FrEn

E-mail Print PDF

Free malware removal tool to remove SysDefenders

Written by Administrator  |  Tuesday, 12 January 2010 14:36
AddThis Social Bookmark Button

SysDefenders is a fake antivirus which installs itself on your system without your will. This fake Antivirus comes from WiniSoft family, they have just changed the name of the application, the file names but the rest is the same. Its purpose is to scare you by posting false scan results so that you spend money on buying a full version which by the way doesn't even exist. Do not purchase this bogus application. Remove SysDefenders as soon as possible from your system.
Beware of this scam.

SysDefenders

To remove SysDefenders

  • Download and extract this removal tool for SysDefenders
  • Click on the delete button

 

SysDefenders will be removed in 10s. Restart your computer when it's finished.

  • SysDefenders.exe

Folder

  • %CommonPrograms%\SysDefenders
  • %Temp%\nsa2.tmp
  • %ProgramFiles%\SysDefenders Software
  • %ProgramFiles%\SysDefenders Software\SysDefenders

Files

  • %CommonDesktopDir%\SysDefenders.lnk
  • %CommonPrograms%\SysDefenders\1 SysDefenders.lnk
  • %CommonPrograms%\SysDefenders\2 Homepage.lnk
  • %CommonPrograms%\SysDefenders\3 Uninstall.lnk
  • %Temp%\nsa2.tmp\nsProcess.dll
  • %Temp%\[random].exe
  • %ProgramFiles%\SysDefenders Software\SysDefenders\SysDefenders.exe
  • %ProgramFiles%\SysDefenders Software\SysDefenders\uninstall.exe
  • %System%\wbem\Performance\WmiApRpl_new.ini

Registry

Regisytry key created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SysDefenders
  • HKEY_LOCAL_MACHINE\SOFTWARE\SysDefenders
  • HKEY_CURRENT_USER\Software\SysDefenders

Registry values created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SysDefenders
    • DisplayName = "SysDefenders"
    • UninstallString = ""%ProgramFiles%\SysDefenders Software\SysDefenders\uninstall.exe""
    • NoModify = 0x00000001
    • NoRepair = 0x00000001
  • HKEY_LOCAL_MACHINE\SOFTWARE\SysDefenders
    • Lang = "English"
    • Install_Dir = "%ProgramFiles%\SysDefenders Software\SysDefenders"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • SysDefenders = "%ProgramFiles%\SysDefenders software\SysDefenders\SysDefenders.exe"
    • [random].exe = "%Temp%\[random].exe"
  • HKEY_CURRENT_USER\Software\SysDefenders
    • CurrentVersion =
    • "771eb5b6f272744584a5567cff88f8a7d17c6bcd7ae..."
    • AgentsSettings = 0x00000001

download


 

Add comment


Security code
Refresh

Related articles
Latest posts
Free malware removal tool to remove Dr. Guard
_WRITTEN_BY Administrator 01/03/2010
Dr. Guard is a rogue Antispyware from the Paladin Antivirus Family, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are…Read more...
Free malware removal tool to remove Paladin Antivirus
_WRITTEN_BY Administrator 27/02/2010
Paladin Antivirus is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a…Read more...
Free malware removal tool to remove PC Defender
_WRITTEN_BY Administrator 24/02/2010
PC Defender is a rogue Antispyware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that…Read more...
Free malware removal tool to remove Control Manager
_WRITTEN_BY Administrator 24/02/2010

Control Manager is another fake Antivirus that install itself on your computer. Once installed, it tries to trick you into buying a full version of the program, that doesn't even exist, because…Read more...

Free virus removal tool to remove Mal.Resdro-A
_WRITTEN_BY Administrator 24/02/2010

Resdro-A is a virus that may reprensent a security risk for your system. Mal/Resdro-A shows a Adobe Flash Player Update, ignore this, this is a fake warning.

Once on your system, this fake…Read more...

.
Information | Contact

© All Rights Reserved. net-studio.org 2009