Home Malware Programs Rogue Anti-Spyware Programs PC Defender 360

PC Defender 360

Posted: August 12, 2013

Threat Metric

Threat Level: 10/10
Infected PCs: 28
First Seen: August 12, 2013
Last Seen: April 1, 2020
OS(es) Affected: Windows

PC Defender 360 Screenshot 1PC Defender 360 is a rogue anti-malware scanner that detects fake infections on your computer as a means of encouraging you to purchase its registration key – even though the 'registered' version of PC Defender 360 is just as unable to help your computer as the original version. PC Defender 360 has not been documented to have any self-distributing features, and SpywareRemove.com malware researchers warn that PC Defender 360 infections are likely to coincide with related attacks by other PC threats, such as Trojan downloaders like Zlob, that may harm your computer in additional ways. As scamware, PC Defender 360 doesn't need to be purchased, and reliable anti-malware tools should be considered for removing PC Defender 360 and related malware as soon as possible.

PC Defender 360: A Paper-Thin Defense that's All Looks and No Substance

PC Defender 360 is crafted closely to resemble a legitimate anti-malware product but lacks any features that would allow PC Defender 360 to find or remove malware from your PC. After PC Defender 360 infects your PC, PC Defender 360 will change your Registry to allow itself to launch automatically, and uses this window of opportunity to display its simulated system scans. SpywareRemove.com malware experts haven't found any accuracy to PC Defender 360's scanner results, although they do note that its results are designed to look realistic and include PC threats that are 'detected' according to technical names. Along with detecting legitimate files as being infected, PC Defender 360 also may be complicit in attacks like:

  • Creating fake malware files on your PC – harmless junk files that don't include any real malicious code.
  • Displaying fake pop-up alerts as modified browser windows, taskbar alerts, etc.
  • Blocking legitimate anti-malware and security applications without your consent.

Accordingly, in spite of its resemblance to a real anti-malware product, PC Defender 360, as a member of the FakeRean family, should be considered a danger to your PC and SpywareRemove.com malware research team urge you to remove PC Defender 360 immediately once PC Defender 360 is been detected.

The Best Defense Against a Questionable Defender

As a precaution to prevent PC Defender 360 and related PC threats from interfering with the disinfection of your computer, SpywareRemove.com malware experts recommend attempting to disable all active malware before using anti-malware tools to delete PC Defender 360, as well with is varied relatives that include Antivirus 2008 Pro, Windows Antivirus 2008, Vista Antivirus 2008, Antivirus XP 2008, PC Clean Pro, Antivirus Pro 2009, AntiSpy Safeguard, ThinkPoint, Spyware Protection 2010, Internet Antivirus 2011, Palladium Pro, XP Anti-Virus 2011, CleanThis, Rogue.Vista Antivirus 2008, XP Home Security 2012, XP Security 2012 and AntiVirus PRO 2015.. Safe Mode is one of many security features that are recommended for such procedures and can help your anti-malware products remove PC Defender 360 with as little trouble as necessary.

If you should attempt to purchase or register PC Defender 360 before learning of its true nature as a rogue anti-malware program, you should consider any personal information that's transferred this way to be compromised. Contact your credit card company or any other relevant financial institution if it's required to prevent criminals exploiting PC Defender 360 to use your personal information for further misdeeds.

PC Defender 360 Screenshot 2PC Defender 360 Screenshot 3PC Defender 360 Screenshot 4PC Defender 360 Screenshot 5PC Defender 360 Screenshot 6PC Defender 360 Screenshot 7

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to PC Defender 360 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\ifdstore\pcdefender.exe File name: pcdefender.exe
Size: 123.37 KB (123378 bytes)
MD5: a437f77b1a2789b7a23a19f098fd37fb
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\ifdstore\
Group: Malware file
Last Updated: April 1, 2020
%CommonAppData%\ifdstore\ File name: %CommonAppData%\ifdstore\
Group: Malware file
%CommonAppData%\ifdstore\idfdata.bin File name: %CommonAppData%\ifdstore\idfdata.bin
File type: Binary File
Mime Type: unknown/bin
Group: Malware file
%CommonAppData%\ifdstore\cache.bin File name: %CommonAppData%\ifdstore\cache.bin
File type: Binary File
Mime Type: unknown/bin
Group: Malware file
%CommonAppData%\ifdstore\uninst.ico File name: %CommonAppData%\ifdstore\uninst.ico
Mime Type: unknown/ico
Group: Malware file
%CommonAppData%\ifdstore\support.ico File name: %CommonAppData%\ifdstore\support.ico
Mime Type: unknown/ico
Group: Malware file
%CommonAppData%\ifdstore\app.ico File name: %CommonAppData%\ifdstore\app.ico
Mime Type: unknown/ico
Group: Malware file
%CommonAppData%\ifdstore\pcdefender.exe File name: %CommonAppData%\ifdstore\pcdefender.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
%CommonStartMenu%\Programs\PC Defender 360\ File name: %CommonStartMenu%\Programs\PC Defender 360\
Group: Malware file
%Desktop%\PC Defender 360.lnk File name: %Desktop%\PC Defender 360.lnk
Mime Type: unknown/lnk
Group: Malware file
%CommonStartMenu%\Programs\PC Defender 360\PC Defender 360.lnk File name: %CommonStartMenu%\Programs\PC Defender 360\PC Defender 360.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%CommonStartMenu%\Programs\PC Defender 360\PC Defender 360 Help and Support.lnk File name: %CommonStartMenu%\Programs\PC Defender 360\PC Defender 360 Help and Support.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file
%CommonStartMenu%\Programs\PC Defender 360\Remove PC Defender 360.lnk File name: %CommonStartMenu%\Programs\PC Defender 360\Remove PC Defender 360.lnk
File type: Shortcut
Mime Type: unknown/lnk
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

Directory%ALLUSERSPROFILE%\ifdstoreHKEY..\..\{Value}HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = "4g"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "idefsvc" = "%CommonAppData%\ifdstore\pcdefender.exe /min"HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = ""%CommonAppData%\ifdstore\pcdefender.exe" /ex "%1" %*"HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ifdstore

Additional Information

The following messages's were detected:
# Message
1PC Defender 360 Firewall Alert
iexplore.exe is infected with Trojan-Downloader.JS.Agent.ftu. Private data can be stolen by third parties, including credit card details and passwords.
2Security Alert
Unknown program is scanning your system registry right now! Identity theft detected!
Threat: Hoax.HTML.OdKlas.a
3Security Alert
Vulnerabilities Found
Background scan for security breaches has been finished. Serious problems have been detected. Safeguard your system against exploits, malware and viruses right now by activating Proactive Defence.
Upgrade to full version of PC Defender 360 software package now! Clean your system and ward off new attacks against your system integrity and sensitive data. FREE daily updates and online protection from web-based intrusions are already in the bundle.