According to the link below, MalwareBytes will remove it. HTH.

Terry

Here is a link that might be useful: How to remove WinPC Defender

yes open your malwarebytes, be sure to update it then run full scan and let it clean what it finds. It sounds like you have one of the versions of antivirus xp which often times also has a rootkit payload. Why don't you do the malwarebytes scan then post your log results here for us to look at so we know what it is we are dealing with.
# select Perform full scan, then click Scan.
# When the scan is complete, click OK, then Show Results to view the results.
# Be sure that everything is checked, and click Remove Selected.
# When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
# Please post contents of that file in your next reply.

Thanks so much! I did run Malwarebytes this morning, but it didn't remove the defender program. This afternoon it did. I must have done something wrong. Here is the log:
(Let me know if you think I should do something else.)

Malwarebytes' Anti-Malware 1.34
Database version: 1864
Windows 5.1.2600 Service Pack 3

3/18/2009 1:28:12 PM
mbam-log-2009-03-18 (13-28-12).txt

Scan type: Quick Scan
Objects scanned: 73661
Time elapsed: 7 minute(s), 57 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 8
Registry Values Infected: 1
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
C:\Documents and Settings\Stephanie Turner\Application Data\pcdefender.exe (Rogue.Installer) -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\ieocxapp.ieocx (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\(a54dc52d-7aad-4d40-a126-337211631edc) (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\(4b66e1df-4de3-4cda-83b5-11673eadab0b) (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\(96ad72e4-2e2b-4ffc-a5bb-279c2714af12) (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\(96ad72e4-2e2b-4ffc-a5bb-279c2714af12) (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\(96ad72e4-2e2b-4ffc-a5bb-279c2714af12) (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ieocxapp.ieocx.1 (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\WinPC Defender (Rogue.WinPCDefender) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysav (Rogue.Installer) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Stephanie Turner\Application Data\pcdefender.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\WINDOWS\ieocx.dll (Trojan.BHO) -> Quarantined and deleted successfully.
C:\Documents and Settings\Stephanie Turner\Application Data\BIT3E.tmp (Rogue.Installer) -> Quarantined and deleted successfully.

looks good, it apparently got it all this time, I would recommend running your full scan malwarebytes every day or so for about a week just to make sure nothing comes back.

i'm glad malwarebytes helped. i use it myself and it's pretty good with all those frauds and pop-ups. but i must say that theres another way to delete winpc defender. here's win pc defender removal.

Here is a link that might be useful: win pc defender removal

I wouldn't trust the removal tool at the link that bobkelso posted, he just joined our forum today to post this and the tool is from the same scum company that downloads this crap originally to unknowing peoples computers.

Excuse me for intruding with a personal opinion but I think it could possible be a bit risky to post malware type scan logs on this site from a computer, even from a non compromised computer. Doesnt make sense.

i understand the skepticism but i only posted the link because there's a manual removal tutorial. most of antispyware tools are similar but sometimes you can't update them or you can't run them because malware blocks everything. these are the cases when you may need to delete infections manually.

my apology bobkelso, I did see the manual removal instructions.

the reason for the need to see the log is to determine the exact infections on the pc, in some cases we will know by seeing the log that the infections they had will definitely need further work using some of the specialized tools like combofix which would be done on one of the support forums, therefore we would then know to have them register and get the needed assistance there on an ASAP support forum with professional helpers. With out seeing the log they may continue with a partial removal when they really need more intense cleaning procedures.

Here's another useful WinPC Defender removal guide with automatic removal tool: http://www.2-viruses.com/remove-winpc-defender