How Can I Get Desktop Defender Off My Computer?

Desktop Defender slows your computer.

Desktop Defender, also known as Desktop Defender 2010, is a fake anti-virus program that purports to be able to remove viruses. In reality, Desktop Defender generates fake security warnings in an attempt to scare you into purchasing the "full version" of Desktop Defender. You should first attempt to remove Desktop Defender by running your anti-virus program. However, Desktop Defender blocks access to many anti-virus programs and thus you will likely need to remove the malicious program manually.

Instructions

End Processes

1. Press "Ctrl," "Shift" and "Esc" to open the Task Manager.

2. Click the "Processes" tab of the Task Manager.

3. End the following processes:

   Desktop Defender 2010.exe

   gedx_ae09.exe

   kgn.exe

   kilslmd.exe

   kn.a.exe

   uninstall.exe

   To end a process, click the process and then click the "End Process" button in the bottom-right corner of the Task Manager.

4. Close the Task Manager.

Delete Registry Values

1. Click "Start," type "regedit" into the search field and press "Enter" to open the Registry Editor.

2. Delete the following registry values from the right pane of the Registry Editor. To delete a registry value, right-click the value and select "Delete." If you need help locating a registry value, click "Edit," "Find," type the name of the registry value into the search field and click "Find Next."

   HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\antivirus_contextscan

   HKEY_CLASSES_ROOT\AppID\{C0E56AC2-9F72-436E-B6E7-AEC28AF9E4EB}

   HKEY_CLASSES_ROOT\AppID\IEAddon.DLL

   HKEY_CLASSES_ROOT\CLSID\{08EEC6AD-7486-487F-89B7-5A3716DDAE14}

   HKEY_CLASSES_ROOT\CLSID\{CCB5551D-8594-4999-85F9-1E3EABCB95AC}

   HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\antivirus_contextscan

   HKEY_CLASSES_ROOT\Drives\shellex\ContextMenuHandlers\antivirus_contextscan

   HKEY_CLASSES_ROOT\IEAddon.StatusBarPane

   HKEY_CLASSES_ROOT\IEAddon.StatusBarPane.1

   HKEY_CLASSES_ROOT\Interface\{5B184B9D-B7BD-4FEA-8D1F-5E27182206A5}

   HKEY_CLASSES_ROOT\TypeLib\{3ED0E410-5C8E-47B6-A75D-D10B886E903C}

   HKEY_LOCAL_MACHINE\SOFTWARE\Desktop Defender 2010

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CCB5551D-8594-4999-85F9-1E3EABCB95AC}

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Desktop Defender 2010

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tdifw_drv

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform "Desktop Defender 2010"

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Desktop Defender 2010"

3. Close the Registry Editor.

Delete Files, Directories and Dynamic Link Libraries (DLLs)

1. Click "Start," type "cmd" into the search field and press "Enter" to open the Command Prompt.

2. Type the following commands into the Command Prompt. Press "Enter" after each command.

   del Desktop Defender 2010.exe

   del guide.chm

   del hjengine.dll

   del IEAddon.dll

   del MFC71.dll

   del MFC71ENU.DLL

   del AF.dll

   del daily.cvd

   del msvcp71.dll

   del msvcr71.dll

   del pthreadVC2.dll

   del shellext.dll

   del siglsp.dll

   del tdifw_drv_WLH.sys

   del tdifw_drv_WXP.sys

   del uninstall.exe

   del tdifw_drv.sys

   del log.txt

   del kn.a.exe

   del Desktop Defender 2010.lnk

   del Activate Desktop Defender 2010.lnk

   del How to Activate Desktop Defender 2010.lnk

   rmdir Desktop Defender 2010

   rmdir tdifw

   regsvr32 /u hjengine.dll

   regsvr32 /u IEAddon.dll

   regsvr32 /u MFC71.dll

   regsvr32 /u MFC71ENU.DLL

   regsvr32 /u AF.dll

   regsvr32 /u msvcp71.dll

   regsvr32 /u msvcr71.dll

   regsvr32 /u pthreadVC2.dll

   regsvr32 /u siglsp.dll

3. Close the Command Prompt. It's a good idea to run your virus scanner and then restart your computer.

References

• 2-Spyware.com: Remove Desktop Defender 2010