Is this the new comedy? IE Defender Related.
November 12th, 2007 by AndyAtHullWarning! The following may well offend you. If you do not wish to be offended by the worst type of comedy ever! Look away to your right and say bananas!
… seriously, I don’t want to be done for neck strain either … Let’s get on with it.
Some of you may have taken part or even read the thread at CastleCops which involved the authors from a classified rogue. The one thread that had us slamdunking the guys behind IE Defender. Well a week later and I think they are trying to be comedians.
On a different domain to the one IE Defender is on (iedefender(dot)com), they also set-up another domain;
www(dot)xiedefender(dot)com
And up until yesterday, this domain had a 403. Not anymore:

(Click to view a larger copy) – This was the look on the 11th of Nov.
This was the look of the domain on the 11th of November. And this clearly shows the lack of braincells one can have at any time. Not to mention these also create the rogues that cause alot of headache to computer users.
And to think we have lost is like thinking a horse and cart will always win a lap round Silverstone over a F1 car. Not even possible.
It appears the domain in question is changing its content, thanks to a tip from ShadowPuterDude. Would you trust the owners of your anti-malware/virus/spyware to have an attitude like this?

(Click to view a larger copy) This was the look on the 12th of Nov
The text the image above shows is now already outdated. It’s changed from:
IEDefender is coming... Yeah it will be today :)
To:
IEDefender is coming...
Now after the attempt to be comedians, these kids have probably stuck to their word and the domain, xiedefender(dot)com has fully changed:

(Click to view a larger copy) – This was the look on the 12th of Nov.
All the free removal tools we recommend will be updated as we have already got all new varients to nuke it. Just get yourself into our forum and chat about this. I’m sure we will.
Other Coverage:- MalwareTeks – Nellie2
Last Updated – 12th of Novemver 2007 21:57 pm
Filed under General, Off Topic, Rogue Programs, Security Related | 13 Comments »













November 12th, 2007 at 14:07
You should check out what it looks like today. “IEDefender is coming… Yeah it will be today :)”
November 12th, 2007 at 14:42
[...] Well, today Andy at Security Cadets, blogged this, Is this the new comedy? IE Defender Related. [...]
November 12th, 2007 at 23:44
Are they just idiots or do they just think we are all idiots ?
November 13th, 2007 at 02:59
[...] Now I’ve tickled your fancy… click here for the rest of it. [...]
November 13th, 2007 at 11:14
To answer your question as best we can, Mills, is like not answering at all as it’s pointless.
We will just plod along and keep reducing the money they gain and keep increasing the users we educate and help.
November 13th, 2007 at 19:44
Agreed Andy i ran that prog on a Virtual machine and if its not malware its about as close as you can get its install is dodgy its funtion is limited and does lot less than it says it does so speaking also as an end user i would class this as malware…
November 14th, 2007 at 00:23
I was researching some fake codecs and ran into there program bundled with the trojan. They just don’t get it do they.
November 14th, 2007 at 19:07
Hi sjpritch25 no they are not getting it and it seems they never will..
November 20th, 2007 at 00:49
Till I saw you here at Security Cadets I really thought I was going crazy with my husband’s computer re: IE DEFENDER. He got this silly thing downloading Picassa of all things and it attached itself to something with it and said “do you want to scan your computer”. Very sneeky. He would never want for a new virus protecter and so this is all just very annoying. He then of course clicked the ok button and started the chain not understanding the whole thing. NOW, I can’t get it off. Trying your solution. I have been working on it all day long. I truly believe that they do this on purpose after seeing how every time you get on explorer it MAKES you go to their site and download to see if you have a “virus” and then “pay” to get rid of it. This has been the most annonying thing as my husband had spybot and Norton (I know not the best) covering his computer. I don’t see why they did not stop it. arghhh
November 20th, 2007 at 20:21
Hello fergiswife,
I just deleted your account on our forum by accident :(.
We strongly advise for you to post the logs the removal guides produces.
Just re-register and post those logs for a check and we will advice you on anything else we can see and any qestions you may have.
Andy
November 26th, 2007 at 19:44
How do I get rid of the ieDefender.com from continually popping up on screen. HELP its driving me insane.
November 26th, 2007 at 23:19
Follow this:
http://forum.securitycadets.com/index.php?showtopic=4749
Or get step by step guide with a helper here:
http://forum.securitycadets.com/index.php?showforum=2
Andy
December 23rd, 2007 at 05:17
I do not believe this -_- I am so irritated with them now.
They could have at least warned me they were planning this..
Not a good thing to go out on.