Home Malware Programs Rogue Anti-Spyware Programs Internet Defender

Internet Defender

Posted: February 23, 2011

Threat Metric

Threat Level: 10/10
Infected PCs: 885
First Seen: February 24, 2011
Last Seen: December 5, 2019
OS(es) Affected: Windows

The Internet Defender infection is just a clone of older known rogue security program like Security Defender and Antimalware Defender. Internet Defender may be distributed by freeware sites, but is more often downloaded by Trojans who will disregard the system user's wishes to accomplish this. Internet Defender will issue worthless warnings and scan results indicating system problems and infections that don't exist, using these as an excuse to redirect you to the rogue product's website. Never give the criminals behind this rogue anti-virus infection any of your information or money, and try to delete Internet Defender immediately if you value the safety of your computer at all.

Not Original, but Fairly Effective

The behavior of Internet Defender is more or less the same as that of other slightly older rogue programs, making Internet Defender a clone that exhibits only superficial differences in the name and visible interface. The first sign of Internet Defender being an unwanted presence instead of useful software comes from its typical installation method, which is through a Trojan infection. The Trojan will usually begin by offering a message similar to this one:

“Antimalware security update for Windows XP (KB961118)”

Afterwards, regardless of the actions of the user, the Trojan will attempt to install Internet Defender. Keeping a level head and immediately rebooting into Safe Mode to run appropriate anti-virus software may prevent the actual Internet Defender infection from ever getting onto your system. If not, then you'll end up dealing with rogue anti-virus infections-related problems.

Ignore Internet Defender's Frantic Red Flags

Internet Defender will usually run a scan whenever you reboot your computer, and may prompt to scan at other times. Scanning results will always turn up multiple unremovable fake infections. After instilling the appropriate amount of fear in the user, Internet Defender then redirects him or her towards its own malicious website. Avoiding interaction with this site is very important, since it can drop other malware on your computer and will abuse any information or money given to it to the highest degree of illegality.

Internet Defender may also spill out convincing-looking error messages from time to time. Extra care should be given towards telling Internet Defender false alerts from real ones, since all of Internet Defender's errors are inaccurate ones only meant to frighten you.

Only by preventing Internet Defender from running and then deleting it wholly from your system can you be freed from the threats Internet Defender produces. Don't wait too long, since Internet Defender may open your computer up to other threats that can make proper anti-malware tactics harder to implement.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\bc6ecdd7-c682-4100-b41d-856ce72e81af_44.avi File name: bc6ecdd7-c682-4100-b41d-856ce72e81af_44.avi
Size: 44.24 KB (44246 bytes)
MD5: cf48061409bcebef01b486b4c5186312
Detection count: 457
Mime Type: unknown/avi
Path: %APPDATA%
Group: Malware file
Last Updated: February 24, 2011
%APPDATA%\2283880F-EF87-4aac-8EBD-C9BCC8494AF5_46.avi File name: 2283880F-EF87-4aac-8EBD-C9BCC8494AF5_46.avi
Size: 79.08 KB (79082 bytes)
MD5: 6dd8358aa173a7fcc7e6a8e3ea446bff
Detection count: 382
Mime Type: unknown/avi
Path: %APPDATA%
Group: Malware file
Last Updated: February 24, 2011
%ALLUSERSPROFILE%\da2d514b-a99c-4053-9665-263275e5cb51_34.avi File name: da2d514b-a99c-4053-9665-263275e5cb51_34.avi
Size: 1.8 MB (1805824 bytes)
MD5: dae4fcaa9092eab9dd1e08b2c4bc808d
Detection count: 21
Mime Type: unknown/avi
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: February 24, 2011

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Startup\[RANDOM CHARACTERS]-[RANDOM CHARACTERS]-[RANDOM CHARACTERS]-[RANDOM CHARACTERS]-[RANDOM CHARACTERS].lnk

Additional Information

The following directories were created:
%ProgramFiles%\Internet Defender

7 Comments

  • Melvin Gibson says:

    I cant even get through your site without this thing kicking me off and blocking my computer or sessions and I have a security back up already in place and dont want another one or need another one

  • ed angulo says:

    this is getting on my nerve ,,,i already have an anti-virus and full protected , this is a rip off company .pls let me know how to get this INTERNET SECURITY OFF MY COMPUTER

  • steven says:

    this thing is so annoying and this website helped but it keeps sending me stupid warnings if any one can help me please do it. i did not pay them any thing but i cant find out how to get rid of it PLEASE HELP.

  • Mohammed Arar says:

    You can get rid of the Internet Defendant virus by restoring your system to a date before the infection took place. DO NOT WORRY. WINDOWS WILL DO THAT FOR YOU AND SOLVE YOUR PROBLEM IN A MATTER OF MINUTES.
    This is how it’s done (in case you don’t know how to restore your computer):
    go to Start > type msconfig > System Configuration > select Tools > select and launch System Restore. Choose a date before the infection took place.
    This will restore your system files to an earlier state without changing your personal files.

  • Laura says:

    I have an antivirus and I'm protected. please let me know how to get this internet security off my computer

  • Gio says:

    I think that the best way is to restore your pc back to a date before the virus. Downloading files that claim to fix the problem or messing with the registers are problematic. Thanks Mohammed!

  • Kirk A. Benson says:

    defender pro will not let me remove it from my computor,i now use mcafee and do not want defender pro on my computor,if they do not let me remove it from my computor i am the administrator,they will have a Law Suit,so they either need to let me REmove Defender pro,or they personaly need to get their shit off of my computor,Sincerely Kirk A.Benson

Loading...