Remove System Defender - SystemDefender Removal Information
Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshots:

The files to be deleted:
%Documents and Settings%\All Users\Application Data\117fc
%Documents and Settings%\All Users\Application Data\117fc\WS339.exe
%Documents and Settings%\All Users\Application Data\117fc\WSD.ico
%Documents and Settings%\All Users\Application Data\WSDDSys
%Documents and Settings%\All Users\Application Data\WSDDSys\wsd.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\System Defender.lnk
%UserProfile%\Application Data\System Defender
%UserProfile%\Application Data\System Defender\cookies.sqlite
%UserProfile%\Application Data\System Defender\Instructions.ini
%UserProfile%\Desktop\System Defender.lnk
%UserProfile%\Desktop\xp_7a9be\
%UserProfile%\Desktop\xp_7a9be\68.mof
%UserProfile%\Desktop\xp_7a9be\mozcrt19.dll
%UserProfile%\Desktop\xp_7a9be\sqlite3.dll
%UserProfile%\Desktop\xp_7a9be\WSDDSys
%UserProfile%\Desktop\xp_7a9be\WSDDSys\vd952342.bd
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\ANTIGEN.tmp
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\ddv.tmp
%UserProfile%\Recent\PE.dll
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\std.sys
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Recent\tjd.exe
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\System Defender.lnk
%UserProfile%\Start Menu\Programs\System Defender.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
Remove registry entries:
HKEY_CLASSES_ROOT\xp_7a9be.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=220&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = “1?
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes “URL” = “http://search-gala.com/?&uid=220&q={searchTerms}”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “System Defender”
Written by admin on November 15th, 2009 with no comments.
Read more articles on fake warnings and AntiSpyware and removal tool and total defender and commander and spyware and Protection and antivirus and malware and otherSoftware and system and Security.



















