Internet Defender - How to remove

Internet Defender is another clone of fake security applications mimicking Windows Defender, a legitimate anti-malware program by Microsoft. It belongs to the same family as Security Defender and AntiMalware Defender, and is a resurrection of a less active branch of malware. Like other parasites of this family, Internet Defender is distributed by malware infecting legitimate pages, windows vulnerabilities and various downloads bundled with trojans. Sometimes, it is hard to pinpoint exact way how this malware infected your PC, but the symptoms are more or less the same:
First, Internet defender closes majority of open windows to draw attention to itself. Second, it will start showing various alerts to convince you that your PC is heavily infected with spyware, malware, trojans and other parasites:

Internet Defender
External software tries to control variety of your system files. This may lead to breaking of some data in your system. Click here to protect remote access to your PC & delete these programs.

Internet Defender
Spyware.IEMonster process is found. The virus is going to send your passwords from Internet browser (Explorer, Mozilla Firefox, Outlook & others) to the third-parties. Click here for further protection of your data with Internet Defender.

Internet Defender Firewall Alert
Suspicious activity in your registry system space was detected. Rogue malware detected in your system. Data leaks and system damage are possible. Please use a deep scan option.

Internet Defender Firewall Alert
Internet Defender has prevent a program from accessing the Internet.
“iexplore.exe” is infected with Trojan. This worm has tried to use “iexplore.exe” to connect to remove host and send your credit card information.

Internet Defender Firewall Alert
Your computer is being attacked from a remote machine!
Block Internet access to your computer to prevent system infection.
Attacker IP: [ip address]
Attack type: RCPT exploit

Despite these warnings, your system is not attacked by hackers directly, although the claims about infections is true: You are infected with fake antivirus Internet Defender itself. If you wonder why it is done so, it becomes crystal clear after you try running system scan with it: You are asked to provide credit card details to remove all the threats like Win32/GameVance, Win32/Yektel.A, Win32/FakeXPA or Win32/Renos.JI. You will not be able to remove these threats manually, as paths to these files are nonexistent, or it will show infections in legitimate files. Thus, this separates Internet Defender 2011 from real commercial removers that never install without user consent, uninstall normally when asked and provides full information about detected malicious files. You should never pay for such software, and it is better to remove Internet Defender as soon as noticed on PC.

Special Internet Defender removal instructions

Although Internet Defender might disable legitimate anti-malware programs, do the following to overcome this problem: Go START -> RUN and insert there taskkill /f /im rundll32.exe. Note that you should keep all the slashes and gaps! In addition, you can try to use Internet Defender registration code: D13F-3B7D-B3C5-BD84 (Thanks to S!ri.urz for confirming this) . If you enter that code in its activation section, majority of alerts and distrubances will be disabled. However, you should do a full system scan with Spyhunter, spyhunter,  Malwarebytes Anti-Malware or other anti-malware tool to detect the trojans comming with this malware and delete its .dll files. Also, due to trojans distributing this malware, do not forget clean up HOSTS file from redirects.

Automatic Malware removal tools

Manual removal