Virus RemovalIf You Need Expert Help we recommend you hire a Ninja! Ninja's are well trained in the art of virus removal and can remove all threats from your computer right now. See this Computer Repair site or check out www.pcninja.com for live help.

System Defender

Virus Info: System Defender is fake anti-spyware belonging to the Virus Doctor family of rogue software, and is merely a newer version of the well-known Windows System Defender. It acts in the same manner as any other rogue software by trying to convince users to buy a license for the software. System Defender enters a user’s computer via advertisers and scammers who aggressively promote the software via fake websites. These advertisers and scammers use social engineering techniques to trick users in to installing System Defender on their computers. Once it has been installed, System Defender starts performing fake system scans at regular intervals, returning results that claim that the user’s system is under serious threat. It also creates a number of harmless files that it later detects as dangerous viruses. System Defender uses a Windows-style GUI and pop-ups generated from the Windows taskbar to convince users that this is the real thing. Then it claims that the currently installed ‘trial’ version is inadequate to remove the previously detected false ‘threats and urges the user the pay for the ‘full’ version of the software. However, the ‘full’ version is no more capable of cleaning a user’s system than the ‘trial’ version, therefore no user should ever purchase the false license to this rogue software

System Defender

System Defender

» Download Spyware Doctor With Antivirus here

As System Defender aggressively tries to prevent its removal by blocking Windows utilities, you will have to restart your computer in Safe Mode before you attempt to remove it. In order to remove System Defender, you will have to stop its processes, unregister its DLLs, delete its files and folders and remove its registry entries.

System Defender File Removal Procedures

The first step you must take to remove System Defender is to kill the following processes: ( Learn how to terminate a running process )

  • WS339.exe
  • ppal.exe
  • tjd.exe

Claim Your Free Scan of Spyware Doctor with Antivirus

Next, it is necessary to unregister the following DLL files which are related to System Defender:

  • mozcrt19.dll
  • tempdoc.dll
  • sqlite3.dll
  • CLSV.dll
  • PE.dll

Now you are ready to delete the following files and folders:

  • c:Documents and SettingsAll UsersApplication Data117fc
  • c:Documents and SettingsAll UsersApplication Data117fcWS339.exe
  • c:Documents and SettingsAll UsersApplication Data117fcWSD.ico
  • c:Documents and SettingsAll UsersApplication DataWSDDSys
  • c:Documents and SettingsAll UsersApplication DataWSDDSyswsd.cfg
  • %UserProfile%Application DataMicrosoftInternet ExplorerQuick LaunchSystem Defender.lnk
  • %UserProfile%Application DataSystem Defender
  • %UserProfile%Application DataSystem Defendercookies.sqlite
  • %UserProfile%Application DataSystem DefenderInstructions.ini
  • %UserProfile%DesktopSystem Defender.lnk
  • %UserProfile%Desktopxp_7a9be
  • %UserProfile%Desktopxp_7a9be68.mof
  • %UserProfile%Desktopxp_7a9bemozcrt19.dll
  • %UserProfile%Desktopxp_7a9besqlite3.dll
  • %UserProfile%Desktopxp_7a9beWSDDSys
  • %UserProfile%Desktopxp_7a9beWSDDSysvd952342.bd
  • %UserProfile%RecentANTIGEN.dll
  • %UserProfile%RecentANTIGEN.sys
  • %UserProfile%RecentANTIGEN.tmp
  • %UserProfile%Recentcid.dll
  • %UserProfile%RecentCLSV.dll
  • %UserProfile%Recentddv.tmp
  • %UserProfile%RecentPE.dll
  • %UserProfile%RecentPE.drv
  • %UserProfile%RecentPE.sys
  • %UserProfile%Recentppal.exe
  • %UserProfile%Recentrunddlkey.drv
  • %UserProfile%Recentstd.sys
  • %UserProfile%Recenttempdoc.dll
  • %UserProfile%Recenttjd.exe
  • %UserProfile%Recenttjd.sys
  • %UserProfile%Start MenuSystem Defender.lnk
  • %UserProfile%Start MenuProgramsSystem Defender.lnk
  • c:Program FilesMozilla Firefoxsearchpluginssearch.xml

Once these files and folders have been removed, your hard disk no longer contains anything related to System Defender. However, in order to make sure that this is accurate, it is recommended to scan the entire computer using a genuine antivirus software such as Spyware Doctor with Antivirus.

System Defender Registry Removal Procedures

In order to completely remove System Defender, delete the following keys and settings from the Windows Registry: (How to Edit Registry Here)

  • HKEY_CLASSES_ROOTCLSID{3F2BBC05-40DF-11D2-9455-00104BC936FF}
  • HKEY_CLASSES_ROOTxp_7a9be.DocHostUIHandler
  • HKEY_CURRENT_USERSoftwareClassesSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = http://search-gala.com/?&uid=220&q={searchTerms}
  • HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"
  • HKEY_CLASSES_ROOTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = http://search-gala.com/?&uid=220&q={searchTerms}
  • HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "System Defender"

Now it is safe to say that your system is completely safe from System Defender.

Conclusion

It is not recommended for inexperienced users to try and manually remove System Defender, as any wrong move on your part could damage your system permanently. Unless you are an experienced computer user, the best way to remove System Defender

Other Software clients that Removevirus.org likes to use

  • Spyware Doctor with Antivirus
  • Norton
  • Trend Micro
  • Kaspersky
  • AVG
  • MalwareBytes

As always please post updates to the file traces. If yours are different then other users will find it helpful.

VN:F [1.9.10_1130]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.10_1130]
Rating: 0 (from 0 votes)
RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.