Advertisement - Your Ad Here!

IEDefender (or IE Defender) Removal Process

November 6, 2007 – 7:16 pm
Advertisement - Your Ad Here!

IEDefender Explanation

IE Defender (or IEDefender) is a rogue anti-spyware program, which is a form of fake malicious software engineered by Internet hackers.

IE Defender is an browser plug-in or browser object that installed within your Internet Explorer browser without your permission, and then hijacks your IE browser to execute malicious code and display false alerts. You will consistently get prompted with pop-ups windows that give you misleading alarms and information. The purpose of these pop-up alerts is to make PC users to purchase IE Defender.

Do NOT purchase IE Defender under any circumstances since it is a fake anti-spyware software.

Are you getting popups from IEDefender? Have you identified that you have IEDefender installed on your computer? Do you wish to remove IEDefender completely from your computer?

Why should you remove IEDefender?

If IEDefender resides on your computer, it can potentially damage your personal files or you may end up losing data stored on your system. Research has shown that IEDefender may have the ability to make your computer vulnerable to remote attacks which could result, initially, in loss of money, possibly identity theft, and, eventually, a painstaking IEDefender removal process.

How can you manually remove IEDefender

Manual removal of IEDefender may not be for everyone. Each manual IEDefender removal step must be followed delicately to completely remove all related files and registry entries from your computer. If you are unsure or have doubts about editing your system registry, then we recommend that you use the automatic IEDefender removal process.

IEDefender can be removed manually by following the steps below.

  1. With all programs closed, click the Start Menu and go to the Control Panel.
  2. Locate the Add/Remove Programs icon and double click it.
  3. Locate IEDefender in the list of programs. If you find it, select it and remove it. If you cannot find IEDefender, you can continue to step 5.
  4. Restart your computer.
  5. Close all open programs and windows on your desktop.
  6. Open your registry editor (regedit) program by going to Start Menu, type in regedit, and click OK.
  7. Find all of the following registry entries and delete them. If you do not know how to do this, then you can read how to edit the registry in Windows.

    MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\awtqnlk
    HKEY_CLASSES_ROOT\toprates.Video
    HKEY_CLASSES_ROOT\CLSID\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
    F94E2B67-3D7A-4F94-AF35-5BBEDAAD3AC4
    AppID\sysdivx.dll
    FEC3BE4F-E5AB-4B3F-9813-5326FA073155
    0459F04A-F7CC-4F98-B66E-E19690702AE4
    14A6B963-7C6C-414B-B5BD-9CD0929F928F
    02788C74-8A3E-455D-9820-59784297DF96
    64c35692-1dd2-11b2-90fc-e8593d14a627
    a3a55b97-bdf9-4f05-a0aa-279ddf006514
    6265c870-869a-46f2-a2dd-4a7258d9a0bc
    B28A8965-62F9-620E-DA5C-4DE6708E0991
    2AE4005E-689F-4FB9-8C3D-D2B8B58AC072
    FB3384D2-9394-45AF-ACE1-8EB45AC61FED
    F7CDF7FE-98B1-43FE-A694-E52E605AA60D
    43f3b284-1b6a-4516-b0e7-8db38ffc5288
    9C8A568E-4201-478a-8536-526CF371D2E2
    632F6863-1E54-49FC-A72F-BDEE592EAD52
    80590BC5-F4BA-4AD1-B216-C19EE86E2A77
    A19926CE-CA09-9EAE-7806-B9891B5461C8
    A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
    202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
    15EB9F40-D775-4463-B75B-8687B3C66BB7
    17D562A6-DA3D-4F87-B659-86CD06473AB5
    cd6a6f8d-6f11-4022-afbd-3f47f293b9e3
    6F4F1A56-48E8-4149-9562-1ACAE6705B70
    8774d22a-6bcb-4cb5-aca3-f85f39b1fc49
    0493A8B0-1F7B-4771-90C3-474A54715499
    3401DB32-7F00-4EC7-A890-A75F64973843
    C0530C77-FFF1-4701-BD4B-B62471213C77
    b5adafea-ec5c-4cfe-984f-b9d6c1339635
    24690191-8659-4A38-A157-6CB338F785D9
    275296E0-75EC-4380-BB5F-900636889A8D
    1648E328-3E5A-4EA5-A9C6-E5F09EE272DA
    4E54D728-1FA3-4125-B468-C8B43C123E65
    AppID\6FFE49B7-F475-4EAB-8E80-E5D74C4E8D5F
    F02B8C83-C817-4EA2-A499-29257DA0373A
    5DE176A4-B5FF-4D50-B084-E047526B8E97
    0EEDB911-C5FA-486F-8334-57288578C627
    2B659BB5-3E85-4BC6-BAFC-98FEDFF3AE99
    8388594E-D5C0-4933-A977-867D32D8FF19
    F4D76F01-7896-458a-890F-E1F05C46069F
    IEDefender
    0B686DCA-F3F7-4829-8EB4-B453EEEA7B05
    0FB618BD-0695-46C0-8EE4-472BEBA1D429
    HKEY_CLASSES_ROOT\Interface\{48D78BE5-CFB9-4B66-9AC4-96D4CF21DE06}
    HKEY_CLASSES_ROOT\AppID\toprates.dll
    sysdivx.Video
    E4A441DE-E415-4C43-A466-4993093FF411
    AppID\E780E148-0BAC-4654-81A4-8A649F4D4A90
    38329D14-1302-4CA7-BEE4-C954516C43B3
    6430CCA7-032A-4EB0-BCFF-838998E73EF5
    6dd7d9ec-1dd2-11b2-9199-c3a2ea003916
    605be7be-1dd2-11b2-9677-a5427ab0e805
    913B63E8-513D-4172-AC66-56219CB6E94F
    8c28c596-57e5-4b8d-bccd-f2389b4c96a7
    CEADB2EC-7AEA-4374-A769-5A78817A6107
    8FB4CA7F-837B-42EE-BEA6-4567FD1ED3C2
    29B1EDC5-5BF3-468F-B8E5-6B27090CEF0A
    F08487B1-AFEC-45CF-B2E9-D05DEE137D22
    B285004D-6D02-4212-91FC-B8F47B68C254
    762f6938-9fd1-40bf-8d4d-94ba1327765b
    F5E81149-92B2-47D2-A12B-1B966AB46EA7
    DA927154-CC3A-41A7-9246-CE35FE2E6477
    F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
    c4545fc9-26d0-4ccf-b4fb-728aed895dbd
    31E3F653-ED88-4355-B83E-FB263CD355E3
    E780E148-0BAC-4654-81A4-8A649F4D4A90
    c221c214-d188-48aa-a5fc-596227937e70
    B6F8D996-F682-468B-8DC2-E4216445645B
    5d577280-ecad-49b1-93a7-dc342d8c6e57
    7EFEBF39-AEF9-4F9D-86F6-E3824FF84FE2
    FF64059D-4D2A-4D6B-AA0F-2EE4A2FE3856
    10DF1424-D96F-4576-8377-E0FB4451CD25
    E2278F85-4584-4BEE-928C-600B38C385C1
    FBD52A1D-E303-48F3-B7F8-F82A7D6A4124
    0EDFF8B7-208E-4491-8A56-C77D8E0B650E
    BCBCEE7B-2001-4971-B991-EB6E81C96CC5
    10F3E8BD-257A-4702-A2F5-DC02055B068C
    64130BE8-2B67-4A65-9CA5-1CC6948C1471
    7A23A1E8-B2AB-4C50-AD12-9E19B747E17C
    09D72564-27E2-4F12-8AB6-03F83E4567DE
    6FFE49B7-F475-4EAB-8E80-E5D74C4E8D5F
    5D67E2E7-0C2B-4491-87C4-37F2AC6033D2
    EAEDDCA3-3989-4FF4-A773-3AC188C70A16
    AppID\mp3avi.dll
    87B570FB-D2CF-4D3C-8E1B-E1E7018BBA95
    MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\fccaxxu
    HKEY_CLASSES_ROOT\TypeLib\{74D46BBA-5638-473A-83B6-97E7804A7411}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
    HKEY_CLASSES_ROOT\AppID\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
    609F107D-88EE-4D19-B56F-6C21A3E9DC1F
    mscfg32.Video
    MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\rqrrrrp
    D0995F82-90C7-4C78-9B4C-C1700FB8B120
    15FEB658-AACC-412E-BC13-D54CFD74A8F6
    8E3FBDE2-7DBD-4040-85D9-29BBC559C129
    d31ec424-1dd1-11b2-9223-dc336077be0e
    8A8FDB69-C6CF-440D-AD12-4084A77093CF
    81645B0C-FAAB-486C-965B-BAF2C7834B1D
    5E3B65A2-8F4B-4D6F-B14C-00FE82596AC6
    BBB05D9E-0297-404D-A6BF-D8F2876B84A6
    A716011B-4637-44D0-922B-F1E88CC7CC73
    b594aa84-1dd1-11b2-af8a-d10b02977db1
    8d829ad9-2dd1-4db2-8c45-b812c72bea01
    0F596190-DEC2-4D19-AB43-50B54243923F
    4AB15165-917A-4AE4-AE42-7FF13F61805B
    2FA3B736-1AC7-454D-8E94-8BA8158BF064
    43BA0532-0D69-458A-8C71-AD0F6AE70D19
    62EA9201-8CC7-4199-AC30-7744F836322E
    6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
    71314E7C-1713-49FA-90F2-54D275023981
    76aab9f4-9bc8-4cd0-adf5-0b2eda08ecc3
    9FAF7E8D-6E47-41B0-8EBE-E59ED63843AB
    1BAF960A-2844-4895-B4AF-EF0725609B17
    D54F0577-8770-4A63-B926-6A640ED57F06
    DABA9520-AC17-4BA5-BBD4-470F16CF3357
    0B241FD4-1EA1-4238-B505-07A484C49D1A
    4D6F67DF-65CA-4FFE-A7BD-3A45747525B7
    3A2224A0-B114-4491-9305-FD0E4B55FA1E
    49366a27-91dc-4bdd-895d-f611a64d67cc
    5CB10D4A-0C14-4546-865D-935ECBFFA346
    VideoMP3.MP3
    AppID\VideoMP3.dll
    E4DF0054-13B7-4A75-967E-1CC787C69FAA
    48BF2BC0-2945-11D8-8CAC-00080FC65465
    C7AFF24C-3480-627F-DA5D-3CE605870A92
    04F7FAC5-F506-4F29-9094-9CB9144B192C
    mp3avi.MP3
    9A1EF21C-B0D4-4EB0-894F-CBAE2F4D0A82
    D4FD35A3-101C-4FAA-A9CA-E8C9461C3CEF

  8. You may need to return to this removal process for removing IEDefender. You can do this easily by bookmarking or adding a favorite to this page by clicking here. If you are using the FireFox web browser you can press the keys Ctrl and D simultaneously to bookmark this page.

    Image 1. Bookmark PCHubs removal process

    bookmark-add-favorite

  9. Delete all of the following files that are associated with IEDefender from your computer.

    fccaxxu.dll
    sysvideo32.dll
    tuvttrr.dll
    tdlRMS.dll
    gebca.dll
    wvuus.dll
    werbetxdp.dll
    awtqqpq.dll
    esent9.dll
    ttvbonvgl.dll
    install_video_3912981[1].exe
    rqrrrrp.dll
    ssqpp.dll
    version69ie7fix.dll
    crypt32d.dll
    vturp.dll
    ttvbonsmf.dll
    byvsr.dll
    nsl2D.dll
    ddccy.dll
    fcccyxx.dll
    nsaA7.dll
    sysdivx.dll
    IR9V0_QCX.dll
    XunLeiBHO_Now.dll
    VideoMP3.dll
    ASKPBAR.DLL
    IE Defender 2.2.lnk
    G66-tmp_.exe
    awtqnlk.dll
    windivx.dll
    ddccd.dll
    advpac.dll
    prosearchsite.dll
    blopenvtlv.dll
    blopenvtok.dll
    defender-install[1].exe
    blopenvxdt.dll
    popnetnpr.dll
    install_video_3912990[1].exe
    dmqhahxp.dll
    mljji.dll
    vmopgitk.dll
    wvurqpp.dll
    cbxwwvu.dll
    pmnnl.dll
    wiecjprp.dll
    vtutt.dll
    ldqzxhsj.dll
    nsz379.dll
    adssite_sidebar.dll
    IE Defender 2.4.lnk
    VideoMP3.dll-REMOVED
    a3gpcodec.dll
    IE Defender 2.3.lnk
    dx50codec.dll
    iedefender.exe
    geebb.dll
    toprates.dll
    stream32a.dll
    mlljh.dll
    ddcdedd.dll
    ddccawv.dll
    werbetpql.dll
    fcccdbc.dll
    videomp3_setup_3912958[2].exe
    ttvbontvm.dll
    msvideo.dll
    mscfg32.dll
    gdpbvwyr.dll
    fkxlgaeu.dll
    bidisplv.dll
    isfmdl.dll
    gebcc.dll
    fccbcyv.dll
    nsr18.dll
    rqrqomn.dll
    pdnmcqhd.dll
    adspipe.dll
    gzmrt.dll
    ieDefender-setup[1].exe
    mwgvsu.dll
    IntelVideo.dll
    ieDefender-setup[2].exe
    mp3avi.dll
    ieDefender[1].exe

    If you need a better understanding on how to search for these files then you can read how to find and search for files and folders here.

    If you have issues deleting any of the previously listed files that are associated with IEDefender, you can try rebooting your computer into safe mode. Booting into safe mode may allow certain malicious files to be deleted. If you are wondering how to boot into safe mode, you can read our process for starting a computer in safe mode here.

    Image 2. Select “Safe Mode with Networking”

    safe-mode

  10. After locating and deleting the previous files you must remove all directories associated with IEDefender by going to the C:\ProgramFiles\IEDefender folder, select it, and delete it. In some cases you may not be able to find this directory. You can still continue to the next step.

  11. Restart your computer. You do not need to boot into safe mode at this point. You should have removed IEDefender completely from your computer. If you find that IEDefender is still on your computer, you can repeat the steps again or go to the automatic IEDefender removal process.

Automatically Remove IEDefender

Automatically remove IEDefender for free. Free automatic IEDefender removal process.

Do you wish to automatically remove IEDefender from your computer? Are you looking for a free method to remove IEDefender from your computer? If so, you can utilize the free automatic IEDefender removal process below. Each step is designed to aid in the use of the program SmitfraudFix, which is a free tool created by S!Ri to remove parasites such as IEDefender. Just so you know there’s no guarantee that SmitfraudFix or any other spyware remover will remove IEDefender completely. These instructions are provided as a guide and are to be used at your own risk.

  1. Download the SmitfraudFix tool to your computer by using our free download link here. Save the downloaded file to your desktop.

    Image 1. Save SmitfraudFix.exe

    save-SmitfraudFix

  2. Restart your computer into safe mode. Safe mode will allow malicious files that are normally loaded into memory to be easily deleted by the SmitfraudFix program. Do you want to learn how to boot into safe mode? If so, you can follow our process on how to boot into safe mode here.

  3. After booting into safe mode, double-click on the SmitfraudFix.exe icon that should be located on your desktop. Follow the on-screen instructions. Option number 2 should be selected once the program starts.

    Image 2. Click on SmitfraudFix.exe icon

    SmitfraudFix-icon

  4. After SmitfraudFix performs the initial removal processes it will ask you “Do you want to clean the registry?” Select Y for yes.

    Image 3. For “Do you want to clean the registry?,” select Y for yes

    SmitfraudFix-registry-clean-y

  5. Once SmitfraudFix has finished the registry clean you can restart your computer now.
  6. IEDefender should be removed from your computer. If not, you can start the automatic removal process over. It may take more than one try in some rare cases.

There’s no guarantee that SmitfraudFix will remove all files due to the complex nature of new spyware files that are ever-changing. If necessary, you may need to get help from a person who knows about computer and spyware.

(Disclaimers: These instructions are provided to you for free and to be used at your own risk. The free removal process for IEDefender is not guaranteed to work in all circumstances. We are not responsible for any damages.)

  1. 2 Responses to “IEDefender (or IE Defender) Removal Process”

  2. i am looking for information on how to travel cheap in asia and your post has given me some ideas, wish you all the best – CHEERS .

    By asia travel on Dec 18, 2007

  3. I can Not take out IEDEFENDER after 2 days of trying everything. It will not let me load any page that has a removal..Help

    By Melissa on Dec 30, 2007

Post a Comment

*
To prove you're a person (not a spam script), type the security word shown in the picture.
Anti-Spam Image