Remove SaveDefender | SaveDefender Removal
SaveDefender is somewhat related to SafetyKeeper in look and feel which mimics the look and feel of the Windows Security Center (which is legitimate.) Safetykeeper creates multiple files on your machine that it later scans and claims are infected with viruses, trojans or other malware. It then scans and claims that it cannot remove these files unless you pay for the software. It also pops up fake security notices from the Windows Taskbar. All of these activities are geared to separating you from your money and purchasing a license for this rogue application. Read on for how to Remove SaveDefender.
It uses terminology such as your computer being under attack from an internet virus, and also titles these alerts as Infiltration Alerts.
To remove SaveDefender you should first try downloading Malwarebytes antimalware (link on the virus removal toolkit page). Try updating this software and run a full scan of your system with it. If your first attempt at cleaning is not successful you may need to boot into safe mode and then try the scan a second time.
If you need to do a manual SaveDefender Removal then you should look to remove the following files and their folders:
%DocRoot%\All Users\Desktop\SaveDefender.lnk
%DocRoot%\All Users\Start Menu\Programs\SaveDefender
%DocRoot%\All Users\Start Menu\Programs\SaveDefender\1 SaveDefender.lnk
%DocRoot%\All Users\Start Menu\Programs\SaveDefender\2 Homepage.lnk
%DocRoot%\All Users\Start Menu\Programs\SaveDefender\3 Uninstall.lnk
%Tmp%\ri2aqoym.exe
%ProgFiles%\SaveDefender Software
%ProgFiles%\SaveDefender Software\SaveDefender
%ProgFiles%\SaveDefender Software\SaveDefender\SaveDefender.exe
%ProgFiles%\SaveDefender Software\SaveDefender\uninstall.exe
%WinDir%\101919py365z.ocx
%WinDir%\10203hack9z5l284.ocx
%WinDir%\10ez5parse20909.bin
%WinDir%\system32\13542spazbot13c9.cpl
%WinDir%S\system32\13598viruz5b9.ocx
%WinDir%\system32\14397szambot506.exe
Some of these filenames (especially those in %WinDir% and %WinDir%\System32 have a random component to the names. The file names above are simply samples so you should make use of the patterns above to investigate which names it has created on your system.
After performing a manual removal of SaveDefender I would still (update and) run malwarebytes antimalware to ensure that you have cleaned your system from the remnants of this pest or any other trojans it may have used to enter your system or may have installed after it made itself home on your PC.