Title: Security Defender

Type: Rogue Antispyware

Also known as: SecurityDefender

Remove Security Defender
Removal instructions

Severity scale:

(62 / 100)

Security Defender is a rogue anti-spyware program that is closely connected to win32/defmid trojan that usually comes undetected. In addition, after being installed it uses fake scan results and false security alerts as a method to make you think you are infected with viruses. It impersonates Windows Defender which is a legitimate anti-spyware program. The rogue simulates a system scan and reports fake infections. It then prompts to pay for a full version of the program to remove the threats. Actually, it just tries scams you out of your money. If you have paid for the this program already then I suggest you contact your credit card company and dispute the charges. Security Defender is configured to start automatically when you login to Windows. It detects non-existent or harmless files as malware but does not allow you to remove them until you purchase the full version of the program.

While Security Defender is running you will also see many f fake security alerts and warnings on your computer. These warnings will state that your computer is infected or that someone is trying to hack your computer and then suggest you purchase Security Defender to protect yourself. Some of the fake alerts:

Security Defender Firewall Alert
Suspicious activity in your registry system space was detected. Rogue malware detected in your system. Data leaks and system damage are possible. Please use a deep scan option.

Harmful software detected
Security Defender has detected malicious software that may cause crash of your computer. Click Remove All button to remove them now.

Security Defender

External software tries to control variety of your system files. This may lead to breaking of some data in your system. Click here to protect remote access to your PC & delete these programs.

Security Defender

Your system has come under attack of harmful software. Click here to deactivate it.

Remove spyware and other potentially unwanted software

System Defender detected 18 harmful application(s). It is recommended to clean your computer immediately. Click this balloon to fix the problem.

These alerts, like the fake infections, are just another attempt of the program to try and convince you that you are infected. You should ignore anything this program reports to you. If you are infected with Security Defender, please do not purchase it. Instead use the removal guide below to remove this program and related malware manually for free or using our automatic removal tool given below.

Related files: [random_].mkv, [random].avi, [random].ico, [random].lnk, Security Defender.dll, [random].dll

Security Defender properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Security Defender snapshot:

Automatic Security Defender removal:

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Security Defender you agree to our privacy policy and agreement of use.

remover for Security Defender

SpyHunter is recommended remover to uninstall Security Defender. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of Security Defender and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Security Defender using SpyHunter please report this to us.

Malwarebytes Anti Malware

Download | review

Tested and Confirmed! Malwarebytes Anti Malware removes Security Defender (2011-02-11 02:40:50)

STOPzilla

Download | review

Tested and Confirmed! STOPzilla removes Security Defender (2011-02-11 02:40:50)

Spyware Doctor

Download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Security Defender (2011-11-02 11:44:06)

XoftSpySE Anti Spyware

Download | review

Security Defender manual removal:

FORUM:
Discuss Security Defender in
spyware removal forum

Kill processes:
[random].exe
%UserProfile%\Local Settings\Application Data\pw.exe
%UserProfile%\Local Settings\Application Data\vz.exe
%UserProfile%\Local Settings\Application Data\MSASCui.exe
%UserProfile%\AppDataLocal\pw.exe
%UserProfile%\AppDataLocal\vz.exe
%UserProfile%\AppDataLocal\MSASCui.exe

HELP:
how to kill malicious processes

Delete registry values:
HKCU\Software\Classespezfile
HKCR\pezfile
HKCU\Software\Classes.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1? %*
HKCU\Software\Classes\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Datapw.exe” /START “%1? %*
HKCU\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “%1? %*
HKCU\Software\Classes\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “%1? %*
HKCR\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1? %*
HKCR\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “%1? %*
HKCR\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “%1? %*
HKCR\pezfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “%1? %*
HKLM\SOFTWARE\Clients\StartMenu\Internet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKLM\SOFTWARE\Clients\StartMenu\Internet\FIREFOX.EXE\shell\safemodecommand “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKLM\SOFTWARE\Clients\Start\Menu\Internet\IEXPLORE.EXE\shell\opencommand “(Default)” = “%UserProfile%\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKLM\SOFTWARE\Clients\StartMenu\Internet\FIREFOX.EXE\shell\opencommand “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKLM\SOFTWARE\Clients\StartMenu\Internet\FIREFOX.EXE\shell\safemodecommand “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKLM\SOFTWARE\Clients\Start\Menu\Internet\IEXPLORE.EXE\shell\opencommand “(Default)” = “%UserProfile%\Local Settings\Application Data\vz.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKLM\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKLM\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random]"

HELP:
how to remove registry entries

Unregister DLLs:
Security Defender.dll
[random].dll

HELP:
how to unregister malicious DLLs

Delete files:
%UserProfile%\AppDataLocal\[random].exe
Security Defender.dll
%UserProfile%\AppDataLocal\[random].dll
%UserProfile%\Local Settings\Application Data\opRSK
%UserProfile%\Local Settings\Application Data\pw.exe
%UserProfile%\Local Settings\Application Data\vz.exe
%UserProfile%\Local Settings\Application Data\MSASCui.exe
%UserProfile%\AppDataLocal\opRSK
%UserProfile%\AppDataLocal\pw.exe
%UserProfile%\AppDataLocal\vz.exe
%UserProfile%\AppDataLocal\MSASCui.exe

HELP:
how to remove harmful files

Delete directories:
C:\Program Files\Security Defender

Phone Support to remove Security Defender

Forum discussions:

Modern viruses are really hard to remove. They have random file names, random registry entries, they can immitale legal products and files. Removal instructions sometimes can't Help to remove infection manually. Please take a look at our forum where users like you share they experience in fighting the parasite:

Security Defender Removal - tried the actions in the write-u - 14 Feb 2011

QR code for Security Defender removal instructions:

QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.

The reason we add QR code to the website is that parasites like Security Defender are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall Security Defender right in your pocket.

Simply use the QR scanner and read removal instructions from mobile device.

SYMPTOMS OF rogue antispyware INFECTION

Rogue AntiSpyware virus usually imitates the legal anti-spyware software or some essential system components. Typically virus gets inside the computer with a help of trojans, that use security vulnerabilities for that. After getting inside the system, it tries to make it look like your system is infected with the numerous parasites, so it starts ‘scanning’ and finds numerous threats.

All rogue Anti-spyware along with Security Defender have the same purpose: Get your money by using scare tactics. If you will believe that that fake threats are real and pay them money, you will not get them back even if you will ask to cancel the order in your Bank. All the infections are deceptive and you dont need to purchase their Paid version. You need to remove Rogue virus itself.

Information added: 2011-02-11 02:40:50
Information updated: 2012-03-22 00:26:34

Additional resources:

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

more resources

lynda

My daughter had that security defender to hit her computer today and we couldnt figure out how to get rid of it. There was no uninstalling it. we ran our malwarebytes spyware program and to our supprize it picked up the virus and removed it from our computer. Malwarebytes.org was recommended to us by Microsoft tech last year and we have used it quit a bit. It is a good program to have and has a free version to download.

Reply »

2011 10 23

Stephen

I just got "security defender" trojan today. I purchased Spyware doctor, updated it, and ran it twice. It would not detect and remove this thing. Neither would Malwarebytes antimalware software. Not sure where to go next. Im sick of spending money on things that advertise as a fix, and yet do not fix the problem.

Reply »

2011 12 05

Ivo

Symantic virus scanner identified the virus and deleted it.

Reply »

2012 01 23

Yiddish

Antivirus Scan is really needed that too if we go with Comodo Product we can attain our desired result.

Reply »

2012 03 22

Post Comment:

Attention: Use this form only if you have additional information about Security Defender parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Related discussions:

Security Defender Removal - tried the actions in the write-u

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.

Remove Security Defender Removal instructions

Automatic Security Defender removal:

Security Defender manual removal:

Forum discussions:

QR code for Security Defender removal instructions:

SYMPTOMS OF rogue antispyware INFECTION

Additional resources: