Home > Threats > TheDefend


Posted on 17 December 2009 under Rogue Programs

1. What is TheDefend?

TheDefend is an ineffective computer security tool that endangers user's personal data and worsens computer performance. There is also a risk of insecure and trustless cash remittance.

TheDefend acts as a scareware, which means user is being scared into purchasing fake product. User intimidation is carried out over a wide range of warning messages associated with computer security, which state that computer is infected and needs immediate protection. TheDefend is recommended as computer fix tool, while in fact the program is not able to remove any of risky threats.

To increase the authenticity of TheDefend, a computer scan will be performed, which is only a visual presentation to the victim. After the scan was completed, the user is informed that the system is infected, displaying exaggerated report, which will state that a number of threats has been found on the machine.

Effective advertising tool of TheDefend - faked Windows Security Center, which succeeds of its similarity to an original computer's security and services monitor - Security Center. Due to obvious similarity, TheDefend may seem as an anti-spyware program recommended by Windows operating system, so it is more likely to believe that the user will be deceived.

In order to fix alleged problems, the user will be asked to register TheDefend rogue program, which is the purchase of a licensed version. Do not make any money transfers, because TheDefend is a scam.

2. TheDefend screen shot:


3. How to remove TheDefend:

  1. Internet connection might be disabled or Internet browser might be blocked by TheDefend, so it won't be possible to download any files to infected computer. In this case please download all files required for TheDefend removal to another computer and then transfer them on the infected one using CD/DVD or USB flash drive.
  2. To remove TheDefend download Spyware Doctor and install the program (for the installation guide click here). Before installation, make sure all other programs and windows are closed.
  3. After the installation, computer scan should be started automatically. If so, please move to the next step. If not, click "Status" on the left side menu and press "Scan Now" button to run computer scanner as shown in the picture below:

  4. After the scan has been completed and scan results have been generated, press "Fix Checked" button to remove TheDefend.

  5. Restart the computer to complete TheDefend removal procedure.

4. TheDefend files:

C:\Program Files\TheDefend Software\TheDefend\TheDefend.exe

5. Hijackthis entries:

O4 - HKCU\..\Run: [TheDefend.exe] C:\Program Files\TheDefend Software\TheDefend\TheDefend.exe