MalwareTeks Blog

Since, writing and making FixIEDef available to the general public; free of charge of course; I’m starting to get some feed back from users that were infected by this piece of fraudware.

Comments can be viewed here: http://blog.malwareteks.com/?p=163#comments.

Also started receiving email feed back.

Rick said:

Dear ShadowPuterDude,

I just wanted to extend a thank-you for taking a stand against those assholes at IE Defender and not only calling them out on the carpet but by writing and providing the FixIEDef utility. I was infected the first time and was able to find the .dll that was causing the problem and delete it. But not two days later a new version that was almost impossible to correct and had me ready to throw my laptop out the window. I am a bit of a tech guy and this virus kicked my ass and had me on my last nerve as my IE was useless because the error message would not go away. I wrote to the IE Defender guys and got an e-mail back saying that they don’t hijack systems they fix them…… I found your script and I had everything fixed in moments. So again thank-you for your time and effort to help guys like me deal with a very nasty problem. You have a new fan and supporter of your site and what you do.

Sincerely, Rick <Last Name Removed>

Email message edited for format and spelling.

So, In you face! IE Defender.

FixIEDef can be download from the following locations:

Primary Download location:
MalwareTeks: http://downloads.malwareteks.com/FixIEDef.exe

Download Mirrors for FixIEDef:
http://it-mate.co.uk/downloads/fixiedef/fixiedef.exe
http://hosts-file.net/download/fixiedef/fixiedef.exe
http://avant.it-mate.co.uk/?c=Download&f=Tools/FixIEDef
http://archives.mysteryfcm.co.uk/?f=Security/AntiMalware/Antispyware/F ixIEDef

Instructions: See http://www.malwareteks.com/FixIEDef.php

Aggressive advertising well known forums and public boards such as yahoo under the domain 411-spyware.com claiming to remove rogues such as SpyLocked and previous ones. The tool they claim that removes these rogues is non other than SpyHunter, Enigma Software Group. Advice from these spammers acting as real users should be avoided at all costs!

read more | digg story

The RogueNET™ analysis center allows you to view statistics about the most dominant rogue products in the world. Below is a list of all rogue objects detected wordwide. There have been a total of 972 objects detected and removed by RogueRemover since 4/8/07.

read more | digg story

Many Microsoft Windows users who downloaded the recently released AntiSpyware program from Microsoft, or had it installed through an automatic Windows update, woke up to a surprise. Unintentionally, the heuristics of the software detected Internet Explorer as spyware, and removed the program from their systems.

read more | digg story

If you have been infected by the Gromozon Rootkit you can now get it removed. Download available from Prevx1.

“What is Gromozon and how did it manage to bypass my current security tools?

Unfortunately Gromozon is not a single infection, but a blended attack designed to bypass traditional anti-malware tools. The end result meaning that the machine is not only infected by several well known Trojans but also a highly dangerous Rootkit. Traditional AV vendors are at the moment dealing with the known infections but overlooking the rootkit.” - Prevx1 Gromozon Rootkit Removal Tool

It is highly recommended that once your machine has been cleaned of this infection, that you read the article, Protect Yourself From Malware: Tools And Tips, and adjust your practices, software, and settings as necessary