Remove Defense Center
Defense Center is a fake antispyware program from the same family of rogue programs as Protection Center. Like other rogue programs it is installed on your computer without your knowledge through the help of Trojan viruses. How Defense Center works is that once installed it runs automatically upon your computer starting up. While you are using your computer you will see a series of annoying pops, including fake scan results that say your computer has been infected with a virus. The point of the warnings is to get you to purchase a full license of Defense Center to remove the fake infections. The only infection your computer has is Defense Center.
Automatic Defense Center removal:
Defense Center Remover
Warning! If the automatic remover is blocked by the spyware, then boot into Windows Safe Mode and try again. Learn how to boot into Safe Mode here.
Manual Defense Center removal:
Kill processes: defcnt.exe, mswinsck.exe, uninstall.exe, wscsvc32.exe
(Learn how to kill processes)
Unregister DLLs:
C:\Program Files\Defense Center\defext.dll
C:\Program Files\Defense Center\defhook.dll
(Learn how to unregister DLLs)
Delete registry keys:
HKEY_USERS\S-1-5-21-861567501-152049171-1708537768-1003_Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CLASSES_ROOT\secfile
HKEY_LOCAL_MACHINE\SOFTWARE\Defense Center
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Defense Center
HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Defense Center"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "DisableTaskMgr" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5E2121EE-0300-11D4-8D3B-444553540000}"
(Learn how to delete registry keys)
Delete files:
C:\Documents and Settings\All Users\Favorites\_favdata.dat
C:\Program Files\Defense Center\about.ico
C:\Program Files\Defense Center\activate.ico
C:\Program Files\Defense Center\buy.ico
C:\Program Files\Defense Center\def.db
C:\Program Files\Defense Center\defcnt.exe
C:\Program Files\Defense Center\defext.dll
C:\Program Files\Defense Center\defhook.dll
C:\Program Files\Defense Center\help.ico
C:\Program Files\Defense Center\scan.ico
C:\Program Files\Defense Center\settings.ico
C:\Program Files\Defense Center\splash.mp3
C:\Program Files\Defense Center\uninstall.exe
C:\Program Files\Defense Center\update.ico
C:\Program Files\Defense Center\virus.mp3
%UserProfile%\Desktop\Defense Center Support.lnk
%UserProfile%\Desktop\Defense Center.lnk
%UserProfile%\Desktop\nudetube.com.lnk
%UserProfile%\Desktop\pornotube.com.lnk
%UserProfile%\Desktop\spam001.exe
%UserProfile%\Desktop\spam003.exe
%UserProfile%\Desktop\troj000.exe
%UserProfile%\Desktop\youporn.com.lnk
%UserProfile%\Start Menu\Programs\Defense Center\About.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Activate.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Buy.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Defense Center Support.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Defense Center.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Scan.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Settings.lnk
%UserProfile%\Start Menu\Programs\Defense Center\Update.lnk
%Temp%\mswinsck.exe
%Temp%\wscsvc32.exe
(Learn how to delete files)
Delete folders:
C:\Program Files\Defense Center
%UserProfile%\Start Menu\Programs\Defense Center
Once you have removed Defense Center from your computer using either the automatic or manual method, make sure to block it and other malicious software using a HOSTS file. Please note that with the automatic method, your computer should be protected from future spyware threats since you now have a spyware blocker program installed. We recommend downloading the HOSTS file from here, which contains a complete, up-to-date list of malicious websites especially if you used the manual method.
If this article has helped you, please take this time to share it with Digg using the Digg button (see Digg share button to the left) or retweet it using Twitter (see retweet button to the left). You may also want to follow us on Twitter to keep up-to-date with the latest spyware prevention tips and spyware threats. If you'd rather follow us from your Facebook account, please join our Facebook fan page.
Follow Us!