FrEn

E-mail Print PDF

Free malware removal tool to remove SysDefenders

Written by Administrator  |  Tuesday, 12 January 2010 14:36
AddThis Social Bookmark Button

SysDefenders is a fake antivirus which installs itself on your system without your will. This fake Antivirus comes from WiniSoft family, they have just changed the name of the application, the file names but the rest is the same. Its purpose is to scare you by posting false scan results so that you spend money on buying a full version which by the way doesn't even exist. Do not purchase this bogus application. Remove SysDefenders as soon as possible from your system.
Beware of this scam.

SysDefenders

To remove SysDefenders

  • Download and extract this removal tool for SysDefenders
  • Click on the delete button

 

SysDefenders will be removed in 10s. Restart your computer when it's finished.

  • SysDefenders.exe

Folder

  • %CommonPrograms%\SysDefenders
  • %Temp%\nsa2.tmp
  • %ProgramFiles%\SysDefenders Software
  • %ProgramFiles%\SysDefenders Software\SysDefenders

Files

  • %CommonDesktopDir%\SysDefenders.lnk
  • %CommonPrograms%\SysDefenders\1 SysDefenders.lnk
  • %CommonPrograms%\SysDefenders\2 Homepage.lnk
  • %CommonPrograms%\SysDefenders\3 Uninstall.lnk
  • %Temp%\nsa2.tmp\nsProcess.dll
  • %Temp%\[random].exe
  • %ProgramFiles%\SysDefenders Software\SysDefenders\SysDefenders.exe
  • %ProgramFiles%\SysDefenders Software\SysDefenders\uninstall.exe
  • %System%\wbem\Performance\WmiApRpl_new.ini

Registry

Regisytry key created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SysDefenders
  • HKEY_LOCAL_MACHINE\SOFTWARE\SysDefenders
  • HKEY_CURRENT_USER\Software\SysDefenders

Registry values created

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SysDefenders
    • DisplayName = "SysDefenders"
    • UninstallString = ""%ProgramFiles%\SysDefenders Software\SysDefenders\uninstall.exe""
    • NoModify = 0x00000001
    • NoRepair = 0x00000001
  • HKEY_LOCAL_MACHINE\SOFTWARE\SysDefenders
    • Lang = "English"
    • Install_Dir = "%ProgramFiles%\SysDefenders Software\SysDefenders"
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • SysDefenders = "%ProgramFiles%\SysDefenders software\SysDefenders\SysDefenders.exe"
    • [random].exe = "%Temp%\[random].exe"
  • HKEY_CURRENT_USER\Software\SysDefenders
    • CurrentVersion =
    • "771eb5b6f272744584a5567cff88f8a7d17c6bcd7ae..."
    • AgentsSettings = 0x00000001

download


 

Add comment


Security code
Refresh

Related articles
Latest posts
Free malware removal tool to remove Antivir Solution Pro
_WRITTEN_BY Administrator 15/07/2010

Antivir Solution Pro is another rogue Antispyware from the Antispyware Soft and Antivirus Suite, that tries to get money from users by prompting them to register and buy their Fake products. Some…Read more...

Free virus removal tool to remove RVHOST.exe
_WRITTEN_BY Administrator 17/06/2010
  • RVHOST.exe is a trojan that may reprensent security risk for your system, it runs in the background, this application allows remote access to the compromised system.
  • Downloads…
Read more...
Free virus removal tool to remove WinDefender.exe
_WRITTEN_BY Administrator 17/06/2010
WinDefender.exe is a trojan that may reprensent security risk for your system, it runs in the background, this application creates startup registry keys. Read more...
Free malware removal tool to get rid of Defense Center
_WRITTEN_BY Administrator 12/06/2010
Defense Center is another rogue Antispyware from the Digital Protection family, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your…Read more...
Free virus removal tool to remove Xss.exe
_WRITTEN_BY Administrator 10/06/2010

Xss.exe is a trojan that may reprensent security risk for your system, it runs in the background, this application allows remote access to the compromised system.

Xss.exe downloads files…Read more...

.
Information | Contact

© All Rights Reserved. net-studio.org 2009