Security Defender is a fake windows utility that looks legitimate and attempts to trick users into purchasing this phony software. when a users computer is infected with this malware Security Defender will startup when first powering on the computer. When Security Defender is running it will pretend to preform scans for viruses and malware, then alert users of severe infections on the system. Security Defender also can block anti-virus programs from running as well as certain Windows utilites.

Manual Removal of Security Defender: First users should restart into Windows Safe Mode. To do this shutdown the PC first, next turn on the computer and press the F8 button until a menu appears giving the options to start Windows in safe mode. If you don’t get this menu its usually because the F8 key wasn’t pressed in time, if the Windows Startup screen appears and shows its loading Windows this means it wasn’t pressed in time and you’ll have to restart and try again. Once in safe mode you will need to delete the following files that are written to the computer:

• C:\Documents and Settings\All Users\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_12.avi
• C:\Documents and Settings\All Users\Application Data\ca84c702-c758-4421-974e-b02662e76d7c_12.ico
• C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ca84c702-c758-4421-974e-b02662e76d7c_12.lnk
• C:\Program Files\Security Defender
• C:\Program Files\Security Defender\Security Defender.dll
• %AppData%\Microsoft\Internet Explorer\Quick Launch\Security Defender.lnk
• %UserProfile%\Desktop\Security Defender.lnk
• %UserProfile%\Start Menu\Programs\Startup\ca84c702-c758-4421-974e-b02662e76d7c_12.lnk

Windows User Satellite Registry Entries that should be removed:

• HKEY_CLASSES_ROOT\CLSID\{ca84c702-c758-4421-974e-b02662e76d7c}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ca84c702-c758-4421-974e-b02662e76d7c}
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run | ca84c702-c758-4421-974e-b02662e76d7c_12
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | ca84c702-c758-4421-974e-b02662e76d7c_12

Please Contact Us Here for more information on Security Defender Malware/ Scareware
Need help removing Security Defender Malware/ Scareware or other PC problems? E-Mail Us Here

Be Sociable, Share!

•