Defense Centre Trojan/Virus : Halp!!

[Loco]

Right, first off, I'm usually quite successful at getting rid of these pests. This one appears to be a complete pain in the tits though. It's similar to that "XP Security Centre" virus that used to do the rounds but this one actually runs in Safe Mode too. Looked in Task Manager in Safe Mode but there isn't a sign of anything untoward .exe wise.

Running Malware Bytes results in it finding nothing, if it even gets that far as Defense Centre notices you running an anti malware app and stops it then uninstalls it for you ( nice of it ). My next port of call is to scan from a PE disc or bootable USB stick with a portable anti malware app.

Anyone managed to get rid of this pest?. Google throws up lots of people asking about it but very little concrete info on how to get rid.

[Guy Montag]

Tried Hijackthis or Combofix yet? Try them and post your combofix log if it still persists.

[Loco]

Think I may be getting somewhere with this now. This page has been a help :-

http://www.freepcsecurity.co.uk/2010...enter-removal/

I used rkill and TDSSkiller and it looks like it has managed to kill the running processes that were "protecting" the trojan and interrupting my scanning with my chosen Anti Malware apps. TDSSkiller managed to find and remove some Windows Registry entries relating to the trojan. Malware Bytes is happily scanning away in Safe Mode now and has found a few nasties. Once that is complete I'll run Superantispyware as well and then Combofix.

[wickit]

right i have managed to get rid of this one in the past

you have to create a new user, make it a administrator
reboot and log on as new user

THEN install malwarebytes and then update
a scan should find this beast and get rid of it.

try that
let me know how you get on

[Loco]

A cumulative effort between Malwarebytes, Superantispyware, Avast 5, TDSSkiller and finaly Combofix did the trick and completely cleansed this wanker of a pest from the system at long last. Combofix seemed to be the turning point of the whole shooting match and prevented the Google5 redirector ( which infects alongside Defense Centre ) from rearing its ugly head after a scan. So glad I got rid of it without having to backup and reformat/reinstall. Hate doing that even though it seems the easy way out. Really hate these Malware pests beating me so I generally go all out to blitz them without resorting to reformatting.

[Puddle]

The trojan will atach itself to the Key$ reg.
Wich means it may attach itself to a server portion wich is unlikely.

Best bet on windows is togo intosafe un netwok ad kill the .exe portion.

Put Hijack this on and run it in safe mode.

But I'm a moron so don't listen to me.

[Loco]

S'okay folks, cheers for the help. Got it all sorted now.

[PrivateParts]

just use pornhub next time and none of this will happen again

[Loco]

Pornhub?. God no - much safer with Xhamster.

It wasn't one of my PC's. I was fixing it for a mate at work. It belonged to his 17 year old daughter. I'll pass on your Pornhub recommendation.

[Fenris Wolf]

That's actually the fucker that caused me to do a complete reformat and finally upgrade to 7. And it was from a porn site that I clicked on impulse without thinking. Fucking Defense Center pops up, I think "hmm, that's odd", click on "Fix It" and then realize exactly what I had just done....especially because I had Windows Defense shut off! Too much blood in the wrong head at the time.