Remove Windows Enterprise Defender
|
|
Title: Windows Enterprise Defender |
Also known as: WindowsEnterpriseDefender, Windows EnterpriseDefender, WindowsEnterprise Defender |
|
|
Type: Spyware |
Severity scale: (73 / 100)
|
 |
When running, Windows Enterprise Defender will be configured to run each time you logon into Windows. It will imitate system scan and report many computer security threats. However, do not worry, the scan results are false. In other words, Windows EnterpriseDefender will actually detect harmless files that were created by the rogue program upon infiltration. What is more, Windows Enterprise Defender will constantly display many fake security alerts stating that your computer is under attack by an Internet Virus. Most importantly, do not purchase this bogus program. If your computer is already infected please use the removal guide below to remove Windows Enterprise Defender from the system manually for free.
FORUM:Related files: search.xml, tempdoc.tmp, ppal.exe, PE.drv, pal.sys, energy.exe, eb.sys, ddv.dll, cb.sys, cookies.sqlite, Windows Enterprise Defender.lnk, wed.cfg, vd952342.bd, WindowsEDefender.exe, WED.ico, unins000.dat, sqlite3.dll, mozcrt19.dll, 83.mof
Windows Enterprise Defender properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background
Windows Enterprise Defender snapshot:
Automatic Windows Enterprise Defender removal:
remover for Windows Enterprise Defender
Windows Enterprise Defender manual removal:
Kill processes:WindowsEDefender.exe energy.exe ppal.exe
HELP:Delete registry values:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WindowsEDefender.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes "URL"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:61a6083b6194a2314e3dd54cf9615e36_7]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "876902803"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Defender"
Unregister DLLs:
mozcrt19.dll sqlite3.dll ddv.dll
Delete files:
83.mof mozcrt19.dll sqlite3.dll unins000.dat WED.ico WindowsEDefender.exe vd952342.bd wed.cfg Windows Enterprise Defender.lnk cookies.sqlite cb.sys ddv.dll eb.sys energy.exe pal.sys PE.drv ppal.exe tempdoc.tmp search.xml
Delete directories:
c:\Documents and Settings\All Users\Application Data\c9ba
c:\Documents and Settings\All Users\Application Data\c9ba\WEDDSys
c:\Documents and Settings\All Users\Application Data\WEDDSys
%UserProfile%\Application Data\Windows Enterprise Defender
Other programs to remove Windows Enterprise Defender:
• Malwarebytes Anti Malware - Review - Download• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download
Information added: 10/10/09
Information updated: 21/10/09
Additional resources related to Windows Enterprise Defender:
Attention: If you know or you have a website or page about Windows Enterprise Defenderremoval, feel free to add a link to this list: add url
|
|
more resources
Post Comment:
Attention: Use this form only if you have additional information about Windows Enterprise Defender parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Latest spyware news:
Rogue security applications impersonate leading anti-virus manufacturers Attack of Waledac Worm is schedulled on July 4 Another Parasite Attack Spreads Via Twitter Free security product vets Twitter links Mac trojan targets game sites to infect users Security Threat at Fanny Mae Some web sites to avoid for today British Government will track all e-mail's YOUR SISTER NAKED LOLZ com “intervalhehehe” popupSubscribe to news
Similar parasites:
Advanced Virus Remover PCenter Email Redirector System Security MalwaresEradicator Digi Watcher Secure Veteran Spy Fighter Omega Antivir Block ProtectorRelated discussions:
Comments from visitors:
1. by
please help!