Home » News » Rogue Antispyware » How to Remove SaveDefender, SaveDefender Romoval Instructions

How to Remove SaveDefender, SaveDefender Romoval Instructions

By Jason on September 21, 2009 | Rogue Antispyware How to Remove SaveDefender, SaveDefender Romoval Instructions

SaveDefender is the latest addition to the rogue anti-spyware program family that keeps on developing new malware. The programs already launched by the creators of Save Defender are TrustWarrior, SoftSafeness, SafetyKeeper, SaveKeeper, QuickHealCleaner, SystemCop, BlockDefence, TrustNinja, SaveDefense, SaveSoldier, SaveKeep, WiniShield, WiniFighter and WinBlueSoft.

The malicious processes performed by SaveDefender include fake system scans, misleading warning messages, irritating pop-up messages, hijacking the web browser, slowing down the system performance and even disabling the real security applications. It is very important not to take Save Defender for a legitimate security tool as it might lead to some serious computer damage, not mentioning the loss of money if the program has been purchased. in order to remove SaveDefender from your system, please follow the instructions bellow.

SaveDefender websites

savedefender.com Learn how to block rogue websites

New processes created

14397szambot506.exe
SaveDefender.exe
uninstall.exe
ri2aqoym.exe Learn how to remove malicious processes

New SaveDefender registry entries created

HKEY_CURRENT_USER\Software\SaveDefender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveDefender
HKEY_LOCAL_MACHINE\SOFTWARE\SaveDefender
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAVEDEFENDERSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveDefenderSvc
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ri2aqoym.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SaveDefender" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\Documents and Settings\All Users\Desktop\SaveDefender.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveDefender
c:\Documents and Settings\All Users\Start Menu\Programs\SaveDefender\1 SaveDefender.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveDefender\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SaveDefender\3 Uninstall.lnk
%Temp%\ri2aqoym.exe
c:\Program Files\SaveDefender Software
c:\Program Files\SaveDefender Software\SaveDefender
c:\Program Files\SaveDefender Software\SaveDefender\SaveDefender.exe
c:\Program Files\SaveDefender Software\SaveDefender\uninstall.exe
c:\WINDOWS\101919py365z.ocx
c:\WINDOWS\10203hack9z5l284.ocx
c:\WINDOWS\10ez5parse20909.bin
c:\WINDOWS\system32\13542spazbot13c9.cpl
c:\WINDOWS\system32\13598viruz5b9.ocx
c:\WINDOWS\system32\14397szambot506.exe Learn how to unregister malicious DLL files

How to remove SaveDefender

To remove SaveDefender manually you must block rogue SaveDefender related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious SaveDefender files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

System Protection Tools removal guide

System Protection Tools removal guide

System Protection Tools is a rogue anti-spyware tool which spreads via trojan horse. Trojan comes to the system via its vulnerabilities and leaves a backdoor for System Protection Tools to sneak. The parasite comes to the system without user’s knowledge and consent. Read more.


News categories

Latest news