How to remove System Defender
Monday, November 16th, 2009 at 2:30 amHome » Rogue Antispyware » System Defender
System Defender description
Don’t expect System Defender to defend your computer. It’s a rogue tool designed to milk your money.
SystemDefender reports a bunch of malicious files and encourages buying the program for deleting the threats. The paid version of System Defender is a hoax. The infections detected by this program are made-up. System Defender installs several harmless files and later it reports them as computer parasites. Don’t fall for this fraud and remove System Defender as soon as possible.
SystemDefender may redirect web browser to malicious websites. It may also block real security applications in order to prevent a victim from deleting SystemDefender.
System Defender is a Rogue Antispyware software
How to manually remove System Defender
To remove System Defender spyware you must block System Defender sites, stop and remove processes, unregister DLL files, search and delete all other System Defender files and registry utility. Follow the System Defender detection and removal instructions below.
The most typical software removal method is to remove System Defender by using "Add or Remove Programs" service. However there may be hidden System Defender files, running processes and registries in your computer, so System Defender may recreate all other files after reboot.
System Defender manual removal instructions
Stop and remove System Defender processes:
tjd.exe
ppal.exe
WS339.exe
Read more how to kill System Defender processes
Locate and delete System Defender registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_7a9be.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=220&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=220&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System Defender"
Read more how to delete System Defender registry entries
Download RegistryBooster 2010 to scan errors caused by System Defender
Search and unregister System Defender DLL libraries:
tempdoc.dll
PE.dll
cid.dll
CLSV.dll
ANTIGEN.dll
sqlite3.dll
mozcrt19.dll
Read more how to unregister System Defender DLL files
Detect and delete other System Defender files:
c:\Documents and Settings\All Users\Application Data\117fc
c:\Documents and Settings\All Users\Application Data\117fc\WS339.exe
c:\Documents and Settings\All Users\Application Data\117fc\WSD.ico
c:\Documents and Settings\All Users\Application Data\WSDDSys
c:\Documents and Settings\All Users\Application Data\WSDDSys\wsd.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\System Defender.lnk
%UserProfile%\Application Data\System Defender
%UserProfile%\Application Data\System Defender\cookies.sqlite
%UserProfile%\Application Data\System Defender\Instructions.ini
%UserProfile%\Desktop\System Defender.lnk
%UserProfile%\Desktop\xp_7a9be\
%UserProfile%\Desktop\xp_7a9be\68.mof
%UserProfile%\Desktop\xp_7a9be\mozcrt19.dll
%UserProfile%\Desktop\xp_7a9be\sqlite3.dll
%UserProfile%\Desktop\xp_7a9be\WSDDSys
%UserProfile%\Desktop\xp_7a9be\WSDDSys\vd952342.bd
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\ddv.tmp
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\std.sys
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Recent\tjd.exe
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\System Defender.lnk
%UserProfile%\Start Menu\Programs\System Defender.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
We strongly recommend you to use spyware remover to track System Defender and automaticaly remove System Defender processes, registries and files as well as other spyware threats.


