Remove Windows System Defender. Description and removal instructions

 
Title: Windows System Defender
Also known as: WindowsSystemDefender, WindowsSystem Defender, Windows SystemDefender
Type: Spyware
Severity scale:Windows System Defender severity is 72  (72 / 100)
 
Windows System Defender is a misleading security application that gives false reports of threats on your computer to make you think your PC is badly infected with malware. The rogue application is from the same family as Windows PC Defender and Windows Protection Suite. When running, it will prompt you to pay for a full version of the program to remove the threats which do not even exist. Do not purchase this malware and uninstall Windows System Defender from your PC as soon as possible.

Once Windows System Defender is installed, it performs the following actions:

  • Creates a startup registry entry so that it executes whenever Windows starts

  • Modifies Windows Hosts file, blocks access to certain security websites

  • Produces outbound traffic

  • May request other malicious files from the Internet



Another interesting thing is that the program supposedly removes several infections for free. You have to pay if you want to remove all infections. What is more, WindowsSystem Defender will constantly display fake security alerts and notifications from Windows Task bar. The fake notification states:


System alert
malicious applications, which can contain trojans, were found on your PC and need to be immediately removed. Click here to remove these potentially harmful items using Windows System Defender.

Pop-up message in System Tray
Windows System Defender security alert

Windows System Defender will also impersonate Windows Security Center and state that your computer is unprotected. It will suggest you to active Windows SystemDefender in order to ensure full system protection. However, please note that the legitimate one does not promote any anti-virus software, that's the main difference. The misleading application, will block certain security software too. If you find that your computer is infected with this malware, please use the removal guide below to remove Windows System Defender manually for free. We also recommend you to scan your computer with a reputable and legitimate anti-spyware application. If you have inadvertently purchased this program, please contact your credit card company immediately.


Related files: WS83b.exe, 8727.mof, mozcrt19.dll, sqlite3.dll, WSD.ico, vd952342.bd, wsd.cfg, Windows System Defender.lnk, cookies.sqlite, ANTIGEN.dll, cid.dll, ddv.dll, eb.sys, eb.tmp, energy.sys, exec.dll, exec.tmp, FS.exe, kernel32.drv, PE.drv, PE.sys, PE.tmp, ppal.dll, SICKBOY.exe, search.xml

Windows System Defender properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Windows System Defender snapshot:
Windows System Defender removal

Automatic Windows System Defender removal:

remover for Windows System Defender

Windows System Defender manual removal:

Kill processes:
[RandomNumber.exe] for example WS83b.exe FS.exe SICKBOY.exe
Delete registry values:
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=222&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" => "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows System Defender"
Unregister DLLs:
mozcrt19.dll sqlite3.dll ANTIGEN.dll cid.dll ddv.dll exec.dll ppal.dll

Delete files:
WS83b.exe 8727.mof mozcrt19.dll sqlite3.dll WSD.ico vd952342.bd wsd.cfg Windows System Defender.lnk cookies.sqlite ANTIGEN.dll cid.dll ddv.dll eb.sys eb.tmp energy.sys exec.dll exec.tmp FS.exe kernel32.drv PE.drv PE.sys PE.tmp ppal.dll SICKBOY.exe search.xml
Delete directories:
%UserProfile%\Application Data\Windows System Defender
c:\Documents and Settings\All Users\Application Data\61a60\WSDDSys
c:\Documents and Settings\All Users\Application Data\61a60
c:\Documents and Settings\All Users\Application Data\WSDDSys

Other programs to remove Windows System Defender:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 22/10/09
Information updated: 11/11/09

Additional resources related to Windows System Defender:

Attention: If you know or you have a website or page about Windows System Defender removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Windows System Defender parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by . 2009-11-11 15:11:07
yeah...it sucks..it doesn't help us removing it...
we have to buy the program first...what a waste

2. by . 2009-11-11 12:11:25
thank you so much dude....
I am very lucky to find this website because I almost bought the program ..
thanks for the information

3. by . 2009-11-11 11:11:59
don't down;oad this tool!!! will not remove - just wants you to buy

4. by . 2009-11-10 17:11:02
If Task manager is not showing up, checkthe following entry in the registry:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstaskmgr.exe
If there is an registry key called Debugger, delete it and you will be able to launch task manager.


Latest spyware news:
Similar parasites:
Related discussions: