IEDefender

Alias: IE Defender, IE Defender v2.2, IE Defender v2.3

Description: IEDefender is a rogue anti-spyware tool. It scares the user with fake popup messages and tries to trick into buying of its full version. IEDefender infects computer through video codecs that come bundled with a Trojan such as Zlob Trojan.

IEDefender also acts as a BHO (browser helper object). It hijacks Yahoo, Google and MSN searches and displays popup alerts that your computer is infected.

Example of such fake alert text: "Your computer is infected! Some of your search results were changed by spyware. You have to clean your pc and we recommend to use our antispyware!"

Threat type:

Adware - Adware is a software application which displays advertisements on your computer. Advertisements can be displayed through pop-up / pop-under windows, additional bars or toolbars, underlined links or buttons that appear on a computer screen. Adware applications include additional code that delivers the ads. Adware authors earn money when users click on those ads. Occasionally, adware includes code that tracks user's site visits and passes it to third parties without the user's permission or knowledge.

Ransomware - Ransomware is a software application that infects a computer and asks for money to have the infection removed.

Search Hijacker - A Search Hijacker is a software application that takes control of your browser's default search engine. The search results may not necessarily be the best fit as those usually come from paid advertisements, as issued to you by the Hijacker authors. Search hijackers prevent you from changing your browser's default search engine, and they tend to slow down PC performance.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects IEDefender: Yes

Threat risk: Very High Risk

Extremely dangerous malware. Uses stealth installation, randomly named entries and has the capability to self update or resurrect after incomplete removal. Almost impossible to remove manually. Category mostly consists of trojans and spyware.

Symptoms:

Excessive popup ads which pushed the user to download and purchase the IEDefender.

Hijacked search result listings in Google, Yahoo or MSN with fake warning messages such as: "Your computer is infected! Some of your search results were changed by spyware. You have to clean your pc and Yahoo Team recommend to use our ANTISPYWARE!".

IEDefender Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with IEDefender, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
N/A

Registered Dll (Dynamic Link Library) Signatures:
N/A

Internet Explorer Integration: Yes

Folder Signatures:
N/A

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
webpagesupdates.com
Voipwet
iesecurepages.com
Obfuscated.gx
AdwareRemover2007
ahomepcsafety.com
Trojan.win32.CP4000
Netsky
Toolbar.HDTip
homepagecell.com