Severity scale  
  (72/100)

Windows System Defender. How to Remove? (Uninstall Guide)

removal by - -   Also known as WindowsSystemDefender, WindowsSystem Defender, Windows SystemDefender | Type: Rogue Antispyware
12
Windows System Defender is a misleading security application that gives false reports of threats on your computer to make you think your PC is badly infected with malware. The rogue application is from the same family as Windows PC Defender and Windows Protection Suite. When running, it will prompt you to pay for a full version of the program to remove the threats which do not even exist. Do not purchase this malware and uninstall Windows System Defender from your PC as soon as possible.

Once Windows System Defender is installed, it performs the following actions:

  • Creates a startup registry entry so that it executes whenever Windows starts

  • Modifies Windows Hosts file, blocks access to certain security websites

  • Produces outbound traffic

  • May request other malicious files from the Internet



Another interesting thing is that the program supposedly removes several infections for free. You have to pay if you want to remove all infections. What is more, WindowsSystem Defender will constantly display fake security alerts and notifications from Windows Task bar. The fake notification states:


System alert
malicious applications, which can contain trojans, were found on your PC and need to be immediately removed. Click here to remove these potentially harmful items using Windows System Defender.

Pop-up message in System Tray
Windows System Defender security alert

Windows System Defender will also impersonate Windows Security Center and state that your computer is unprotected. It will suggest you to active Windows SystemDefender in order to ensure full system protection. However, please note that the legitimate one does not promote any anti-virus software, that's the main difference. The misleading application, will block certain security software too. If you find that your computer is infected with this malware, please use the removal guide below to remove Windows System Defender manually for free. We also recommend you to scan your computer with a reputable and legitimate anti-spyware application. If you have inadvertently purchased this program, please contact your credit card company immediately. Related files: mozcrt19.dll, sqlite3.dll, cookies.sqlite, exec.dll, FS.exe

Windows System Defender properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows System Defender. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Windows System Defender. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes Windows System Defender (2009-10-22 00:54:36)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Windows System Defender (2009-10-22 00:54:36)
Plumbytes
We are testing Plumbytes's efficiency (2009-11-11 15:11)
Hitman Pro
STOPzilla
Tested and Confirmed! STOPzilla removes Windows System Defender (2009-10-22 00:54:36)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Windows System Defender (2009-10-22 00:54:36)
Webroot SecureAnywhere AntiVirus
Windows System Defender screenshot
Windows System Defender snapshot

Windows System Defender manual removal

Kill processes:
[RandomNumber.exe] for example WS83b.exe
FS.exe
SICKBOY.exe

Delete registry values:
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=222&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" => "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows System Defender"
Unregister DLLs:
mozcrt19.dll
sqlite3.dll
ANTIGEN.dll
cid.dll
ddv.dll
exec.dll
ppal.dll

Delete files:
WS83b.exe
8727.mof
mozcrt19.dll
sqlite3.dll
WSD.ico
vd952342.bd
wsd.cfg
Windows System Defender.lnk
cookies.sqlite
ANTIGEN.dll
cid.dll
ddv.dll
eb.sys
eb.tmp
energy.sys
exec.dll
exec.tmp
FS.exe
kernel32.drv
PE.drv
PE.sys
PE.tmp
ppal.dll
SICKBOY.exe
search.xml
Delete directories:
%UserProfile%\Application Data\Windows System Defender
c:\Documents and Settings\All Users\Application Data\61a60\WSDDSys
c:\Documents and Settings\All Users\Application Data\61a60
c:\Documents and Settings\All Users\Application Data\WSDDSys

Geolocation of Windows System Defender

Map reveals the prevalence of Windows System Defender. Countries and regions that have been affected the most are: United States and United Kingdom.

Information updated:

Comments on Windows System Defender

0
0
<Guest>
yeah...it sucks..it doesn't help us removing it...
we have to buy the program first...what a waste
0
0
<Guest>
thank you so much dude....
I am very lucky to find this website because I almost bought the program ..
thanks for the information
0
0
<Guest>
don't down;oad this tool!!! will not remove - just wants you to buy
0
0
<Guest>
If Task manager is not showing up, checkthe following entry in the registry:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstaskmgr.exe
If there is an registry key called Debugger, delete it and you will be able to launch task manager.

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)