Home Malware Programs Rogue Anti-Spyware Programs WinPC Defender

WinPC Defender

Posted: March 16, 2009

Threat Metric

Threat Level: 10/10
Infected PCs: 112
First Seen: July 24, 2009
Last Seen: June 1, 2020
OS(es) Affected: Windows

ScreenshotWinPC Defender is a rogue anti-spyware program. Once executed, WinPC Defender will generate false messages stating that your computer is infected with spyware. The makers of WinPC Defender seek to goad into purchasing their promoted full version of WinPC Defender. WinPC Defender is reported to be a clone of XP Police Antivirus, WinDefender 2009, Total Secure 2009, and IE-Security. WinPC Defender will also display notifications of imaginary security risks in its attempts to get the user to purchase the full version. WinPC Defender may be difficult to remove manually, and may continue to try to recreate itself.

ScreenshotScreenshotScreenshotScreenshotScreenshot

Aliases

Trojan.Win32.Generic!BT [Sunbelt]Mal/FakeAV-AX [Sophos]Trj/CI.A [Panda]a variant of Win32/Kryptik.AEX [NOD32]Trojan:Win32/FakeVimes [Microsoft]W32/Xirtem@MM [McAfee]Heur.Suspicious [Comodo]Trojan.FakeAV.pc [CAT-QuickHeal]Generic14.BZIJ [AVG]W32/FraudLoad.AO [Authentium]TROJ_FAKEAV.ATG [TrendMicro]not-a-virus-FraudTool.Win32.WinPCDefender.c [Sunbelt]Troj/FakeVir-LR [Sophos]Trojan.FakeRean.A.6 [McAfee-GW-Edition]not-a-virus:FraudTool.Win32.WinPCDefender.c [K7AntiVirus]
More aliases (140)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to WinPC Defender may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



WP87ed.exe File name: WP87ed.exe
Size: 2.32 MB (2323968 bytes)
MD5: 6d0e3cde149b8462804d58688899bcee
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
install[1].exe File name: install[1].exe
Size: 358.89 KB (358899 bytes)
MD5: baaf701b542ad2820cac07b2de036e96
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
defender.exe File name: defender.exe
Size: 41.98 KB (41984 bytes)
MD5: 50de9a5eca51916f4656bbc3ae65bae8
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
pcdefender.exe File name: pcdefender.exe
Size: 1.02 MB (1021440 bytes)
MD5: 879497e48c666293fbd516631bee32f3
Detection count: 18
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
pcdef[1].exe File name: pcdef[1].exe
Size: 1.02 MB (1020928 bytes)
MD5: 1a2fa1d6a445b7500baea8d0c905e715
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: April 1, 2020

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathpcdefender.exeWinPC Defender.LNK

6 Comments

  • Chris says:

    omg ty ty ty ty ty ty step two worked its off finly!!!!!!! ty ty ty ty ty ty ty ty ty ty ty ty tyvm!!!!!!!!!!!!!!!!!!!!!!!

  • aaron says:

    can you plz help me winpc defender has infected the abbilty for me too go into local disc and i dont know how can it do that also winpc defender is not letting me open any of my anti virus like malware bytes anti virus i keep clicking on it and it wont open so can you tell me how do i know if winpc defender is deleted cuz when i go on some website for example youtube.com the screen replaced with the winpc billing info can you plz telll me how to fix it

  • Vince says:

    Is there no legal recourse against these clowns? Lost productivity at the least would bankrupt them. Plus, they can be banned from running businesses, etc. There's no way that this garbage is legal.

    Also, is there a free tool that will get this? I downloaded Malbytes or whatever and it jams up in the installation process. I'm pretty sure that WinPCDefender is actually blocking it!

  • John says:

    Thanx for the info.. I cant believe there are companies who would basicly infect your computer to get you to buy there product.. I mean is there any legal way to get them to stop.. Isnt it illegal to invade your privacy or destruction of private property?

    It is just rediculas that I HAD to buy a new antivirus to get rid of this WinPC Defender bull.

  • derickakers says:

    KEEPMY anti-spyware up to date

  • derickakers says:

    KEEP ALL MY UP DATES UPTO DATE ON MY COMPUTER