Remove System Defender - SystemDefender Removal Information

System Defender has come from those hackers created System Warrior, System Veteran and System Fighter. Each of these programs is rogue anti-spyware application. What they have in common is a strategy they use to trick ordinary users into buying absolutely worthless software. System Defender sneaks into your computer with the using of Trojan viruses or numerous misleading websites. Once inside your machine, System Defender will run the fake system scan. Very predictable that it is going to show tons of infections inside. That all was made to make you be afraid about your PC and search for solutions of the problem occurred. System Defender is going to give you a fast link where you are able to download and purchase the “registered” license at. Either way, System Defender will not allow you to remove those malicious threats from your computer. We entreat you not to trust System Defender because everything it does is just a simple scam. Another very important fact about System Defender is that this badware will always bother you with annoying pop-ups or notifications stating about the importance of the license purchasing or that your machine is in high risk of being infected. Every time you log on into Windows, System Defender will start doing its nasty job. Moreover, System Defender is going to block related security websites in order to prevent its detection. With time passed by, System Defender will use Trojan virus and download more and more malicious files on your computer, indisputably without your knowledge or consent. Everything has been said: do not ever trust System Defender and under no circumstances purchase its products and get rid of this badware as soon as it is possible.

Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshots:

System Defender Automatical Removal Tool

How to remove System Defender manually:

It's possible to remove System Defender manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.

The files to be deleted:

%Documents and Settings%\All Users\Application Data\117fc
%Documents and Settings%\All Users\Application Data\117fc\WS339.exe
%Documents and Settings%\All Users\Application Data\117fc\WSD.ico
%Documents and Settings%\All Users\Application Data\WSDDSys
%Documents and Settings%\All Users\Application Data\WSDDSys\wsd.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\System Defender.lnk
%UserProfile%\Application Data\System Defender
%UserProfile%\Application Data\System Defender\cookies.sqlite
%UserProfile%\Application Data\System Defender\Instructions.ini
%UserProfile%\Desktop\System Defender.lnk
%UserProfile%\Desktop\xp_7a9be\
%UserProfile%\Desktop\xp_7a9be\68.mof
%UserProfile%\Desktop\xp_7a9be\mozcrt19.dll
%UserProfile%\Desktop\xp_7a9be\sqlite3.dll
%UserProfile%\Desktop\xp_7a9be\WSDDSys
%UserProfile%\Desktop\xp_7a9be\WSDDSys\vd952342.bd
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\ddv.tmp
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\std.sys
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Recent\tjd.exe
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\System Defender.lnk
%UserProfile%\Start Menu\Programs\System Defender.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml


Remove registry entries:

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_7a9be.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=220&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1″
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=220&q={searchTerms}”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “System Defender”

Please be careful because manual removal of System Defender may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.