Welcome to remove-malware.net

How to remove SaveDefense rogue anti-spyware

Malware Description:
SaveDefense (also known as Save Defense) is a new member of the malware string comprising TrustNinja, SaveSoldier, SaveKeep and a few other rogue anti-spyware applications from the so-called WiniSoft group. SaveDefense spreads through backdoor trojans or with the aid of its semi-official website at SaveDefense.com which provides misleading information about the program. When SaveDefense gets installed without authorization onto a host computer, it will start astonishing the user with its numerous ads that claim the system is infected and needs to be immediately remedied to stay stable. In addition, Save Defense displays its scanners that confirm the above thesis about the system being contaminated. Well, none of SaveDefense alerts and scanners is to be trusted because they all report non-existent infections to deceive the victim and get him/her purchasing SaveDefense license for removing the stuff that isn’t even there, to begin with. Instead of trusting the ads by SaveDefense, make sure you uninstall SaveDefense rogue anti-spyware application until it starts applying more aggressive tactics to become persuasive. You should use automatic or manual removal instructions below to get rid of SaveDefense once and for all.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

SaveDefense Free Scanner and Remover: Download Now

SaveDefense Screenshot:

How to remove SaveDefense manually:
Manual removal of SaveDefense is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Documents and Settings%\All Users\Desktop\SaveDefense.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\SaveDefense\1 SaveDefense.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\SaveDefense\2 SaveDefense.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\SaveDefense\3 SaveDefense.lnk
• %Temp%\nsm2.tmp\nsProcess.dll
• %Temp%\nsm2.tmp\nsSCM.dll
• %ProgramFiles%\SaveDefense Software\SaveDefense
• %ProgramFiles%\SaveDefense Software\SaveDefense\data.bin
• %ProgramFiles%\SaveDefense Software\SaveDefense\license.txt
• %ProgramFiles%\SaveDefense Software\SaveDefense\SaveDefense.exe
• %ProgramFiles%\SaveDefense Software\SaveDefense\SaveDefenseSvc.exe
• %ProgramFiles%\SaveDefense Software\SaveDefense\uninstall.exe

The registry entries that need to be removed are as follows:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveDefense
• HKEY_LOCAL_MACHINE\SOFTWARE\SaveDefense
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SAVEDEFENSESVC
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SAVEDEFENSESVC\0000
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SAVEDEFENSESVC\0000\Control
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SaveDefenseSvc
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SaveDefenseSvc\Security
• HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SaveDefenseSvc\Enum
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAVEDEFENSESVC
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAVEDEFENSESVC\0000
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAVEDEFENSESVC\0000\Control
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveDefenseSvc
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveDefenseSvc\Security
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SaveDefenseSvc\Enum

Please, be aware that manual removal of SaveDefense is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of SaveDefense, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove TrustNinja rogue anti-spyware
How to remove Pigeon AZOD trojan
How to remove WiniFighter rogue anti-spyware
How to remove General Antivirus rogue anti-spyware