Click on screenshot to zoom
Danger level 9
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:

System Defender

With all the sophistication invested in rogue security tools, it has become a lot more difficult to distinguish between genuine and fake security tools such as System Defender. This rogue in particular is a nasty infection, and will try and come across as genuine to its victims. This rogue descends directly from known rogues Security Defender and Internet Defender, and is extremely dangerous. The thing is that despite what System Defender would like its victims to believe, it does not have the ability to detect or remove any type of threat from the system, and is indeed nothing more than a harmful infection in itself.

System Defender usually penetrates the PC’s defenses through seditious Trojans which are distributed via fake online malware scanners and surreptitious browser hijacking web domains. Once System Defender roots its infection into the system it will launch its attack against the PC and will not stop until it achieves its ultimate goal or ripping the user off. The user will remain largely unaware of System Defender’s presence until such time that it starts its attack on the system.

Download Spyware Removal Tool to Remove* System Defender
  • Quick & tested solution for System Defender removal.
  • 100% Free Scan for Windows

This will usually happen with the user being spammed by many fake security notifications generated by System Defender. These fake security alerts were all created with the sole intention of panicking the user, and placing System Defender in an authoritative light. System Defender does this so as to further force the user into paying for its utterly worthless security software.

In a further attempt to convince the user that his PC has been compromised, System Defender will create various files on the system and then detect them as infected when it scans the system. The files System Defender will create are:

%UserProfile%\\Recent\\ANTIGEN.dll
%UserProfile%\\Recent\\ANTIGEN.sys
%UserProfile%\\Recent\\ANTIGEN.tmp
%UserProfile%\\Recent\\cid.dll
%UserProfile%\\Recent\\CLSV.dll
%UserProfile%\\Recent\\ddv.tmp
%UserProfile%\\Recent\\PE.dll
%UserProfile%\\Recent\\PE.drv
%UserProfile%\\Recent\\PE.sys
%UserProfile%\\Recent\\ppal.exe
%UserProfile%\\Recent\\runddlkey.drv
%UserProfile%\\Recent\\std.sys
%UserProfile%\\Recent\\tempdoc.dll
%UserProfile%\\Recent\\tjd.exe
%UserProfile%\\Recent\\tjd.sys

Users who did not manage to get rid of System Defender in time complained about various distressing symptoms associated with this infection. Some of these symptoms include being unable to launch any type of executable on the PC, as well as integral operational programs such as Control Panel and Windows Task Manager, as well as blocked Internet connections. Others reported increased erratic system behavior as well as poor system performance.

If you want to “Activate” System Defender on your PC, then simply paste the following activation key:

D13F-3B7D-B3C5-BD84

This should alleviate most of the annoying symptoms, and allow you to download a cure for System Defender. Do not think that by merely having entered the above key that you have neutralized this threat successfully, as you still need to destroy System Defender in order to secure your PC.

When all is said and done System Defender will cause more damage to your PC than good. Do not wait until this rogue wreaks havoc on your PC, destroy System Defender while there is still time. This is best achieved through investing in a powerful security tool which will not only erase System Defender from the system but also protect against similar attacks in future.

Download Spyware Removal Tool to Remove* System Defender
  • Quick & tested solution for System Defender removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove System Defender

Files associated with System Defender infection:

WS33de.exe
BAD DELEAT.exe
WS1ec.exe
WSeece.exe
WS30a.exe
WS014.exe
WSd6c2.exe
WS331.exe
WS8f8e.exe
WSeae.exe
WSde4e.exe
WSdccb.exe, xp_a08c4[1].exe
WSd1f0.exe
WSc2e8.exe
WSc258.exe
WSab2f.exe
WS9c09.exe
WS908.exe
WS8f4b.exe
WS7d6f.exe
WS704.exe
WS5e51.exe
%Temp%\[random].dll
%Programs%\Startup\56a10a26-dc02-40f3-a4da-8fa92d06b357_33.lnk
%Desktop%\System Defender.lnk
%AppData%\Microsoft\Internet Explorer\Quick Launch\System Defender.lnk
%ProgramFiles%\System Defender\System Defender.dll
%ProgramFiles%\System Defender
%CommonPrograms%\Startup\56a10a26-dc02-40f3-a4da-8fa92d06b357_33.lnk
%CommonAppData\56a10a26-dc02-40f3-a4da-8fa92d06b357_.mkv
WS780.exe

System Defender DLL's to remove:

%Temp%\[random].dll
%ProgramFiles%\System Defender\System Defender.dll

System Defender processes to kill:

WS8f8e.exe
BAD DELEAT.exe
WS30a.exe
WS33de.exe
WS014.exe
WS331.exe
WSd6c2.exe
WS780.exe
WS1ec.exe
WSeece.exe
WSeae.exe
WSde4e.exe
WSdccb.exe, xp_a08c4[1].exe
WSd1f0.exe
WSc2e8.exe
WSc258.exe
WSab2f.exe
WS9c09.exe
WS908.exe
WS8f4b.exe
WS7d6f.exe
WS704.exe
WS5e51.exe

Remove System Defender registry entries:

HKCR\CLSID\{56a10a26-dc02-40f1-a4da-8fa92d06b357}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56a10a26-dc02-40f1-a4da-8fa92d06b357}
HKCU\Software\Microsoft\Windows\CurrentVersion\Run “56a10a26-dc02-40f3-a4da-8fa92d06b357_33″
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “56a10a26-dc02-40f3-a4da-8fa92d06b357_33″
Disclaimer

Comments

  1. Hasan Mar 17, 2011

    Thanks Man,..
    Very-Very Thanks...
    But I don't Understand "How to manually remove System Defender"???
    Could you help me,please?

  2. DE73D Mar 21, 2011

    Thanks very much.your key has solved my problem.System defender activated successfully

  3. hari prashanth Mar 21, 2011

    thank u very much .can u tell me how to remove this thing ??? please...

  4. Pcthreat Mar 22, 2011

    DE73D

    Notice that entering the serial only silences the program, but it is still there in your PC. And because System Defender is based on Trojans, no one knows when this program will reappear or install some other infection.

  5. Pcthreat Mar 22, 2011

    Hasan,

    These are the infection files which should be found on Your computer if You're infected with System Defender. Search and delete them.

  6. m3000012901 Mar 25, 2011

    thank u thank u thank u thank u thank u
    my computer was on d brink of destruction

  7. rohith kumar Mar 26, 2011

    thank you very very very very very much for giving me this activation key.

  8. mijiata Apr 22, 2011

    thanks for the activation code!

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.