Windows Enterprise Defender manual removal:
Kill processes:
WindowsEDefender.exe energy.exe ppal.exe
Delete registry values:HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WindowsEDefender.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes "URL"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:61a6083b6194a2314e3dd54cf9615e36_7]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "876902803"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Defender"
Unregister DLLs:mozcrt19.dll sqlite3.dll ddv.dll
Delete files:83.mof mozcrt19.dll sqlite3.dll unins000.dat WED.ico WindowsEDefender.exe vd952342.bd wed.cfg Windows Enterprise Defender.lnk cookies.sqlite cb.sys ddv.dll eb.sys energy.exe pal.sys PE.drv ppal.exe tempdoc.tmp search.xml
Delete directories:c:\Documents and Settings\All Users\Application Data\c9ba
c:\Documents and Settings\All Users\Application Data\c9ba\WEDDSys
c:\Documents and Settings\All Users\Application Data\WEDDSys
%UserProfile%\Application Data\Windows Enterprise Defender
please help!
Post Comment: