Home Spyware Removal IEDefender Removal Instructions

IEDefender Removal Instructions

Posted: October 31, 2007

IEDefender is considered to be a rogue spyware removal program that uses deceptive and aggressive advertising tactics. IEDefender application is distributed and installed by IEDefender’s creators and their marketing affiliates. They propagate the program through a download that is bundled with a Trojan program generated by BHO (Browser Helper Object). Usually such Trojan bundled downloads are located in the web pages offering a “video codec” to view free adult entertainment videos.

Once the Trojan bundled download is executed on your PC, it will generate an irritating popup alert: “NOTICE: Your system is infected and your computer performance is not at the highest level. Full system optimization will greatly increase your computer’s performance and prevent data loss”. We recommend to ignore this fake error message because if you click on it will redirect you to IEDefender's home site where they will trick you into purchasing the full version of the rogue program.

The Trojan is able to hijack your search engines, such as Yahoo, Google or MSN, and display a fake warning notification within your search results stating that your PC is infected with various dangerous parasites. Once you click on this message, you will be directed to IEDefender's home page where you will be forced to buy the commercial version of IEDefender rogue anti-spyware application. We recommend to ignore these error messages or, if you are already infected with IEDefender, to remove it as soon as possible.

I have IE Defender, what do I do?

You have many options for detecting and removing IE Defender. The most extreme is reformatting your PC, possibly costing you all of your data and definitely costing hour of time wasted on reloading your PC to its original form. Reformatting your computer should be your last resort. If you’re having problems finding IE Defender, try using a preferred spyware scanner to quickly detect IE Defender first. If you don’t have a spyware scanner, you can always try the instructional methods provided below.

  • Start a full system scan to detect IE Defender & other parasites.
  • SpyHunter will automatically search for IE Defender files.

Please note that SpyHunter’s free scanner is only for detection purposes. If SpyHunter’s scanner finds IE Defender on your PC, you can buy SpyHunter’s full version to remove IE Defender and other spyware.

Symptom #1: A questionable red or green icon appears in your system tray next to the system clock, representing a newly installed program which you do not recall ever downloading.

Symptom #2: Your browser is hijacked and whenever you use a search engine your search results will display a fake error message. This fake error message is an attempt to lure you into downloading IEDefender program by stating that your computer is infected and that you should download ant-spyware program IEDefender to remove the alleged infection. The false system alert may read:

“NOTICE: Your system is infected and your computer performance is not at the highest level. Full system optimization will greatly increase your computer’s performance and prevent data loss”.

A screenshot of IEDefender is provided below.

IEDefender Screenshot

IE Defender Manual Detection

If you’ve discovered that IE Defender has infected your PC, you must act quickly and take the proper steps to eliminating the infection. Note: The manual removal of any parasite is difficult. To avoid the unnecessary risk of damaging your computer, we advise you to download SpyHunter’s spyware scanner tool to automatically detect IE Defender.

To manually remove IE Defender, follow these removal steps:

Step #1: Remove IE Defender with Windows Add/Remove Programs utility.

Sometimes all it takes to get rid of spyware like IE Defender is to remove the program using the Add/Remove Programs control panel in Windows.

  1. In Windows XP Professional, click on Start > Control Panel > Add/Remove Programs
  2. In Windows 2000 Professional / Windows ME / Windows 98, click on Start > Settings > Control Panel > Add/Remove Programs.
  3. In the list of programs, search for the software you want to remove. If you see a program you don’t recognize or don’t recall installing, look it up in Google to learn what it is.
  4. Select the questionable program and remove it with the Remove button.

Step #2: Kill IE Defender using the Windows Task Manager

To kill a IE Defender process that has infected your computer, you will need to use the Windows Task Manager to check by process, highlight the process in question, and then end the task. To do this:

  1. Press CTRL+ALT+DEL or CTRL+SHIFT+ESC on the keyboard.
  2. Click on Processes Tab to see all active tasks. For easier detection, left click the process under the heading Image Name.
  3. Find and kill the following IE Defender process:
    G66-tmp_.exe
    defender-install[1].exe
    videomp3_setup_3912958[2].exe
    install_video_3912981[1].exe
    install_video_3912990[1].exe
    ieDefender-setup[1].exe
    ieDefender-setup[2].exe
    iedefender.exe
    ieDefender[1].exe
  4. Once you’ve identified the IE Defender process, press DEL on your keyboard or click End Process to kill it from your system.

Step #3: Use PsKill to Kill a Process

Sometimes a parasite can disable your Windows Task Manager so you can use pslist and pskill (a third party application by Mark Russinovich) to list and kill the unwanted processes.

  1. Download PsKill or PsList.
  2. Extract the program from the .Zip archive.
  3. Move pskill.exe to your C: drive.
  4. Open a command window and click Start > Run.
  5. Type cmd and click the OK button.
  6. In the command window, type C:pskill.exe and the name of the process you wish to kill, then press Enter. For example, if you wanted to kill the process for IE Defender, you would type: C:pskill.exe IE Defender.exe.
    If the file was successfully removed, PsKill will say “process IE Defender.exe killed”.
  7. Find and Remove these IE Defender files:
    G66-tmp_.exe
    geebb.dll
    fccaxxu.dll
    awtqnlk.dll
    toprates.dll
    sysvideo32.dll
    windivx.dll
    stream32a.dll
    tuvttrr.dll
    ddccd.dll
    mlljh.dll
    tdlRMS.dll
    advpac.dll
    ddcdedd.dll
    gebca.dll
    prosearchsite.dll
    ddccawv.dll
    wvuus.dll
    blopenvtlv.dll
    werbetpql.dll
    werbetxdp.dll
    blopenvtok.dll
    fcccdbc.dll
    awtqqpq.dll
    defender-install[1].exe
    videomp3_setup_3912958[2].exe
    esent9.dll
    blopenvxdt.dll
    ttvbontvm.dll
    ttvbonvgl.dll
    popnetnpr.dll
    msvideo.dll
    install_video_3912981[1].exe
    install_video_3912990[1].exe
    mscfg32.dll
    rqrrrrp.dll
    dmqhahxp.dll
    gdpbvwyr.dll
    ssqpp.dll
    mljji.dll
    fkxlgaeu.dll
    version69ie7fix.dll
    vmopgitk.dll
    bidisplv.dll
    crypt32d.dll
    wvurqpp.dll
    isfmdl.dll
    vturp.dll
    cbxwwvu.dll
    gebcc.dll
    ttvbonsmf.dll
    pmnnl.dll
    fccbcyv.dll
    byvsr.dll
    wiecjprp.dll
    nsr18.dll
    nsl2D.dll
    vtutt.dll
    rqrqomn.dll
    ddccy.dll
    ldqzxhsj.dll
    pdnmcqhd.dll
    fcccyxx.dll
    nsz379.dll
    adspipe.dll
    nsaA7.dll
    adssite_sidebar.dll
    gzmrt.dll
    sysdivx.dll
    IE Defender 2.4.lnk
    ieDefender-setup[1].exe
    IR9V0_QCX.dll
    VideoMP3.dll-REMOVED
    mwgvsu.dll
    XunLeiBHO_Now.dll
    a3gpcodec.dll
    IntelVideo.dll
    VideoMP3.dll
    IE Defender 2.3.lnk
    ieDefender-setup[2].exe
    ASKPBAR.DLL
    dx50codec.dll
    mp3avi.dll
    IE Defender 2.2.lnk
    iedefender.exe
    ArrayieDefender[1].exe
    %SYSTEMROOT%\system32\advpac.dll
    geebb.dll
    fccaxxu.dll
    awtqnlk.dll
    toprates.dll
    sysvideo32.dll
    windivx.dll
    stream32a.dll
    tuvttrr.dll
    ddccd.dll
    mlljh.dll
    tdlRMS.dll
    advpac.dll
    ddcdedd.dll
    gebca.dll
    prosearchsite.dll
    ddccawv.dll
    wvuus.dll
    blopenvtlv.dll
    werbetpql.dll
    werbetxdp.dll
    blopenvtok.dll
    fcccdbc.dll
    awtqqpq.dll
    esent9.dll
    blopenvxdt.dll
    ttvbontvm.dll
    ttvbonvgl.dll
    popnetnpr.dll
    msvideo.dll
    mscfg32.dll
    rqrrrrp.dll
    dmqhahxp.dll
    gdpbvwyr.dll
    ssqpp.dll
    mljji.dll
    fkxlgaeu.dll
    version69ie7fix.dll
    vmopgitk.dll
    bidisplv.dll
    crypt32d.dll
    wvurqpp.dll
    isfmdl.dll
    vturp.dll
    cbxwwvu.dll
    gebcc.dll
    ttvbonsmf.dll
    pmnnl.dll
    fccbcyv.dll
    byvsr.dll
    wiecjprp.dll
    nsr18.dll
    nsl2D.dll
    vtutt.dll
    rqrqomn.dll
    ddccy.dll
    ldqzxhsj.dll
    pdnmcqhd.dll
    fcccyxx.dll
    nsz379.dll
    adspipe.dll
    nsaA7.dll
    adssite_sidebar.dll
    gzmrt.dll
    sysdivx.dll
    IR9V0_QCX.dll
    mwgvsu.dll
    XunLeiBHO_Now.dll
    a3gpcodec.dll
    IntelVideo.dll
    VideoMP3.dll
    ASKPBAR.DLL
    dx50codec.dll
    Arraymp3avi.dll

2 Comments

  • Kenny says:

    Hi -

    Great removal instructions. I only have one problem. I can't remove the file advpac.dll I am getting access is denied messages. It is the same in safe mode as well. I can't rename or even add/remove attributes to the file. I simply can't do anything to it. Do you know how to remove a file that is behaving in this manner?

    Thank you.

  • ghostrider01 says:

    Kenny,

    You may find your solution here http://www.spywareremove.com/removeadvpacdll.html

Loading...