How to remove System Defender

Monday, November 16th, 2009 at 2:30 am
Home » Rogue Antispyware » System Defender

System Defender description

Don’t expect System Defender to defend your computer. It’s a rogue tool designed to milk your money.

SystemDefender

SystemDefender reports a bunch of malicious files and encourages buying the program for deleting the threats. The paid version of System Defender is a hoax. The infections detected by this program are made-up. System Defender installs several harmless files and later it reports them as computer parasites. Don’t fall for this fraud and remove System Defender as soon as possible.

SystemDefender may redirect web browser to malicious websites. It may also block real security applications in order to prevent a victim from deleting SystemDefender.

System Defender is a Rogue Antispyware software

How to manually remove System Defender

To remove System Defender spyware you must block System Defender sites, stop and remove processes, unregister DLL files, search and delete all other System Defender files and registry utility. Follow the System Defender detection and removal instructions below.

The most typical software removal method is to remove System Defender by using "Add or Remove Programs" service. However there may be hidden System Defender files, running processes and registries in your computer, so System Defender may recreate all other files after reboot.

System Defender manual removal instructions

Stop and remove System Defender processes:
tjd.exe
ppal.exe
WS339.exe
Read more how to kill System Defender processes

Locate and delete System Defender registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_7a9be.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=220&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=220&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System Defender"
Read more how to delete System Defender registry entries
Download RegistryBooster 2010 to scan errors caused by System Defender

Search and unregister System Defender DLL libraries:
tempdoc.dll
PE.dll
cid.dll
CLSV.dll
ANTIGEN.dll
sqlite3.dll
mozcrt19.dll
Read more how to unregister System Defender DLL files

Detect and delete other System Defender files:
c:\Documents and Settings\All Users\Application Data\117fc
c:\Documents and Settings\All Users\Application Data\117fc\WS339.exe
c:\Documents and Settings\All Users\Application Data\117fc\WSD.ico
c:\Documents and Settings\All Users\Application Data\WSDDSys
c:\Documents and Settings\All Users\Application Data\WSDDSys\wsd.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\System Defender.lnk
%UserProfile%\Application Data\System Defender
%UserProfile%\Application Data\System Defender\cookies.sqlite
%UserProfile%\Application Data\System Defender\Instructions.ini
%UserProfile%\Desktop\System Defender.lnk
%UserProfile%\Desktop\xp_7a9be\
%UserProfile%\Desktop\xp_7a9be\68.mof
%UserProfile%\Desktop\xp_7a9be\mozcrt19.dll
%UserProfile%\Desktop\xp_7a9be\sqlite3.dll
%UserProfile%\Desktop\xp_7a9be\WSDDSys
%UserProfile%\Desktop\xp_7a9be\WSDDSys\vd952342.bd
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\ddv.tmp
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\std.sys
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Recent\tjd.exe
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\System Defender.lnk
%UserProfile%\Start Menu\Programs\System Defender.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml

We strongly recommend you to use spyware remover to track System Defender and automaticaly remove System Defender processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: ,

Leave a Reply

Download does not start? Try a mirror download here