How to remove Windows System Defender
Windows System Defender description
Windows System Defender is nothing but a computer infection although the program itself might try to prove otherwise. WindowsSystemDefender is distributed online at various corrupt websites which use trojans for downloading and installing Windows SystemDefender into the system.

As the malware enters the computer it pretends to scan for viruses and detect a lot of infections which should be removed. And of course the service appears to be quite expensive. Unfortunately, even if the user purchases the Windows System Defender software they do not acquire any kind of system protection tool. WindowsSystem Defender is not a real security program. It is a computer parasite that should be removed upon detection.
How to get rid of Windows System Defender
This infection can be removed using Spyware Doctor.
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from Windows System Defender and the latest internet security threats. If your computer is infected with Windows System Defender we strongly recommend automatic spyware scanner.
How to manually remove Windows System Defender
To get rid of spyware such as Windows System Defender you need to remove processes, search and delete registry keys, DLL and other Windows System Defender related files from your computer.
Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic Windows System Defender remover.
- Uninstall Windows System Defender from Control Panel
Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall. - End these Windows System Defender processes:
SICKBOY.exe
FS.exe
WS83b.exe
To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button. -
Unregister Windows System Defender DLL files:
ppal.dll
exec.dll
ANTIGEN.dll
cid.dll
ddv.dll
mozcrt19.dll
sqlite3.dll
To unregister DLL click Start > Run > type "regsvr32 /u PATH_TO_FILE/FILE.dll" -
Delete Windows System Defender registry entries:
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=222&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" => "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows System Defender"
To open registry editor click Start > Run > type "regedit".
Warning! Manual registry entries editing may cause damage to your system.
Download Uniblue RegistryBooster 2010 to scan for registry errors. -
Search and delete these Windows System Defender related files:
%UserProfile%\Application Data\Windows System Defender
c:\Documents and Settings\All Users\Application Data\61a60\WSDDSys
c:\Documents and Settings\All Users\Application Data\61a60
c:\Documents and Settings\All Users\Application Data\61a60\WS83b.exe
c:\Documents and Settings\All Users\Application Data\61a60\8727.mof
c:\Documents and Settings\All Users\Application Data\61a60\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\61a60\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\61a60\WSD.ico
c:\Documents and Settings\All Users\Application Data\61a60\WSDDSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WSDDSys
c:\Documents and Settings\All Users\Application Data\WSDDSys\wsd.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows System Defender.lnk
%UserProfile%\Application Data\Windows System Defender\cookies.sqlite
%UserProfile%\Desktop\Windows System Defender.lnk
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\eb.tmp
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.dll
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\FS.exe
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\ppal.dll
%UserProfile%\Recent\SICKBOY.exe
%UserProfile%\Start Menu\Windows System Defender.lnk
%UserProfile%\Start Menu\Programs\Windows System Defender.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
-
Block Windows System Defender malicious domains:
windowssystemdefender.com

December 23rd, 2011 11:49
[...] your computer because it is a scam. FakeRean are designed similar as Microsoft Security Essentials, Windows Defender malware. FakeRean only gains to trick user into believing their PC is severely compromised and need [...]