SecureDefense is a rogue antivirus that is distributed using malware. It belongs to Wini rogue family, together with IronProtector and similar rogues. Typically, you start getting alerts of SecureDefense after downloading Flash or other software updates to watch specific movie files. While you can get other malware from these updates (like notorious Security Tool), you might catch SecureDefense or related rogues as well.
After this fake antivirus is installed, you get a fake windows security center, countless alerts about system vulnerability and faked system scan in startup. Fake alerts look like this:
Security Center Alert!
Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dropper or similar.
Do you want SecureDefense to block this attack?
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of SecureDefense and remove spyware threats from your PC.
After clicking you are redirected to pages to download or purchase full version of this scam. Most of other pages are blocked, as a hijacker is installed in usual browsers. The Secure Defense hijacker will show a warning like this when opening safe and reputable websites to download legitimate tools:
Reported Insecure Browsing: Navigation blocked
Insecure Internet activity. Thread of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without your knowledge, and that can lead to system slowdown, freezes, and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, register SecureDefense. We recommend you to protect your PC now continue safe Internet Browsing.
This warning can be removed by rebooting into safe mode, disabling all unknown add-ons from the browser and removing proxy server.
Removal instructions for Defense Center
SecureDefense should be removed in safe mode. Reboot, press F8 and choose from menu safe mode with networking. For identifying and removing I recommend spyhunter or Malwarebytes, as this software uses random file and process names (according to bleepingcomputers). The best way to identify these files and processes is to run scan or do following:
1. Start Task manager, and check processes under your username that are named like garbage. Check our process stopping guide if you face problems. You will notice that fake SecureDefense security center and popups disappear once you kill the malicious process.
2. Start MSConfig and check all processes that are started from your registry and reside in windows system directory OR somewhere under your account and uncheck them. Reboot afterwards.
These things, done properly, should disable SecureDefense, though it will not replace scan with Anti-Malware tools (like spyhunter or Malwarebytes) or good security internet security Suites provide.
Automatic Malware removal tools