Rogue security applications are a very aggressive type of spyware that is designed to make it appear as if a computer has been attacked by various types of malware, when in actuality it has not.  These scare tactics are used to try to intimidate the computer user into purchasing additional unnecessary products to “protect” their computer.  SystemDefender is one of these unscrupulous rogue security applications.

Once SystemDefender has entered the machine, there will be an onslaught of manufactured “security alerts,” which come from the program’s task bar.  The program even goes so far as to impersonate the Windows Security Center, showing falsified messages indicating infection with a virus and other malware. Other problems may crop up as well, including pop-up advertisements, web browser security issues, and system scans that yield unreliable results.  Obviously, SystemDefender is a bad actor that must be removed from any computer as soon as possible.

Type:

Rogue Security Application

Related file contents:
WS83b.exe
8727.mof
mozcrt19.dll
sqlite3.dll
WSD.ico
vd952342.bd
wsd.cfg
Windows System Defender.lnk
cookies.sqlite
ANTIGEN.dll
cid.dll, ddv.dll
eb.sys
eb.tmp
energy.sys
exec.dll
exec.tmp
FS.exe
kernel32.drv
PE.drv
PE.sys
PE.tmp
ppal.dll
SICKBOY.exe
search.xml

Keyword:
SystemDefender

Sub-Keywords:
SystemDefender.exe
SystemDefender.com

Known As:
System Defender

Manual Removal Instructions:
Should a user feel confident enough to remove SystemDefender manually, the first step is to kill these processes:
[RandomNumber.exe] for example WS83b.exe FS.exe SICKBOY.exe

Next, these registry values should be deleted:
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=222&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” => “1”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Windows System Defender”

The following DLLs must also be unregistered:
mozcrt19.dll
sqlite3.dll
ANTIGEN.dll
cid.dll
ddv.dll
exec.dll
ppal.dll

Next, delete these files:
WS83b.exe
8727.mof
mozcrt19.dll
sqlite3.dll
WSD.ico
vd952342.bd
wsd.cfg
Windows System Defender.lnk
cookies.sqlite
ANTIGEN.dll
cid.dll
ddv.dll
eb.sys
eb.tmp
energy.sys
exec.dll
exec.tmp
FS.exe
kernel32.drv
PE.drv
PE.sys
PE.tmp
ppal.dll
SICKBOY.exe
search.xml

Finally, also delete these directories:
%UserProfile%\Application Data\Windows System Defender
c:\Documents and Settings\All Users\Application Data\61a60\WSDDSys
c:\Documents and Settings\All Users\Application Data\61a60
c:\Documents and Settings\All Users\Application Data\WSDDSys

Manual removal can be effective in initially removing SystemDefender, but it is not a guarantee against further problems.  For faster and more thorough results, the best choice is to select an excellent antispyware program remove all of these types of problems.  One of the most trusted names in this activity is ZookaWare PC Cleaner, from the Blue Penguin software company. ZookaWare PC Cleaner offers computer users a complete spyware removal guarantee with its services, and updates its product to include developing threats as well as common spyware.