How to remove Windows Enterprise Defender

Monday, October 12th, 2009 at 2:45 am
Home » Rogue Antispyware » Windows Enterprise Defender

Windows Enterprise Defender description

Windows Enterprise Defender is presented to you by the same fraudsters that made Windows Additional Guard and Windows PC Defender scams. Windows EnterpriseDefender mimics interface and behavior of Windows Defender which is a legitimate and reputable program. Don’t mistake one tool for another and don’t spend your money for a fake program.

WindowsEnterpriseDefender

WindowsEnterpriseDefender should raise suspicions when it appears on a computer without user’s consent. It imitates system scan and urges to pay for deleting the threats detected. WindowsEnterprise Defender reports falsified infections that should be simply ignored. The program itself is a trouble. It interrupts the use of normal applications and it may block web browsing.

Windows Enterprise Defender is a Rogue Antispyware software

How to manually remove Windows Enterprise Defender

To remove Windows Enterprise Defender spyware you must block Windows Enterprise Defender sites, stop and remove processes, unregister DLL files, search and delete all other Windows Enterprise Defender files and registry utility. Follow the Windows Enterprise Defender detection and removal instructions below.

The most typical software removal method is to remove Windows Enterprise Defender by using "Add or Remove Programs" service. However there may be hidden Windows Enterprise Defender files, running processes and registries in your computer, so Windows Enterprise Defender may recreate all other files after reboot.

Windows Enterprise Defender manual removal instructions

Block Windows Enterprise Defender sites:
windowsenterprisedefender.com Read more how to block Windows Enterprise Defender sites

Stop and remove Windows Enterprise Defender processes:
ppal.exe
energy.exe
WindowsEDefender.exe
Read more how to kill Windows Enterprise Defender processes

Locate and delete Windows Enterprise Defender registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WindowsEDefender.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes "URL"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:61a6083b6194a2314e3dd54cf9615e36_7]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "876902803"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Defender"
Read more how to delete Windows Enterprise Defender registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Enterprise Defender

Search and unregister Windows Enterprise Defender DLL libraries:
ddv.dll
mozcrt19.dll
sqlite3.dll
Read more how to unregister Windows Enterprise Defender DLL files

Detect and delete other Windows Enterprise Defender files:
c:\Documents and Settings\All Users\Application Data\c9ba
c:\Documents and Settings\All Users\Application Data\c9ba\83.mof
c:\Documents and Settings\All Users\Application Data\c9ba\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\c9ba\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\c9ba\unins000.dat
c:\Documents and Settings\All Users\Application Data\c9ba\WED.ico
c:\Documents and Settings\All Users\Application Data\c9ba\WindowsEDefender.exe
c:\Documents and Settings\All Users\Application Data\c9ba\WEDDSys
c:\Documents and Settings\All Users\Application Data\c9ba\WEDDSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WEDDSys
c:\Documents and Settings\All Users\Application Data\WEDDSys\wed.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Enterprise Defender.lnk
%UserProfile%\Application Data\Windows Enterprise Defender
%UserProfile%\Application Data\Windows Enterprise Defender\cookies.sqlite
%UserProfile%\Desktop\Windows Enterprise Defender.lnk
%UserProfile%\Recent\cb.sys
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.exe
%UserProfile%\Recent\pal.sys
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Start Menu\Windows Enterprise Defender.lnk
%UserProfile%\Start Menu\Programs\Windows Enterprise Defender.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml

We strongly recommend you to use spyware remover to track Windows Enterprise Defender and automaticaly remove Windows Enterprise Defender processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , ,

One Response to

Windows Enterprise Defender

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here