its own websites.  You may also notice that you are redirected there when trying to visit other websites.
• New icons or taskbars.  These are installed as another means of persuading you to purchase Malware Defender 2009 or directing you to its site.
• A faux Windows Security Center window on your desktop.  Malware Defender usually comes with another Trojan, C:/Windows/System32/wcenter.exe.  This Trojan generates a clone of the legitimate Windows Security Center.  It uses this opportunity to urge you to buy Malware Defender 2009.
• Pop-ups, pop-ups, pop-ups.  These are likely to be the most visible, and most annoying, sign that Malware Defender 2009 is in your computer.  These appear to be from legitimate antivirus programs, so make sure to inspect every pop-up you get very carefully.

On a typical false scan alert, you will notice Malware Defender 2009 in the upper  indicates that it has scanned your system and has found several infections, as many as twenty or thirty severe threats.  You have the option of deleting all threats with Malware Defender 2009.  The slogan is, "Easiest solution for one-click protection."  Unfortunately, this "one-click protection" is ineffective.

How Did Malware Defender 2009 Become Installed?

Rogue antivirus programs are deliberately designed to convince users to buy their product.  To do this, they use programs that resemble legitimate software very closely and ads that feature strong words and warnings. It is understandable that many users opt to purchase the full version.  But this only one way that Malware Defender 2009 can gain access, and it does not necessarily need your consent.

The most common way for Malware Defender 2009 to gain access is through the trojan Vundo, also known as MS Juan.  How does Vundo gain access?  When you visit "questionable" sites, which can include those with adult, gaming, or warez content, as well as those with free or shareware, it is possible to unknowingly pick up a trojan such as Vundo.  Once the trojan has entered your system, it installs malware, such as Malware Defender 2009.

Removing Malware Defender 2009

If you notice signs that Malware Defender 2009 has been downloaded into your system, it is important to remove it immediately.  If left in long-term, it may install additional trojans or rootkits, which can cause further security issues.  Running your antivirus scan or simply deleting Malware Defender, though, may not be enough to completely remove it from your system because they are designed to evade these basic tactics.  This leaves you with two options:  automatic and manual removal.  Which is right for you?

If you have limited technical experience or expertise with the system registry, automatic removal is recommended.  It is easy, fast, and effective when you use reputable programs like ParetoLogic's XoftSpySE .  You can be assured that not only is every file and registry key removed, it is done safely and without harm to your computer.  Download and follow the directions, and you can be sure that your computer will maintain its optimal functioning.

If you do have experience with the inner workings of a computer, and have a great deal of patience, then you may opt for manual removal.  There is some risk in this as you could miss one or two files or accidentally remove a necessary one.  If you're up to the challenge, the following will remove Malware Defender 2009:

Stop Malware Defender 2009 Processes:

malwaredef.exe

install.exe

Disable DLL Files:

hdddriver.dll

vifwnhzqoe.dll

wcenter.exe

Remove Registry Entries:

HKEY_CLASSES_ROOTCLSID{3F0691F1-70E6-44A9-938A-1DC356674878}

HKEY_CLASSES_ROOTCLSID{8B2C743A-D44A-4A93-8233-ABEE8BF8ED62}

HKEY_LOCAL_MACHINESOFTWAREMalware Defender 2009

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallMalware Defender 2009

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "updater"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "malwaredef"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad "DriversLoad"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad "HardwareDrivers"

Remove Files:

c:Program FilesMalware Defender 2009

c:Program FilesMalware Defender 2009conf.cfg

c:Program FilesMalware Defender 2009malwaredef.exe

c:Program FilesMalware Defender 2009mbase.vdb

c:Program FilesMalware Defender 2009quarantine.vdb

c:Program FilesMalware Defender 2009queue.vdb

c:Program FilesMalware Defender 2009uninstall.exe

c:Program FilesMalware Defender 2009vbase.vdb

c:Program FilesMalware Defender 2009quarantine

c:WINDOWSreged.exe

c:WINDOWSspoolsystem.exe

c:WINDOWSsys.com

c:WINDOWSsyscert.exe

c:WINDOWSsysexplorer.exe

c:WINDOWSvmreg.dll

c:WINDOWSsystem32wcenter.exe

c:Documents and SettingsAll UsersApplication DataMicrosoftMedia IndexDrivers

c:Documents and SettingsAll UsersApplication DataMicrosoftwin.exe

c:Documents and SettingsAll UsersApplication DataMicrosoftMedia Indexsvchos.exe

c:Documents and SettingsAll UsersApplication DataMicrosoftMedia Indext.id

c:Documents and SettingsAll UsersApplication DataMicrosoftMedia IndexDriversc.cgm

c:Documents and SettingsAll UsersApplication DataMicrosoftMedia IndexDrivershdddriver.dll

c:Documents and SettingsAll UsersApplication DataMicrosoftMedia IndexDriversvifwnhzqoe.dll

c:Documents and SettingsAll UsersApplication DataMicrosoftNetworkinstall.exe

%UserProfile%Start MenuProgramsMalware Defender 2009

C:WindowsSystem32wcenter.exe

 to top