free virus removal tool to get rid of the malware Windows System Defender

Windows System Defender is a malware that pretends to be an Antivirus whereas in reality it is a malware that tries to fool its victims by warning with a false alarm that there is malware in your system. This is true elsewhere, there is actually a malware in your system, but the malware is not what it shows you, it is itself the malware. Remove it as soon as possible from your system.
Never trust a program you have not installed.

Afterwards, when it hits your system, the malware prompts you to buy a full version because this one is a trial version, which is not even able to remove nicks malware from your system. Never trust this type of program.

The details of this malware are shown below.

To remove this malware:

• Click on the "Download" button, in the bottom
• Download it and unzip it on your desktop
• Launch the patch and then click "delete"

You have nothing else to do, the malware is deleted from your system.
After running the patch, your Internet Explorer’s homepage becomes search.net-studio.org, done deliberately to erase all traces of the malware. You can always restore this setting in Internet Explorer’s option.

Process

• SICKBOY.exe
• FS.exe
• WS83b.exe

Files and folders

• <AppData>\Windows System Defender
• <CommonAppData>\61a60\WSDDSys
• <CommonAppData>\61a60
• <CommonAppData>\61a60\WS83b.exe
• <CommonAppData>\61a60\8727.mof
• <CommonAppData>\61a60\mozcrt19.dll
• <CommonAppData>\61a60\sqlite3.dll
• <CommonAppData>\61a60\WSD.ico
• <CommonAppData>\61a60\WSDDSys\vd952342.bd
• <CommonAppData>\WSDDSys
• <CommonAppData>\WSDDSys\wsd.cfg

• <Quick Launch>\Windows System Defender.lnk
• <AppData>\Windows System Defender\cookies.sqlite
• <Desktop>\Windows System Defender.lnk
• <Recent>\ANTIGEN.dll
• <Recent>\cid.dll
• <Recent>\ddv.dll
• <Recent>\eb.sys
• <Recent>\eb.tmp
• <Recent>\energy.sys
• <Recent>\exec.dll
• <Recent>\exec.tmp
• <Recent>\FS.exe
• <Recent>\kernel32.drv
• <Recent>\PE.drv
• <Recent>\PE.sys
• <Recent>\PE.tmp
• <Recent>\ppal.dll
• <Recent>\SICKBOY.exe
• <StartMenu>\Windows System Defender.lnk
• <Programs>\Windows System Defender.lnk

dll to unregister

• ppal.dll
• exec.dll
• ANTIGEN.dll
• cid.dll
• ddv.dll
• mozcrt19.dll
• sqlite3.dll

Registry

• HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
  • URL = http://search-gala.com/?&uid=222&q={searchTerms}
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
  • RunInvalidSignatures = 1
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
  • Run = Windows System Defender