From Wiki-Security, the free encyclopedia of computer security
Defense Center is a rogue anti-virus program, which means that it is at the heart of a scam, designed to steal your money by infecting your computer with a malware infection and trying to convince you that the infection is real software that you need to pay for. Defense Center is almost identical to rogue security applications Dr. Guard, Your Protection, My Protection, User Protection, Data Protection, Paladin Antivirus, and Digital Protection. It's the same scam; it just gets renamed and updated every few months. Defense Center (sometimes appearing as Defence Center) is the version of this infection that appeared in June 2010, possibly growing more malicious than before by July.
How Defense Center Infects a ComputerDefense Center is installed onto a computer by a Trojan, and the Trojan is hidden online in places that you will not suspect, so that it can take advantage of vulnerabilities in your computer system or hide in a file that you will download without thinking. There are also a few websites that host a phony free "scan" which actually infects your computer, and some of the known sites are traffic-photos.com, easysecurityscan.com and fastanyprime.com. The Trojan may cause pop-up warnings that urge the purchase of Defense Center before the Defense Center infection is present, in order to lure you into downloading the infection, or the Trojan may simply download Defense Center on its own. Either way, once the Trojan changes some settings in order to make sure that it runs whenever Windows runs, the next time you boot the system, you will not be able to ignore Defense Center.
Once Defense Center has installed on your computer, it can have these symptoms:
- Fake home screen shows when Windows starts, and Defense Center runs a fake scan with fake scan results. You will be prompted to buy the "full version" to remove the detected threats.
- Frequent pop-up warnings from the system tray, which mention remote attacks and scary-sounding viruses.
- All other programs are prevented from opening.
- Defense Center tries to uninstall your actual anti-virus software, or to scare you into doing it by claiming the real anti-virus software is infected.
- Internet Explorer may redirect to Defense Center's bogus sites when you try to go online.
- Pop-up ad advertising "one day sale" offer to get Defense Center at 30% off.
- Links to pornographic websites are created on the desktop.
- Task Manager is disabled.
As an added nasty bonus, Defense Center sometimes has a rootkit bundled with it, which is called RootkitTDSS. RootkitTDSS can cause your web searches to redirect to malicious websites that may cause further infections. Overall, Defense Center's activity may consume a significant amount of system resources and cause your computer to run unusually slowly.
It is important to remember that the crooks who created Defense Center have engineered the entire frustrating experience that you have when this infection takes over your computer. You see what they want you to see, and are limited to doing what they want you to be limited to doing. The goal is to manipulate you into paying money for a "full" version of Defense Center, when there is no full version, because Defense Center isn't capable of providing any security. Don't pay these criminals for what they have done, and do not let them mislead you into believing that your PC is a lost cause, and you are not able to do something about your computer's state.
To check your computer for Defense Center, download
SpyHunter Spyware Detection Tool.
SpyHunter spyware detection tool is only a scanner meant to assist you in detecting Defense Center and other threats. If you detect the presence of Defense Center on your PC, you have the opportunity to purchase the SpyHunter removal tool to remove any traces of Defense Center.
Detection of Defense Center (Recommended)
Defense Center is difficult to detect and remove. Defense Center is not likely to be removed through a convenient "uninstall" feature. Defense Center, as well as other spyware, can re-install itself even after it appears to have been removed.
You also run the risk of damaging your computer since you're required to find and delete sensitive files in your system such as DLL files and registry keys. It is recommended you use a good spyware remover to remove Defense Center and other spyware, adware, trojans and viruses on your computer.
Run a Defense Center scan/check to successfully detect all Defense Center files with the SpyHunter Spyware Detection Tool. If you wish to remove Defense Center, you can either purchase the SpyHunter spyware removal tool to remove Defense Center or follow the Defense Center manual removal method provided in the "Remedies and Prevention" section.
Method of Infection
There are many ways your computer could get infected with Defense Center. Defense Center can come bundled with shareware or other downloadable software.
Another method of distributing Defense Center involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Defense Center on your system. Defense Center installs on your computer through a trojan and may infect your system without your knowledge or consent.
If you think you may already be infected with Defense Center, use this SpyHunter Spyware dectection tool to detect Defense Center and other common Spyware infections. After detection of Defense Center, the next advised step is to remove Defense Center with the purchase of the SpyHunter Spyware removal tool.
Defense Center may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Defense Center from your computer.
Remedies and Prevention
Defense Center, as well as other Spyware, are constantly evolving and becoming more advanced to avoid detection. Defense Center along with its variants can install in different locations and even when you try to uninstall it you find they reappear when you reboot your computer.
Install a good anti-spyware software
When there's a large number of traces of Spyware, for example Defense Center, that have infected a computer, the only remedy may be to automatically run a Spyware scan from a good anti-spyware software designed to detect Defense Center and other types of spyware.
Remove Defense Center manually
Another method to remove Defense Center is to manually delete Defense Center files in your system. Detect and remove the following Defense Center files:
- %Program Files%\Protection Center\protcen.exe
- %Program Files%\Protection Center\uninstall.exe
- %Program Files%\Protection Center\protext.dll
- %Program Files%\Protection Center\prothook.dll
- %Program Files%\Protection Center
- %Program Files%\Protection Center\about.ico
- %Program Files%\Protection Center\activate.ico
- %Program Files%\Protection Center\buy.ico
- %Program Files%\Protection Center\prot.db
- %Program Files%\Protection Center\help.ico
- %Program Files%\Protection Center\scan.ico
- %Program Files%\Protection Center\settings.ico
- %Program Files%\Protection Center\splash.mp3
- %Program Files%\Protection Center\update.ico
- %Program Files%\Protection Center\virus.mp3
- HKEY_CURRENT_USER\Software\Malware Defense
- HKEY_CURRENT_USER\Software\Paladin Antivirus
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr" = "1"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Protection Center"
- McAfee Threat Center - Library of detailed information on viruses.
- How Spyware And The Weapons Against It Are Evolving
- Crimeware: Trojans & Spyware
- Windows System Update - Latest bug fixes for Microsoft Windows