IE Defender Removal Guide
Do you have IE Defender?
This “IE Defender Removal Guide” article will show you how to identify and remove IE Defender. This guide will be updated as more information is available.
IE Defender Detection Test
Run SpyHunter’s Spyware Scanner to check for IE Defender infections on your PC.
IE Defender Description
Once your computer gets infected with the Trojan, it will start showing up an annoying popup message: “NOTICE: Your system is infected and your computer performance is not at the highest level. Full system optimization will greatly increase your computer’s performance and prevent data loss”. Do NOT click on this fake error message because it will redirect your IE to IEDefender’s website where you will be forced to download IEDefender’s anti-spyware application.
Moreover, the Trojan, which has come bundled from either IEDefender and/or their affiliates, hijacks your search engines (such as Google, Yahoo and MSN) and displays a fake warning message within your search results claiming that your computer is in serious danger because of hazardous parasites in your system. This is the manner how they attempt to trick the users into purchasing IEDefender full commercial version. Again, do NOT click on this fake error message because it will direct you IEDefender’s homepage where you will be offered to purchase IEDefender’s application.
Parasite Type: Trojans
IE Defender Method of Automatic Detection
The removal of spyware such as IE Defender can be a difficult process. If you regularly run a spyware scan with a good spyware remover, you can automatically detect IE Defender and other Spyware, Adware, Worms, Trojans and Browser Hijackers.
To quickly detect IE Defender, follow the instructions below:
Download SpyHunter’s Spyware Scanner.
- Select “Start Scan” to run a full system IE Defender scan.
- Reboot your computer.
- Run another scan to pick up any remaining IE Defender infections.
** SpyHunter’s Spyware Scanner only allows you to detect IE Defender and other spyware. In order to remove IE Defender, we advise you to buy the full-version of SpyHunter. Weekly IE Defender file updates and technical support are available with SpyHunter’s spyware remover.
IE Defender Manual Removal
Use Caution! Please read the instructions below carefully. Manual removal of IE Defender is a delicate procedure. Proceed at your own risk. We advise you to backup your system before you manually remove IE Defender.
If you are still having problems with IE Defender after completing these instructions, we recommend you download SpyHunter’s Spyware Detection Tool to safely detect IE Defender.
To manually remove IE Defender, follow these removal steps:
Find IE Defender Directory Path
- Find IE Defender’s directory path before you remove IE Defender.
- Go to Start > Search > All Files or Folders.
- On All or part of the the file name section, type in “IE Defender” file name(s).
- Use directory path for the other manual removal steps.
- IE Defender directory path listed below.
%ProgramFiles%\IE Defender
Stop IE Defender Processes
- To open Task Manager, use CTRL+ALT+DEL or CTRL+SHIFT+ESC.
- Go to Image Name to find “IE Defender” processes by name.
- Find and stop the “IE Defender” processes listed below.
G66-tmp_.exe
defender-install[1].exe
videomp3_setup_3912958[2].exe
install_video_3912981[1].exe
install_video_3912990[1].exe
ieDefender-setup[1].exe
ieDefender-setup[2].exe
iedefender.exe
ieDefender[1].exe
Unregister IE Defender DLL Files
- Go to Start > Run > type cmd and then press OK.
- To unregister “IE Defender” DLL file, type in the exact directory path +
regsvr32 /u + [DLL_NAME] (ex., :C\ IE Defender \> regsvr32 /u IE Defender.dll). - Find and unregister “IE Defender” DLL files listed below.
geebb.dll
fccaxxu.dll
awtqnlk.dll
toprates.dll
sysvideo32.dll
windivx.dll
stream32a.dll
tuvttrr.dll
ddccd.dll
mlljh.dll
tdlRMS.dll
advpac.dll
ddcdedd.dll
gebca.dll
prosearchsite.dll
ddccawv.dll
wvuus.dll
blopenvtlv.dll
werbetpql.dll
werbetxdp.dll
blopenvtok.dll
fcccdbc.dll
awtqqpq.dll
esent9.dll
blopenvxdt.dll
ttvbontvm.dll
ttvbonvgl.dll
popnetnpr.dll
msvideo.dll
mscfg32.dll
rqrrrrp.dll
dmqhahxp.dll
gdpbvwyr.dll
ssqpp.dll
mljji.dll
fkxlgaeu.dll
version69ie7fix.dll
vmopgitk.dll
bidisplv.dll
crypt32d.dll
wvurqpp.dll
isfmdl.dll
vturp.dll
cbxwwvu.dll
gebcc.dll
ttvbonsmf.dll
pmnnl.dll
fccbcyv.dll
byvsr.dll
wiecjprp.dll
nsr18.dll
nsl2D.dll
vtutt.dll
rqrqomn.dll
ddccy.dll
ldqzxhsj.dll
pdnmcqhd.dll
fcccyxx.dll
nsz379.dll
adspipe.dll
nsaA7.dll
adssite_sidebar.dll
gzmrt.dll
sysdivx.dll
IR9V0_QCX.dll
mwgvsu.dll
XunLeiBHO_Now.dll
a3gpcodec.dll
IntelVideo.dll
VideoMP3.dll
ASKPBAR.DLL
dx50codec.dll
mp3avi.dll
Delete IE Defender Registry Values
- Go to Start > Run > type regedit and then press OK.
- To search for IE Defender, press Ctrl + F and type IE Defender to
locate the key that has the value you want to delete. - To delete “IE Defender” value, right-click on it and select Delete.
- Find and delete “IE Defender” registry keys listed below.
0B686DCA-F3F7-4829-8EB4-B453EEEA7B05
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\fccaxxu
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\awtqnlk
0FB618BD-0695-46C0-8EE4-472BEBA1D429
HKEY_CLASSES_ROOT\TypeLib\{74D46BBA-5638-473A-83B6-97E7804A7411}
HKEY_CLASSES_ROOT\toprates.Video
HKEY_CLASSES_ROOT\Interface\{48D78BE5-CFB9-4B66-9AC4-96D4CF21DE06}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
HKEY_CLASSES_ROOT\CLSID\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
HKEY_CLASSES_ROOT\AppID\toprates.dll
HKEY_CLASSES_ROOT\AppID\{0EB6AF05-AB7F-47C2-8ABC-9B985FE27A69}
F94E2B67-3D7A-4F94-AF35-5BBEDAAD3AC4
sysdivx.Video
609F107D-88EE-4D19-B56F-6C21A3E9DC1F
AppID\sysdivx.dll
E4A441DE-E415-4C43-A466-4993093FF411
mscfg32.Video
FEC3BE4F-E5AB-4B3F-9813-5326FA073155
AppID\E780E148-0BAC-4654-81A4-8A649F4D4A90
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\rqrrrrp
0459F04A-F7CC-4F98-B66E-E19690702AE4
38329D14-1302-4CA7-BEE4-C954516C43B3
D0995F82-90C7-4C78-9B4C-C1700FB8B120
14A6B963-7C6C-414B-B5BD-9CD0929F928F
6430CCA7-032A-4EB0-BCFF-838998E73EF5
15FEB658-AACC-412E-BC13-D54CFD74A8F6
02788C74-8A3E-455D-9820-59784297DF96
6dd7d9ec-1dd2-11b2-9199-c3a2ea003916
8E3FBDE2-7DBD-4040-85D9-29BBC559C129
64c35692-1dd2-11b2-90fc-e8593d14a627
605be7be-1dd2-11b2-9677-a5427ab0e805
d31ec424-1dd1-11b2-9223-dc336077be0e
a3a55b97-bdf9-4f05-a0aa-279ddf006514
913B63E8-513D-4172-AC66-56219CB6E94F
8A8FDB69-C6CF-440D-AD12-4084A77093CF
6265c870-869a-46f2-a2dd-4a7258d9a0bc
8c28c596-57e5-4b8d-bccd-f2389b4c96a7
81645B0C-FAAB-486C-965B-BAF2C7834B1D
B28A8965-62F9-620E-DA5C-4DE6708E0991
CEADB2EC-7AEA-4374-A769-5A78817A6107
5E3B65A2-8F4B-4D6F-B14C-00FE82596AC6
2AE4005E-689F-4FB9-8C3D-D2B8B58AC072
8FB4CA7F-837B-42EE-BEA6-4567FD1ED3C2
BBB05D9E-0297-404D-A6BF-D8F2876B84A6
FB3384D2-9394-45AF-ACE1-8EB45AC61FED
29B1EDC5-5BF3-468F-B8E5-6B27090CEF0A
A716011B-4637-44D0-922B-F1E88CC7CC73
F7CDF7FE-98B1-43FE-A694-E52E605AA60D
F08487B1-AFEC-45CF-B2E9-D05DEE137D22
b594aa84-1dd1-11b2-af8a-d10b02977db1
43f3b284-1b6a-4516-b0e7-8db38ffc5288
B285004D-6D02-4212-91FC-B8F47B68C254
8d829ad9-2dd1-4db2-8c45-b812c72bea01
9C8A568E-4201-478a-8536-526CF371D2E2
762f6938-9fd1-40bf-8d4d-94ba1327765b
0F596190-DEC2-4D19-AB43-50B54243923F
632F6863-1E54-49FC-A72F-BDEE592EAD52
F5E81149-92B2-47D2-A12B-1B966AB46EA7
4AB15165-917A-4AE4-AE42-7FF13F61805B
80590BC5-F4BA-4AD1-B216-C19EE86E2A77
DA927154-CC3A-41A7-9246-CE35FE2E6477
2FA3B736-1AC7-454D-8E94-8BA8158BF064
A19926CE-CA09-9EAE-7806-B9891B5461C8
F9EAAA11-DF98-4615-A2C7-7D03C86A6BE9
43BA0532-0D69-458A-8C71-AD0F6AE70D19
A8565FBC-8D53-4D4F-9BB0-CBC68A22B126
c4545fc9-26d0-4ccf-b4fb-728aed895dbd
62EA9201-8CC7-4199-AC30-7744F836322E
202EBB90-ABD4-46CC-BB5A-4F0ECC67B331
31E3F653-ED88-4355-B83E-FB263CD355E3
6D64B03B-3B93-4AF2-BFC6-01264A4C7F2A
15EB9F40-D775-4463-B75B-8687B3C66BB7
E780E148-0BAC-4654-81A4-8A649F4D4A90
71314E7C-1713-49FA-90F2-54D275023981
17D562A6-DA3D-4F87-B659-86CD06473AB5
c221c214-d188-48aa-a5fc-596227937e70
76aab9f4-9bc8-4cd0-adf5-0b2eda08ecc3
cd6a6f8d-6f11-4022-afbd-3f47f293b9e3
B6F8D996-F682-468B-8DC2-E4216445645B
9FAF7E8D-6E47-41B0-8EBE-E59ED63843AB
6F4F1A56-48E8-4149-9562-1ACAE6705B70
5d577280-ecad-49b1-93a7-dc342d8c6e57
1BAF960A-2844-4895-B4AF-EF0725609B17
8774d22a-6bcb-4cb5-aca3-f85f39b1fc49
7EFEBF39-AEF9-4F9D-86F6-E3824FF84FE2
D54F0577-8770-4A63-B926-6A640ED57F06
0493A8B0-1F7B-4771-90C3-474A54715499
FF64059D-4D2A-4D6B-AA0F-2EE4A2FE3856
DABA9520-AC17-4BA5-BBD4-470F16CF3357
3401DB32-7F00-4EC7-A890-A75F64973843
10DF1424-D96F-4576-8377-E0FB4451CD25
0B241FD4-1EA1-4238-B505-07A484C49D1A
C0530C77-FFF1-4701-BD4B-B62471213C77
E2278F85-4584-4BEE-928C-600B38C385C1
4D6F67DF-65CA-4FFE-A7BD-3A45747525B7
b5adafea-ec5c-4cfe-984f-b9d6c1339635
FBD52A1D-E303-48F3-B7F8-F82A7D6A4124
3A2224A0-B114-4491-9305-FD0E4B55FA1E
24690191-8659-4A38-A157-6CB338F785D9
0EDFF8B7-208E-4491-8A56-C77D8E0B650E
49366a27-91dc-4bdd-895d-f611a64d67cc
275296E0-75EC-4380-BB5F-900636889A8D
BCBCEE7B-2001-4971-B991-EB6E81C96CC5
5CB10D4A-0C14-4546-865D-935ECBFFA346
1648E328-3E5A-4EA5-A9C6-E5F09EE272DA
10F3E8BD-257A-4702-A2F5-DC02055B068C
VideoMP3.MP3
4E54D728-1FA3-4125-B468-C8B43C123E65
64130BE8-2B67-4A65-9CA5-1CC6948C1471
AppID\VideoMP3.dll
AppID\6FFE49B7-F475-4EAB-8E80-E5D74C4E8D5F
7A23A1E8-B2AB-4C50-AD12-9E19B747E17C
E4DF0054-13B7-4A75-967E-1CC787C69FAA
F02B8C83-C817-4EA2-A499-29257DA0373A
09D72564-27E2-4F12-8AB6-03F83E4567DE
48BF2BC0-2945-11D8-8CAC-00080FC65465
5DE176A4-B5FF-4D50-B084-E047526B8E97
6FFE49B7-F475-4EAB-8E80-E5D74C4E8D5F
C7AFF24C-3480-627F-DA5D-3CE605870A92
0EEDB911-C5FA-486F-8334-57288578C627
5D67E2E7-0C2B-4491-87C4-37F2AC6033D2
04F7FAC5-F506-4F29-9094-9CB9144B192C
2B659BB5-3E85-4BC6-BAFC-98FEDFF3AE99
EAEDDCA3-3989-4FF4-A773-3AC188C70A16
mp3avi.MP3
8388594E-D5C0-4933-A977-867D32D8FF19
AppID\mp3avi.dll
9A1EF21C-B0D4-4EB0-894F-CBAE2F4D0A82
F4D76F01-7896-458a-890F-E1F05C46069F
87B570FB-D2CF-4D3C-8E1B-E1E7018BBA95
D4FD35A3-101C-4FAA-A9CA-E8C9461C3CEF
IEDefender
IE Defender Symptoms
There are many signs that your PC has been hijacked and infected with IE Defender or other spyware applications. To reduce the damage that can be done to your PC, start detecting IE Defender symptoms on time. Below is a list of possible IE Defender symptoms that your PC may have. Notice that certain spyware symptoms vary depending on upon the severity of the infection and other factors.
- Installs without your knowledge or permission. Usually spyware such as IE Defender may be installed from a website through an embedded script or program in a webpage. There are some malwares that install through web pop-ups or free software that require you to accept a downloadable file.
- Tracks your surfing habits. Spyware applications such as IE Defender are designed to track and collect details such as what websites you visit, what your usernames and passwords are and other sensitive information. Malware may even record and collect your login details for your online bank account.
- Bombards your PC with popup ads. Some unwanted applications such as IE Defender display annoying popups (often for adult or other objectionable web sites) while you are surfing the Web and even when your PC has been idle for many minutes.
- Modifies or hijacks your homepage and displays new desktop shortcuts. Some spyware programs like IE Defender add new unnecessary shortcuts on your desktop. Moreover, IE Defender may actually change your default homepage to a different homepage. Sometimes IE Defender won’t even allow you to change it back to your original homepage.
- Slows down your PC’s performance. One of the most common spyware symptoms is when your system suddenly starts operating slower than usual. Spyware applications use a lot of your PC’s resources to deliver popup ads and send information to third-parties which can results in a slow computer performance and system crashes.
IE Defender Method of Infection
One of the most common reasons for getting infected with IE Defender or other types of spyware is because people do not apply safe Internet practices. It is important to learn how one gets infected with IE Defender or other types of spyware. Once you know what not to do, you will be able to avoid falling victim to spyware.
Below we provide some possible reasons why you might have become infected with IE Defender:
- You received an e-mail with an attachment from someone you don’t know and opened it. This is one of the most common ways for Adware, Viruses, or Spyware like IE Defender to infect your PC. How do you know that the attachment is dangerous? It usually sends attachments that end with a .exe, .com, .bat, or .pif. Do not open email attactments if you don’t know who the sender is!
- You were surfing the Web and you clicked on a popup ad warning you that your PC is infected. You panicked and clicked on the ad’s OK button; thus you were directed to IE Defender’s website and it tried to push a product on you. Ignore such messages! We recommend closing these windows by clicking on the X instead of the OK button.
- You visited a questionable website. A large amount of spyware is mostly pushed through adult sites. You might have accidentally clicked on a link that automatically installed unwanted software such as IE Defender.
- You downloaded a freeware or shareware program. Some developers offer their software for free, but can come with other unwanted programs such as IE Defender bundled with it. Do not install any free software without reading its EULA. By simply reading a program’s EULA, you can determine whether a program you are installing has spyware bundled with it.
- You downloaded a peer-to-peer (P2P) or shared network application. Very often peer-to-peer sharing programs are bundled with spyware similar to IE Defender.
- You downloaded some program from Warez or Crack websites. The downloads from these websites are often overrun with dangerous infections such as IE Defender.
IE Defender Quick Prevention Tips
Follow the IE Defender prevention tips below to avoid IE Defender infections and other malicious software.
- Run Windows Updates regularly to ensure you have the most up-to-date and secure system. A good tactic is to set up your system to check for updates on a regular basis.
To set up your system to access automatic updating services, follow these steps:
Go to Start > Control Panel > System > Automatic Updates (XP) or Start > Settings > Control Panel > Automatic Updates (2000). - Use a firewall. A firewall is a software or hardware that serves as a blockade to keep data secure and safe and unauthorized users off your computer or network. You can choose from a variety of firewalls that are designed to meet different needs.
- Firmly secure Internet Explorer settings. If you’re using Internet Explorer as your browser, change its settings to block spyware applications.
To change Internet Explorer settings, go to Tools > Internet Options > Security > Custom Level.
You will see a section near the top of the dialogue box devoted to Active X controls. There you should disable downloading of both signed and unsigned Active X controls and those marked as unsafe. Some Active X objects are spyware, and this action will block them. - Install a good and reputable anti-virus program. Make sure that you install only reputable anti-spyware and anti-virus software like SpyHunter. Most reputable anti-spyware software programs today are also designed to identify known viruses, which could contain Trojan horses as well.
- Always keep your anti-spyware or anti-virus up-to-date with the latest malware definitions. The creators of anti-virus applications are constantly finding new security holes in their software and providing software updates. Therefore, it is important to make sure your anti-virus and anti-spyware programs are up-to-date. These updates are typically installed through an integrated update system.
- Practice safe Internet surfing habits. Stay away from any questionable sites, including pornography, gambling, hacking or other off-beat sites.
The purpose of this “IE Defender Removal Guide” article is to describe the removal process of SpyLocked. The SpyLocked manual removal instructions are to serve as a guide. We do not guarantee that the manual removal instructions will completely remove IE Defender. It is advised to use SpyHunter to safely remove SpyLocked.
