Severity scale:  
  (73/100)

Windows Enterprise Defender. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as WindowsEnterpriseDefender, Windows EnterpriseDefender, WindowsEnterprise Defender | Type: Rogue Antispyware
12

Windows Enterprise Defender is a misleading security application. The program is from the same family as Virus Doctor scareware. Basically, it is just another typical rogue application that uses fake scans/false scan results and fake security warnings to make you think your computer is infected with Trojans, spyware and other malware. As you probably already know, the main goal of a rogue application is to trick you into purchasing so-called full version of the program which of course doesn’t even exist. WindowsEnterpriseDefender does exactly the same. That’s why, we strongly recommend you to uninstall Windows Enterprise Defender from your PC upon detection. Please also note that removal delay will likely cause more damage to the system as this parasite may download additional malware on your PC.

When running, Windows Enterprise Defender will be configured to run each time you logon into Windows. It will imitate system scan and report many computer security threats. However, do not worry, the scan results are false. In other words, Windows EnterpriseDefender will actually detect harmless files that were created by the rogue program upon infiltration. What is more, Windows Enterprise Defender will constantly display many fake security alerts stating that your computer is under attack by an Internet Virus. Most importantly, do not purchase this bogus program. If your computer is already infected please use the removal guide below to remove Windows Enterprise Defender from the system manually for free.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Enterprise Defender you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Enterprise Defender. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Enterprise Defender (2009-10-21)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Windows Enterprise Defender (2009-10-21)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Enterprise Defender (2009-10-21)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Windows Enterprise Defender (2009-10-21)
Windows Enterprise Defender snapshot
Windows Enterprise Defender

Windows Enterprise Defender manual removal:

Kill processes:
WindowsEDefender.exe

energy.exe

ppal.exe

Delete registry values:
HKEY_CLASSES_ROOTCLSID{3F2BBC05-40DF-11D2-9455-00104BC936FF}

HKEY_CLASSES_ROOTWindowsEDefender.DocHostUIHandler

HKEY_USERS.DEFAULTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"

HKEY_USERSS-1-5-18SoftwareMicrosoftInternet ExplorerSearchScopes "URL"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings5.0User AgentPost Platform "[xSP_2:61a6083b6194a2314e3dd54cf9615e36_7]"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings5.0User AgentPost Platform "876902803"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "Windows Enterprise Defender"

Unregister DLLs:
mozcrt19.dll

sqlite3.dll

ddv.dll

Delete files:
83.mof

mozcrt19.dll

sqlite3.dll

unins000.dat

WED.ico

WindowsEDefender.exe

vd952342.bd

wed.cfg

Windows Enterprise Defender.lnk

cookies.sqlite

cb.sys

ddv.dll

eb.sys

energy.exe

pal.sys

PE.drv

ppal.exe

tempdoc.tmp

search.xml

Delete directories:
c:Documents and SettingsAll UsersApplication Datac9ba

c:Documents and SettingsAll UsersApplication Datac9baWEDDSys

c:Documents and SettingsAll UsersApplication DataWEDDSys

%UserProfile%Application DataWindows Enterprise Defender


  • Guest

    spydoctor didnt remove it!

  • Guest

    good god man can someone help me. my McAfee cant run, spydr wont run, this damn thing has stopped EVERYTHING on my computer! cant even do Control Alt Delete!

    please help!