<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: How to Remove Malware Defender 2009 (Removal info)</title>
	<atom:link href="http://www.xp-vista.com/spyware-removal/malware-defender-2009/feed" rel="self" type="application/rss+xml" />
	<link>http://www.xp-vista.com/spyware-removal/malware-defender-2009</link>
	<description>Your Ultimate Source for Windows Security</description>
	<lastBuildDate>Thu, 18 Mar 2010 17:10:30 -0400</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Oblifffen</title>
		<link>http://www.xp-vista.com/spyware-removal/malware-defender-2009/comment-page-1#comment-22734</link>
		<dc:creator>Oblifffen</dc:creator>
		<pubDate>Wed, 22 Apr 2009 13:00:30 +0000</pubDate>
		<guid isPermaLink="false">http://www.xp-vista.com/?p=2215#comment-22734</guid>
		<description>hmm... nice :)</description>
		<content:encoded><![CDATA[<p>hmm&#8230; nice <img src='http://www.xp-vista.com/forums/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John from MA</title>
		<link>http://www.xp-vista.com/spyware-removal/malware-defender-2009/comment-page-1#comment-22127</link>
		<dc:creator>John from MA</dc:creator>
		<pubDate>Fri, 20 Mar 2009 21:33:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.xp-vista.com/?p=2215#comment-22127</guid>
		<description>To whom it may concern:
My nephew clicked on a welding website and the Malware Defender 2009 came up and he stopped with the popup asking to scan the pc. I took over and stopped the iexplorer.exe process. But noticed the following processes running, 11374.exe, 8086.exe  and userinit.exe., also every couple of seconds a second 8086.exe would appear. My cpu usage was at 85% then went to 99% and the pf usage was starting to climb rapidly from 383M/1245M to 946M/1245M. I stopped the 3 extra processes (plus jqs.exe for  mem usage, mem delta, &amp; pf delta climbing fast) from running (this only works for a short time you have to keep killing the 3 extra processes) and proceeded to use the above info. but could not find anything mentioned. 
Resolve: Deleted 11374.exe, 8086.exe, 20232.exe from %Locals~1\TEMP folder. Deleted the 8086.exe from the prefetch folder on a search. Deleted the key &quot;Cognac&quot; in the registry after a search on &quot;malware&quot;. Stopped the userinit.exe from running in the processess and Rebooted. On the power up userinit.exe was still running, stopped the process and deleted the userinit.exe (also noticed it was in the form of an iexplorer icon) from Windows\system32 folder (this will reinsert itself as a blank executable icon) and rebooted again. No issues. Hope this will help if it happens to someone else.</description>
		<content:encoded><![CDATA[<p>To whom it may concern:<br />
My nephew clicked on a welding website and the Malware Defender 2009 came up and he stopped with the popup asking to scan the pc. I took over and stopped the iexplorer.exe process. But noticed the following processes running, 11374.exe, 8086.exe  and userinit.exe., also every couple of seconds a second 8086.exe would appear. My cpu usage was at 85% then went to 99% and the pf usage was starting to climb rapidly from 383M/1245M to 946M/1245M. I stopped the 3 extra processes (plus jqs.exe for  mem usage, mem delta, &amp; pf delta climbing fast) from running (this only works for a short time you have to keep killing the 3 extra processes) and proceeded to use the above info. but could not find anything mentioned.<br />
Resolve: Deleted 11374.exe, 8086.exe, 20232.exe from %Locals~1\TEMP folder. Deleted the 8086.exe from the prefetch folder on a search. Deleted the key &#8220;Cognac&#8221; in the registry after a search on &#8220;malware&#8221;. Stopped the userinit.exe from running in the processess and Rebooted. On the power up userinit.exe was still running, stopped the process and deleted the userinit.exe (also noticed it was in the form of an iexplorer icon) from Windows\system32 folder (this will reinsert itself as a blank executable icon) and rebooted again. No issues. Hope this will help if it happens to someone else.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
