1 of 3
Danger level 8
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Installs itself without permissions
  • Connects to the internet without permission
  • Slow internet connection
  • System crashes
  • Annoying Pop-up's
  • Slow Computer

System Defragmenter

Do not be fooled by the helpful name - System Defragmenter is nothing but a harmful application imitating a helpful computer optimization tool which claims to be able to scan the PC and detect and fix system problems. This is simply untrue as System Defragmenter offers no benefits to any PC, and can cause serious, and in some cases even permanent damage to the system. The best thing you can do is to eliminate System Defragmenter off your PC the moment it is discovered.

This rubbish application will, as expected, do everything in its power to convince users of its authenticity in an effort to fleece consumers out of their money. System Defragmenter is programmed to start up with the PC every time it boots up. This will ensure that the infected PC will be privy to obnoxious tricks pulled off by System Defragmenter in order to try and panic the PC owner. These include the display of fake alerts reporting on bogus hardware failure. These nonsense warnings will read as follows:

“Critical Error
Hard Drive not found. Missing hard drive.”

“Critical Error
RAM memory usage is critically high. RAM memory failure.”

“Critical Error
Windows can’t find hard disk space. Hard drive error”

“Critical Error!
Damaged hard drive clusters detected. Private data is at risk.”

“Critical Error!
Windows was unable to save all the data for the file System32496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.”

“Critical Error
A critical error has occurred while indexing data stored on hard drive. System restart required.”

“System Restore
The system has been restored after a critical error. Data integrity and hard drive integrity verification required.”

If you try and launch any proper program, be it WordPad or Internet Explorer, System Defragmenter will block the application and display the following message:

“System Error!
Exe file is corrupted and can’t be run. Hard drive scan required.
Scan Hard Drive”

This System Scan will also pretend to scan your PC, and report on many fake errors. Following is a bogus message generated by System Scan which should receive no consideration from the user as it is completely fake:

“Read time of hard drive clusters less than 500 ms
32% of HDD space is unreadable
Hard drive does not respond to system commands
Bad sectors on hard drive or damaged file allocation table
Drive C initializing error
Ram Temperature is 83 C. Optimization is required for normal operation.
Data Safety Problem. System integrity is at risk.
Requested registry access is not allowed. Registry defragmentation required
Registry Error – Critical Error
GPU RAM temperature is critically high. Urgent RAM memory optimization is required to prevent system crash”

Do not take anything seriously from this fake application, and eradicate System Defragmenter from any infected system in order to limit the damage done to the PC. Do not make the mistake of underestimating the harm this infection can cause to your system. Rather delete System Defragmenter and restore your PC’s health.

Download Spyware Removal Tool to Remove* System Defragmenter
  • Quick & tested solution for System Defragmenter removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove System Defragmenter

Files associated with infection (System Defragmenter):

System Defragmenter.lnk
w1
Directory.Eraser.exe
certhelp.dll
adtdll.dll
85543106.exe
~TM2B.tmp
~TM25D.tmp
yotjqf.exe
xyst.exe
xgqqb.exe
wscntfywow.exe
wmupdater.exe
wizu.exe
w32cap.dll
vsbntlo.exe
USRSVPIA32.exe
updates.exe
Ujo.exe
themedlg10.dll
tasksmgr.exe
systemCall.exe
svchost.exe
sshnas21.dll
SROKing2.0.45_1.exe
shell.exe
setupsmall.exe
senscfg32.dll
scanner[1].exe
rpcmgr.dll
rnecaxswom.exe
quupoby.exe
QKNqyUcYtD.exe
provscanxml.exe
pdfupd.exe
PCMAV.exe
packupdate107_2204.exe
openfile.exe
nvsvc32.exe
nidem.exe
msxslt3.exe
MSWDAT1032.DLL
mspnp70cf.exe
mspnp54cf.exe
msnmnns.exe
msacm3232.dll
movie.exe
mini-KMS_Activator_v1.052.exe
mema.exe
m.2D9.tmp.exe
m.2B26D.tmp.exe
m.2A8AE.tmp.exe
m.28F41.tmp.exe
m.26375.tmp.exe
m.24CF.tmp.exe
m.21E6C.tmp.exe
lUOVvR.exe
kpmpxmrdlta.exe
kna.exe
killexe.exe
kbdit32.dll
jutched.exe
jotzjyykz.sys
iologmsg32.dll
imapipage.dll
ieui32.exe
gpkcsp32.dll
go[1].exe
gdiret.exe
forimg.exe
explorer.exe
errorreporting.exe
ebeprikq.exe
dwm.exe
dsquery32.dll
dsdmo32.dll
dpnlobby32.dll
dot3ui32.dll
docprop32.dll
dmvnmaeshdw.exe
dmband32.dll
dinput832.dll
dfrgsnapnt.exe
DeviceCenter32.dll
Datei.exe
d3dx9_3032.dll
d3dim32.dll
ctfmon.exe
csseqchk32.dll
cscshl.dll
compobj32.dll
complmgr.exe
ComboFix.exe
cfdrive32.exe
cetrdetri.exe
certenc32.dll
cacaoweb.exe
BWUnpairElevated32.dll
btsendto_office32.dll
bbaka15.exe
bbaka12.exe
bbaka11.exe
batmeter32.dll
awddi532.dll
avstc.exe
avmeter32.dll
AudioSes32.dll
atl32.dll
ativtmxx32.dll
Ati2evxx32.dll
api-ms-win-core-misc-l1-1-032.dll
api-ms-win-core-memory-l1-1-032.dll
api-ms-win-core-localization-l1-1-032.dll
api-ms-win-core-handle-l1-1-032.dll
AphedsKjsy.exe
AnyUCC.exe
antivirus.exe
andy143.exe
aecvwnndlta.exe
AdobeFlashPlayer10.9.exe
9873c481[1].exe
83519406.exe
7767468.exe
661889983.exe
4685235473.exe
3960799153.exe
332671538.exe
0.7632468005117614.exe
0.6313319657190839.exe
0.30146787084778204.exe
0.2970695557709677.exe
0.2838932302840502.exe
0.17372345120371913.exe
exe.exe
%UserProfile%\Start Menu\Programs\System Defragmenter\System Defragmenter.lnk
%UserProfile%\Start Menu\Programs\System Defragmenter
%UserProfile%\Desktop\System Defragmenter.lnk
%Temp%\maindll.dll
%Temp%\exe.log
%Temp%\exe.exe
%Temp%\[random].exe

Dynamic Link Libraries to remove (System Defragmenter):

certhelp.dll
adtdll.dll
w32cap.dll
themedlg10.dll
sshnas21.dll
senscfg32.dll
rpcmgr.dll
msacm3232.dll
kbdit32.dll
iologmsg32.dll
imapipage.dll
gpkcsp32.dll
dsquery32.dll
dsdmo32.dll
dpnlobby32.dll
dot3ui32.dll
docprop32.dll
dmband32.dll
dinput832.dll
DeviceCenter32.dll
d3dx9_3032.dll
d3dim32.dll
csseqchk32.dll
cscshl.dll
compobj32.dll
certenc32.dll
BWUnpairElevated32.dll
btsendto_office32.dll
batmeter32.dll
awddi532.dll
avmeter32.dll
AudioSes32.dll
atl32.dll
ativtmxx32.dll
Ati2evxx32.dll
api-ms-win-core-misc-l1-1-032.dll
api-ms-win-core-memory-l1-1-032.dll
api-ms-win-core-localization-l1-1-032.dll
api-ms-win-core-handle-l1-1-032.dll
%Temp%\maindll.dll

Processes to kill (System Defragmenter):

Directory.Eraser.exe
85543106.exe
yotjqf.exe
xyst.exe
xgqqb.exe
wscntfywow.exe
wmupdater.exe
wizu.exe
vsbntlo.exe
USRSVPIA32.exe
updates.exe
Ujo.exe
tasksmgr.exe
systemCall.exe
svchost.exe
SROKing2.0.45_1.exe
shell.exe
setupsmall.exe
scanner[1].exe
rnecaxswom.exe
quupoby.exe
QKNqyUcYtD.exe
provscanxml.exe
pdfupd.exe
PCMAV.exe
packupdate107_2204.exe
openfile.exe
nvsvc32.exe
nidem.exe
msxslt3.exe
mspnp70cf.exe
mspnp54cf.exe
msnmnns.exe
movie.exe
mini-KMS_Activator_v1.052.exe
mema.exe
m.2D9.tmp.exe
m.2B26D.tmp.exe
m.2A8AE.tmp.exe
m.28F41.tmp.exe
m.26375.tmp.exe
m.24CF.tmp.exe
m.21E6C.tmp.exe
lUOVvR.exe
kpmpxmrdlta.exe
kna.exe
killexe.exe
jutched.exe
ieui32.exe
go[1].exe
gdiret.exe
forimg.exe
explorer.exe
errorreporting.exe
ebeprikq.exe
dwm.exe
dmvnmaeshdw.exe
dfrgsnapnt.exe
Datei.exe
ctfmon.exe
complmgr.exe
ComboFix.exe
cfdrive32.exe
cetrdetri.exe
cacaoweb.exe
bbaka15.exe
bbaka12.exe
bbaka11.exe
avstc.exe
AphedsKjsy.exe
AnyUCC.exe
antivirus.exe
andy143.exe
aecvwnndlta.exe
AdobeFlashPlayer10.9.exe
9873c481[1].exe
83519406.exe
7767468.exe
661889983.exe
4685235473.exe
3960799153.exe
332671538.exe
0.7632468005117614.exe
0.6313319657190839.exe
0.30146787084778204.exe
0.2970695557709677.exe
0.2838932302840502.exe
0.17372345120371913.exe
exe.exe
%Temp%\exe.exe
%Temp%\[random].exe

Remove registry entries (System Defragmenter):

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "exe.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random]"
Disclaimer

Comments

  1. Arun Oct 14, 2010

    it worked perfectly thanks a lot i really appreciate it!

  2. Jack and JILL Oct 22, 2010

    Where do I find the instructions?

  3. ash Oct 28, 2010

    just checking these comments aren't fake...

  4. ash Oct 28, 2010

    o good, i can't understand how the ***** i was infected with a virus, my only words are - SOPHOS ANTI VIRUS ***** -.- I was on google opening images (no not porn) before my computer went crazy and system defragmentor opened up

  5. gk Oct 29, 2010

    Did this work for anyone?

  6. Jay Oct 31, 2010

    ash same here, did a basic search in Google images for clean images of 70's tv shows!

  7. GeoffPre1 Nov 15, 2010

    Where are the manual removal instructions?

  8. Kat Nov 28, 2010

    Just to check if this works...Will post again to tell results

  9. Kat Nov 28, 2010

    Me again - just ran it and it asks me to register in order for it to remove the 101 cookies it found...I guess it DOESN'T work then -_-

  10. Voldemort Nov 29, 2010

    Not working for me, wants me to register before it fixes things. Thinking this might be a fake scam too?

  11. Pcthreat Nov 30, 2010

    Voldemort,
    SpyHunter is a serious program, but in order to remove the infections you need to buy a license.
    You could use the free version to check for the files, and then remove them by searching in Your computer

  12. JBS Dec 3, 2010

    Does anyone have printed instructions to remove the files manually. I am not inclined to load another program on my system only to find out it magnified the problem?

  13. Nick Jan 19, 2011

    I just deleted a randomly named .exe that was in my Application Data folder, my AV said it was a virus previously but wouldn't remove it. Deleted it and restarted my PC, all working now. all those errors are gone, files that we not opening now open, and folders that were empty now have files again. files was something like nBgyTvipduY.exe.

  14. Pcthreat Jan 20, 2011

    Nick,

    Good to know You sorted things out. The worst thing is that this System Defragmenter exe file is totally random for every computer.

  15. Heather Apr 17, 2011

    Don't see instructions here. I need step by step here, I'm not that computer savvy.

  16. Will Apr 24, 2011

    heather, i agree. i just became infected with this also. please help me anyone. my e-mail's orangechicken_13@yahoo.com.

  17. david Apr 30, 2011

    i got rid of this thing, but my missing files are still missing. any help there?

  18. Pcthreat May 2, 2011

    david,
    You need to set Windows Explorer to show hidden files. Go to Windows Explorer click Tools -> Folder Options -> View tab -> look for Show hidden files and folders and press "Apply to all folders"

  19. Lily May 20, 2011

    By turning on all hidden files, I can navigate a bit and the machine speed is getting a little better. But how do I manually delete those System Defragmenter files listed above? Thanks.

  20. 80828 May 20, 2011

    Delete Fake Windows 7 Recovery.exe and MEXFxpGUVShIHWB.exe

  21. Pcthreat May 23, 2011

    Lily,

    You can try installing our offered program. It will kill any "System Defragmenter" *****ociated processes and will show all found files related to his infection. You can then browse with Window explorer and delete those files manually

  22. Frank Jun 8, 2011

    does anyone know in what folder exactly they found the virus .exe? i know its different for all but a folder name would help

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.