IEDefender (or IE Defender) Removal Process

November 6, 2007 – 7:16 pm

IEDefender Explanation

IE Defender (or IEDefender) is a rogue anti-spyware program, which is a form of fake malicious software engineered by Internet hackers.

IE Defender is an browser plug-in or browser object that installed within your Internet Explorer browser without your permission, and then hijacks your IE browser to execute malicious code and display false alerts. You will consistently get prompted with pop-ups windows that give you misleading alarms and information. The purpose of these pop-up alerts is to make PC users to purchase IE Defender.

Do NOT purchase IE Defender under any circumstances since it is a fake anti-spyware software.

Are you getting popups from IEDefender? Have you identified that you have IEDefender installed on your computer? Do you wish to remove IEDefender completely from your computer?

Why should you remove IEDefender?

If IEDefender resides on your computer, it can potentially damage your personal files or you may end up losing data stored on your system. Research has shown that IEDefender may have the ability to make your computer vulnerable to remote attacks which could result, initially, in loss of money, possibly identity theft, and, eventually, a painstaking IEDefender removal process.

How can you manually remove IEDefender

Manual removal of IEDefender may not be for everyone. Each manual IEDefender removal step must be followed delicately to completely remove all related files and registry entries from your computer. If you are unsure or have doubts about editing your system registry, then we recommend that you use the automatic IEDefender removal process.

IEDefender can be removed manually by following the steps below.

1. With all programs closed, click the Start Menu and go to the Control Panel.
2. Locate the Add/Remove Programs icon and double click it.
3. Locate IEDefender in the list of programs. If you find it, select it and remove it. If you cannot find IEDefender, you can continue to step 5.
4. Restart your computer.
5. Close all open programs and windows on your desktop.
6. Open your registry editor (regedit) program by going to Start Menu, type in regedit, and click OK.
7. Find all of the following registry entries and delete them. If you do not know how to do this, then you can read how to edit the registry in Windows.

   MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\awtqnlk
   HKEY_CLASSES_ROOT\toprates.Video
   HKEY_CLASSES_ROOT\CLSID\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
   F94E2B67-3D7A-4F94-AF35-5BBEDAAD3AC4
   AppID\sysdivx.dll
   FEC3BE4F-E5AB-4B3F-9813-5326FA073155
   0459F04A-F7CC-4F98-B66E-E19690702AE4
   14A6B963-7C6C-414B-B5BD-9CD0929F928F
   02788C74-8A3E-455D-9820-59784297DF96
   64c35692-1dd2-11b2-90fc-e8593d14a627
   a3a55b97-bdf9-4f05-a0aa-279ddf006514
   6265c870-869a-46f2-a2dd-4a7258d9a0bc
   B28A8965-62F9-620E-DA5C-4DE6708E0991
   2AE4005E-689F-4FB9-8C3D-D2B8B58AC072
   FB3384D2-9394-45AF-ACE1-8EB45AC61FED
   F7CDF7FE-98B1-43FE-A694-E52E605AA60D
   43f3b284-1b6a-4516-b0e7-8db38ffc5288
   9C8A568E-4201-478a-8536-526CF371D2E2
   632F6863-1E54-49FC-A72F-BDEE592EAD52
   80590BC5-F4BA-4AD1-B216-C19EE86E2A77
   A19926CE-CA09-9EAE-7806-B9891B5461C8
   A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
   202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
   15EB9F40-D775-4463-B75B-8687B3C66BB7
   17D562A6-DA3D-4F87-B659-86CD06473AB5
   cd6a6f8d-6f11-4022-afbd-3f47f293b9e3
   6F4F1A56-48E8-4149-9562-1ACAE6705B70
   8774d22a-6bcb-4cb5-aca3-f85f39b1fc49
   0493A8B0-1F7B-4771-90C3-474A54715499
   3401DB32-7F00-4EC7-A890-A75F64973843
   C0530C77-FFF1-4701-BD4B-B62471213C77
   b5adafea-ec5c-4cfe-984f-b9d6c1339635
   24690191-8659-4A38-A157-6CB338F785D9
   275296E0-75EC-4380-BB5F-900636889A8D
   1648E328-3E5A-4EA5-A9C6-E5F09EE272DA
   4E54D728-1FA3-4125-B468-C8B43C123E65
   AppID\6FFE49B7-F475-4EAB-8E80-E5D74C4E8D5F
   F02B8C83-C817-4EA2-A499-29257DA0373A
   5DE176A4-B5FF-4D50-B084-E047526B8E97
   0EEDB911-C5FA-486F-8334-57288578C627
   2B659BB5-3E85-4BC6-BAFC-98FEDFF3AE99
   8388594E-D5C0-4933-A977-867D32D8FF19
   F4D76F01-7896-458a-890F-E1F05C46069F
   IEDefender
   0B686DCA-F3F7-4829-8EB4-B453EEEA7B05
   0FB618BD-0695-46C0-8EE4-472BEBA1D429
   HKEY_CLASSES_ROOT\Interface\{48D78BE5-CFB9-4B66-9AC4-96D4CF21DE06}
   HKEY_CLASSES_ROOT\AppID\toprates.dll
   sysdivx.Video
   E4A441DE-E415-4C43-A466-4993093FF411
   AppID\E780E148-0BAC-4654-81A4-8A649F4D4A90
   38329D14-1302-4CA7-BEE4-C954516C43B3
   6430CCA7-032A-4EB0-BCFF-838998E73EF5
   6dd7d9ec-1dd2-11b2-9199-c3a2ea003916
   605be7be-1dd2-11b2-9677-a5427ab0e805
   913B63E8-513D-4172-AC66-56219CB6E94F
   8c28c596-57e5-4b8d-bccd-f2389b4c96a7
   CEADB2EC-7AEA-4374-A769-5A78817A6107
   8FB4CA7F-837B-42EE-BEA6-4567FD1ED3C2
   29B1EDC5-5BF3-468F-B8E5-6B27090CEF0A
   F08487B1-AFEC-45CF-B2E9-D05DEE137D22
   B285004D-6D02-4212-91FC-B8F47B68C254
   762f6938-9fd1-40bf-8d4d-94ba1327765b
   F5E81149-92B2-47D2-A12B-1B966AB46EA7
   DA927154-CC3A-41A7-9246-CE35FE2E6477
   F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
   c4545fc9-26d0-4ccf-b4fb-728aed895dbd
   31E3F653-ED88-4355-B83E-FB263CD355E3
   E780E148-0BAC-4654-81A4-8A649F4D4A90
   c221c214-d188-48aa-a5fc-596227937e70
   B6F8D996-F682-468B-8DC2-E4216445645B
   5d577280-ecad-49b1-93a7-dc342d8c6e57
   7EFEBF39-AEF9-4F9D-86F6-E3824FF84FE2
   FF64059D-4D2A-4D6B-AA0F-2EE4A2FE3856
   10DF1424-D96F-4576-8377-E0FB4451CD25
   E2278F85-4584-4BEE-928C-600B38C385C1
   FBD52A1D-E303-48F3-B7F8-F82A7D6A4124
   0EDFF8B7-208E-4491-8A56-C77D8E0B650E
   BCBCEE7B-2001-4971-B991-EB6E81C96CC5
   10F3E8BD-257A-4702-A2F5-DC02055B068C
   64130BE8-2B67-4A65-9CA5-1CC6948C1471
   7A23A1E8-B2AB-4C50-AD12-9E19B747E17C
   09D72564-27E2-4F12-8AB6-03F83E4567DE
   6FFE49B7-F475-4EAB-8E80-E5D74C4E8D5F
   5D67E2E7-0C2B-4491-87C4-37F2AC6033D2
   EAEDDCA3-3989-4FF4-A773-3AC188C70A16
   AppID\mp3avi.dll
   87B570FB-D2CF-4D3C-8E1B-E1E7018BBA95
   MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\fccaxxu
   HKEY_CLASSES_ROOT\TypeLib\{74D46BBA-5638-473A-83B6-97E7804A7411}
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
   HKEY_CLASSES_ROOT\AppID\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
   609F107D-88EE-4D19-B56F-6C21A3E9DC1F
   mscfg32.Video
   MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\rqrrrrp
   D0995F82-90C7-4C78-9B4C-C1700FB8B120
   15FEB658-AACC-412E-BC13-D54CFD74A8F6
   8E3FBDE2-7DBD-4040-85D9-29BBC559C129
   d31ec424-1dd1-11b2-9223-dc336077be0e
   8A8FDB69-C6CF-440D-AD12-4084A77093CF
   81645B0C-FAAB-486C-965B-BAF2C7834B1D
   5E3B65A2-8F4B-4D6F-B14C-00FE82596AC6
   BBB05D9E-0297-404D-A6BF-D8F2876B84A6
   A716011B-4637-44D0-922B-F1E88CC7CC73
   b594aa84-1dd1-11b2-af8a-d10b02977db1
   8d829ad9-2dd1-4db2-8c45-b812c72bea01
   0F596190-DEC2-4D19-AB43-50B54243923F
   4AB15165-917A-4AE4-AE42-7FF13F61805B
   2FA3B736-1AC7-454D-8E94-8BA8158BF064
   43BA0532-0D69-458A-8C71-AD0F6AE70D19
   62EA9201-8CC7-4199-AC30-7744F836322E
   6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
   71314E7C-1713-49FA-90F2-54D275023981
   76aab9f4-9bc8-4cd0-adf5-0b2eda08ecc3
   9FAF7E8D-6E47-41B0-8EBE-E59ED63843AB
   1BAF960A-2844-4895-B4AF-EF0725609B17
   D54F0577-8770-4A63-B926-6A640ED57F06
   DABA9520-AC17-4BA5-BBD4-470F16CF3357
   0B241FD4-1EA1-4238-B505-07A484C49D1A
   4D6F67DF-65CA-4FFE-A7BD-3A45747525B7
   3A2224A0-B114-4491-9305-FD0E4B55FA1E
   49366a27-91dc-4bdd-895d-f611a64d67cc
   5CB10D4A-0C14-4546-865D-935ECBFFA346
   VideoMP3.MP3
   AppID\VideoMP3.dll
   E4DF0054-13B7-4A75-967E-1CC787C69FAA
   48BF2BC0-2945-11D8-8CAC-00080FC65465
   C7AFF24C-3480-627F-DA5D-3CE605870A92
   04F7FAC5-F506-4F29-9094-9CB9144B192C
   mp3avi.MP3
   9A1EF21C-B0D4-4EB0-894F-CBAE2F4D0A82
   D4FD35A3-101C-4FAA-A9CA-E8C9461C3CEF

8. You may need to return to this removal process for removing IEDefender. You can do this easily by bookmarking or adding a favorite to this page by clicking here. If you are using the FireFox web browser you can press the keys Ctrl and D simultaneously to bookmark this page.

   Image 1. Bookmark PCHubs removal process

   

9. Delete all of the following files that are associated with IEDefender from your computer.

   fccaxxu.dll
   sysvideo32.dll
   tuvttrr.dll
   tdlRMS.dll
   gebca.dll
   wvuus.dll
   werbetxdp.dll
   awtqqpq.dll
   esent9.dll
   ttvbonvgl.dll
   install_video_3912981[1].exe
   rqrrrrp.dll
   ssqpp.dll
   version69ie7fix.dll
   crypt32d.dll
   vturp.dll
   ttvbonsmf.dll
   byvsr.dll
   nsl2D.dll
   ddccy.dll
   fcccyxx.dll
   nsaA7.dll
   sysdivx.dll
   IR9V0_QCX.dll
   XunLeiBHO_Now.dll
   VideoMP3.dll
   ASKPBAR.DLL
   IE Defender 2.2.lnk
   G66-tmp_.exe
   awtqnlk.dll
   windivx.dll
   ddccd.dll
   advpac.dll
   prosearchsite.dll
   blopenvtlv.dll
   blopenvtok.dll
   defender-install[1].exe
   blopenvxdt.dll
   popnetnpr.dll
   install_video_3912990[1].exe
   dmqhahxp.dll
   mljji.dll
   vmopgitk.dll
   wvurqpp.dll
   cbxwwvu.dll
   pmnnl.dll
   wiecjprp.dll
   vtutt.dll
   ldqzxhsj.dll
   nsz379.dll
   adssite_sidebar.dll
   IE Defender 2.4.lnk
   VideoMP3.dll-REMOVED
   a3gpcodec.dll
   IE Defender 2.3.lnk
   dx50codec.dll
   iedefender.exe
   geebb.dll
   toprates.dll
   stream32a.dll
   mlljh.dll
   ddcdedd.dll
   ddccawv.dll
   werbetpql.dll
   fcccdbc.dll
   videomp3_setup_3912958[2].exe
   ttvbontvm.dll
   msvideo.dll
   mscfg32.dll
   gdpbvwyr.dll
   fkxlgaeu.dll
   bidisplv.dll
   isfmdl.dll
   gebcc.dll
   fccbcyv.dll
   nsr18.dll
   rqrqomn.dll
   pdnmcqhd.dll
   adspipe.dll
   gzmrt.dll
   ieDefender-setup[1].exe
   mwgvsu.dll
   IntelVideo.dll
   ieDefender-setup[2].exe
   mp3avi.dll
   ieDefender[1].exe

   If you need a better understanding on how to search for these files then you can read how to find and search for files and folders here.

   If you have issues deleting any of the previously listed files that are associated with IEDefender, you can try rebooting your computer into safe mode. Booting into safe mode may allow certain malicious files to be deleted. If you are wondering how to boot into safe mode, you can read our process for starting a computer in safe mode here.

   Image 2. Select “Safe Mode with Networking”

   

10. After locating and deleting the previous files you must remove all directories associated with IEDefender by going to the C:\ProgramFiles\IEDefender folder, select it, and delete it. In some cases you may not be able to find this directory. You can still continue to the next step.

11. Restart your computer. You do not need to boot into safe mode at this point. You should have removed IEDefender completely from your computer. If you find that IEDefender is still on your computer, you can repeat the steps again or go to the automatic IEDefender removal process.

Automatically Remove IEDefender

Automatically remove IEDefender for free. Free automatic IEDefender removal process.

Do you wish to automatically remove IEDefender from your computer? Are you looking for a free method to remove IEDefender from your computer? If so, you can utilize the free automatic IEDefender removal process below. Each step is designed to aid in the use of the program SmitfraudFix, which is a free tool created by S!Ri to remove parasites such as IEDefender. Just so you know there’s no guarantee that SmitfraudFix or any other spyware remover will remove IEDefender completely. These instructions are provided as a guide and are to be used at your own risk.

1. Download the SmitfraudFix tool to your computer by using our free download link here. Save the downloaded file to your desktop.

   Image 1. Save SmitfraudFix.exe

   

2. Restart your computer into safe mode. Safe mode will allow malicious files that are normally loaded into memory to be easily deleted by the SmitfraudFix program. Do you want to learn how to boot into safe mode? If so, you can follow our process on how to boot into safe mode here.

3. After booting into safe mode, double-click on the SmitfraudFix.exe icon that should be located on your desktop. Follow the on-screen instructions. Option number 2 should be selected once the program starts.

   Image 2. Click on SmitfraudFix.exe icon

   

4. After SmitfraudFix performs the initial removal processes it will ask you “Do you want to clean the registry?” Select Y for yes.

   Image 3. For “Do you want to clean the registry?,” select Y for yes

   

5. Once SmitfraudFix has finished the registry clean you can restart your computer now.
6. IEDefender should be removed from your computer. If not, you can start the automatic removal process over. It may take more than one try in some rare cases.

There’s no guarantee that SmitfraudFix will remove all files due to the complex nature of new spyware files that are ever-changing. If necessary, you may need to get help from a person who knows about computer and spyware.

(Disclaimers: These instructions are provided to you for free and to be used at your own risk. The free removal process for IEDefender is not guaranteed to work in all circumstances. We are not responsible for any damages.)