Home Malware Programs Rogue Anti-Spyware Programs Fake Windows Defender

Fake Windows Defender

Posted: July 21, 2011

The rogue anti-virus program that calls itself Windows Defender (not to be confused with the Microsoft anti-spyware product Windows Defender) is a fake AV application that creates false positives instead of trying to detect real infections. SpywareRemove.com malware analysts have found that the Fake Windows Defender uses the same interface and basic harmful behavior that's also in use by other recent rogue security programs, including Alfa Defender Pro and Bogema Security. Since rogue anti-virus programs like Fake Windows Defender are strongly linked to credit card-based theft, browser hijacks and security software malfunctions, you should do everything within your power to delete Windows Defender with a genuine PC security product.

How to Pick the Fraudulent Fake Windows Defender Out of a Lineup

Even though Fake Windows Defender uses the same name as a default anti-spyware program that's included in many versions of Windows, figuring out whether you have the real Windows Defender or the rogue anti-virus Fake Windows Defender is a relatively easy job. SpywareRemove.com research team recommends watching out for the following telltale signs of the rogue anti-virus Windows Defender:

  • Are you using a version of Windows prior to Vista or Windows 7? The fake Windows Defender is capable of infecting most versions of Windows, but the real Windows Defender product is only included by default in Vista and Windows 7. You may also download the Microsoft Windows Defender for XP and Windows Server 2003, but this download is voluntary and deliberate in all cases. By contrast, Windows Defender will try to install itself without your consent or as part of a fake online scan from a non-Microsoft source.
  • Although the real Windows Defender focuses on preventing pop-ups and spyware infections, the scamware Windows Defender will create fake alerts about a wide range of nonexistent infections, including viruses. These alerts may also indicate that critical programs, such as Task Manager, are infected, and the fake Windows Defender may block these programs. Attempting to use the rogue anti-virus Windows Defender's scanner function will result in similar false positives. You can see an example of a fake WIndows Defender warning below:

    "Windows Defender Firewall Alert! – Scanning of your system is currently on, please waiting until the end. Your system affected by numerous virus attacks, Windows Defender Firewall Alert recommends you to install proper software to protect your computer?"

  • The fake Windows Defender also uses a completely different interface, one that's copied from other rogue anti-virus products that SpywareRemove.com PC threat analysts have seen recently. Identical-looking rogue anti-virus applications include Clean Security, Antivirus Edition, Eclipse Antivirus, Alfa Defender Pro and Ultimate Guard, to name just a few examples.
  • Finally, the real Windows Defender will never ask for money and is always provided free of charge by Microsoft. By contrast, rogue anti-virus Windows Defender infections will request for money or request that you visit a website which will prompt you to purchase a premium version of Windows Defender. Even this website is similar to other websites that are run by the same criminals, such as personal-guard.com, eclipseantivirus.com, defenderunlimited.com, ultimate-guard.com and windowsdef.com.

Rejecting this Phony Defender and Avoiding Fake Windows Defender-Related Attacks

The probability of Windows Registry contamination and other advanced attacks makes using an anti-virus program to remove fake Windows Defender infections the preferential solution. In addition to fake infection warnings and program blockades, you may also experience browser hijacks that redirect you to Windows Defender's website, windowsdef.com.

Aside from the direct damage that Fake Windows Defender can cause, the foremost issue with any Windows Defender is to protect your credit card and related finances. If you've been charged for Windows Defender, talk to your credit company about disputing the charge and canceling your card to prevent any more abuses.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Fake Windows Defender may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.