Alias: Defense Center, Defense Center Trojan, Defense Center Virus, Fake Defense Center

Description: Updated June 17, 2010 12:35pm

Defense Center Special Removal Instructions

Please make sure to bookmark this page as you may need to refer back to it to complete the removal steps. Hint: If Defense Center places one of its warning messages over SpyNoMore or over your browser, simply minimize Spynomore (or browser), click 'cancel' or 'ignore' on Defense Center's message to close it, then bring up SpyNoMore again.

Step 1: Download the file below but do not run either just yet!

opf.reg Right-click and choose 'save target as' or 'save link as'. Locate the 'Save as type:' field and use the pull down menu to select 'All types'. Then in the 'File name:' field, make sure the file to be saved is named opf.reg, not 'opf.txt' or 'opf.reg.txt'.

SpyNoMore Right-click and choose 'save target as' or 'save link as'. Locate the 'Save as type:' field and use the pull down menu to select 'All types'. Then in the 'File name:' field, make sure the file to be saved is named 'spynomore.opf'.

Step 2: Double-click the opf.reg to merge it into your registry. A dialog box with the question "Are you sure you want to add / merge the information in opf.reg to the registry?" will appear. Answer 'Yes'.

Step 3: Double-click spynomore.opf which you downloaded in setp 1 and scan your computer to remove Defense Center. If SpyNoMore is unable to download available updates, please click on SpyNoMore Settings and uncheck 'Use Internet Explorer settings'. Please note that the free version of SpyNoMore will only show you the detections but will not remove them. In order to remove the infection you need to purchase a 1-year license which costs $29 (or $39 for 3 computers). In all cases, you will be able to see Defense Center in the free version scan results.

Step 4: Next, let's restore your Internet connection if it is broken.

If you use Internet Explorer, go to 'Tools' > 'Internet Options' > 'Connections' > and click on 'LAN settings'. Under the Proxy Server section, uncheck the checkbox labeled 'Use a proxy server for your LAN'. Click the OK button and click OK again.

If you use FireFox, go to 'Tools' > 'Options' > 'Advanced' > 'Network' > 'Settings'. Select No proxy and click the OK button and click OK again.

Step 5 (optional): After you have removed Defense Center, it would be a good idea to check your computer for rootkits (which are basically hidden trojans) which may have tagged along with Defense Center. To do so, download and run TDSSKiller by Kaspersky Labs.

Step 6 (optional): If TDSSKiller does find a rootkit, it will ask you to restart your computer so that it can remove the rootkit(s). After your computer restart, scan your computer once more with SpyNoMore to make sure everthing is OK.

Threat type:

Hijacker - A Hijacker is a software application that takes control of your browser's settings. Usually it changes your home page and redirects it to some unknown site or modifies your search settings. It prevents you from changing back your browser's settings. An infected browser usually operates much slower.

Ransomware - Ransomware is a software application that infects a computer and asks for money to have the infection removed.

Trojan - A Trojans or Trojan Horse is any programs that installs itself secretly, quite often with sinister intent. Once installed, the trojan author (hacker) can gain complete control of the infected PC. Trojans are usually designed to steal sensitive information and/or destroy the system. Trojans can be distributed as unsolicited email attachments, or bundled with freeware and shareware programs.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer and / or to protect your privacy.

Detection:
SpyNoMore removes Defense Center: Yes

Threat risk: Very High Risk

Extremely dangerous malware. Uses stealth installation, randomly named entries and has the capability to self update or resurrect after incomplete removal. Almost impossible to remove manually. Category mostly consists of trojans and spyware.

Symptoms:

Defense Center takes over the infected computer and prohibits some applications (including antivirus products) from being started.

Icons appear in your Windows Tray.

Pop-up messages claiming that your computer is infected.

Defense Center may have been be installed without your consent via a trojan.

Warning balloon messages.

Defense Center places the following shorcuts on your desktop: youporn.com, porntube.com, nudetube.com, Defence Center, Defence Center Support.

If you click on one of Defense Center fake warning messages, a so called 'Defense Cetner Safebrowser' pops up.

You cannot simply uninstall Defense Center because it is a trojan.

Defense Center Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with Defense Center, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
Local Settings\Temp\esentutl64.exe
Local Settings\Temp\mschrt20ex.dll
Local Settings\Temp\topwesitjh
Local Settings\Temp\wscsvc32.exe
Desktop\spam001.exe
Desktop\spam003.exe
Desktop\troj000.exe
defcnt.exe

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
N/A

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
Performance Center
AV Security Suite
Antimalwaresecurity.com
Antimalware-guard.com
Antimalware-guard.net
Security Master AV
findallnow.net
curehealth.com
asklots.com
mylocalhero.com