WinX Defender Removal guide
Win X Defender is one of the latest spyware programs making it’s way onto peoples computer. This guide will provide you with detailed removal instructions. While this method is tried and true you use it at your own risk. Find someone else to sue if you loose your data. If you are not computer savvy you can still remove WinX Defender with this easy guide. If you do not want to take the time or want to stop this from ever happening again then go download Trend Micro Internet security and just run the scan to remove this and be protected against all future attacks.
For those that are a little more hands on here is the best way we have found to remove this bad boy. This will remove WinX defender on both Vista and XP.
Win X Defender Removal Instructions
We are going to do a system restore. Relax your data is still safe. Once you are logged into Windows click the Windows Start button on the bottom left. Select “All Programs” then “Accessories” then “System Tools” then “System Restore”. You will now see the system restore box. Select “Restore My Computer to an Earlier time” and click next. Now you will see a calendar on the left. Select a date before you started having this issue. For Example if you were infected a week ago then go back two weeks just to be safe. Once you have a selected a date click next and then next again. Your computer will now go through and un-install any software after that restore date. Keep in mind that by doing this you will loose any programs you installed after the date you selected. None of your documents or pictures will be lost during this process.
Remove Win X Defender Traces.
When the computer re-boots you should no longer see the WinX Defender running. If this happens go to the end of this guide.
For the rest of you who no longer get the pop-up, we now need to clean up the left over traces. Browse to C:\Program Files\ through the My Computer Icon. Under the windows stat button. Right click on the WinXDefender folder and hit delete. Say yes to all. Now delete the following files as well. You may not have all or any of the bellow but if you do remove them.
C:\Documents and Settings\[CURRENT USER]\Application Data\WinXDefender\base2.dat
C:\Documents and Settings\[CURRENT USER]\Application Data\WinXDefender\Desc.dat
C:\Documents and Settings\[CURRENT USER]\Application Data\WinXDefender\base.dat
C:\Documents and Settings\[CURRENT USER]\Desktop\WinXDefender.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\WinXDefender\Purchase License.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\WinXDefender\Support Page.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\WinXDefender\Start WinXDefender.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\WinXDefender\WinXDefender Uninstall.lnk
For the last step you will need to go into the registry and remove a file. For many the system restore already undid this change so the value may not be there.
Delete WinXDefender registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”WinXDefender” = “C:\Program Files\WinXDefender\WinXDefender.exe”
Now open up your web browser. If your home page is not the one you want then go to the Windows Start menu > Control Panel > Internet Options. Next, under Home Page, select the General > Use Default. Type in the URL you want as your home page then select Apply > OK.
For those that were still infected after the system restore with the WinX Defender program then you will have to boot into safe mode and then follow this guide from step two on. For a more detailed spyware removal guide check out our Spyware removal Guide.