SysDefence
December 18, 2009 Threat level:
(7 / 10)
SysDefence description
SysDefence is an imitation of a legitimate system security program which is not capable of providing computer security. The application mimics the processes performed by the real antiviruses, but does not protect the machine. Moreover, SysDefence is also a malicious software which might seriously harm the system.
SysDefence can be obtained online at a number of websites with questionable reputation. They employ trojans to download and install SysDefence therefore the user is unaware of the process. As Sys Defence boards the computer it starts performing misleading system scans and generating fake pop-up security warnings. It is very important to note that all of the threats detected by SysDefence are not real. Here is an example of a fake SysDefence message:
Spyware Alert!
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of SysDefence and remove spyware threats from your PC.
All this is done to scare the user and make them believe that their computer had actually been infected and that they need to purchase the payed version of SysDefence to get rid of these “infections”. SysDefence is an infection itself and it should be removed as soon as possible.
SysDefence websites
sysdefence.com Learn how to block rogue websitesNew processes created
10158spy289z.exe2z398virus865.exe
SysDefence.exe
uninstall.exe Learn how to remove malicious processes
New SysDefence registry entries created
HKEY_CURRENT_USER\Software\SysDefenceHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SysDefence
HKEY_LOCAL_MACHINE\SOFTWARE\SysDefence
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SysDefence.exe" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries
New files and directories created
c:\Documents and Settings\All Users\Desktop\SysDefence.lnkc:\Documents and Settings\All Users\Start Menu\Programs\SysDefence
c:\Documents and Settings\All Users\Start Menu\Programs\SysDefence\1 SysDefence.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SysDefence\2 Homepage.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\SysDefence\3 Uninstall.lnk
c:\Program Files\SysDefence Software
c:\Program Files\SysDefence Software\SysDefence
c:\Program Files\SysDefence Software\SysDefence\SysDefence.exe
c:\Program Files\SysDefence Software\SysDefence\uninstall.exe
c:\WINDOWS\10011sp9z5b.dll
c:\WINDOWS\10158spy289z.exe
c:\WINDOWS\system32\2z398virus865.exe
c:\WINDOWS\system32\2z605hacktoo95ba5.dll
c:\WINDOWS\system32\2z7a9par5e943.bin Learn how to unregister malicious DLL files
How to remove SysDefence
To remove SysDefence manually you must block rogue SysDefence related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious SysDefence files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.