How to remove Windows Enterprise Defender
Monday, October 12th, 2009 at 2:45 amHome » Rogue Antispyware » Windows Enterprise Defender
Windows Enterprise Defender description
Windows Enterprise Defender is presented to you by the same fraudsters that made Windows Additional Guard and Windows PC Defender scams. Windows EnterpriseDefender mimics interface and behavior of Windows Defender which is a legitimate and reputable program. Don’t mistake one tool for another and don’t spend your money for a fake program.
WindowsEnterpriseDefender should raise suspicions when it appears on a computer without user’s consent. It imitates system scan and urges to pay for deleting the threats detected. WindowsEnterprise Defender reports falsified infections that should be simply ignored. The program itself is a trouble. It interrupts the use of normal applications and it may block web browsing.
Windows Enterprise Defender is a Rogue Antispyware software
How to manually remove Windows Enterprise Defender
To remove Windows Enterprise Defender spyware you must block Windows Enterprise Defender sites, stop and remove processes, unregister DLL files, search and delete all other Windows Enterprise Defender files and registry utility. Follow the Windows Enterprise Defender detection and removal instructions below.
The most typical software removal method is to remove Windows Enterprise Defender by using "Add or Remove Programs" service. However there may be hidden Windows Enterprise Defender files, running processes and registries in your computer, so Windows Enterprise Defender may recreate all other files after reboot.
Windows Enterprise Defender manual removal instructions
Block Windows Enterprise Defender sites:
windowsenterprisedefender.com
Read more how to block Windows Enterprise Defender sites
Stop and remove Windows Enterprise Defender processes:
ppal.exe
energy.exe
WindowsEDefender.exe
Read more how to kill Windows Enterprise Defender processes
Locate and delete Windows Enterprise Defender registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WindowsEDefender.DocHostUIHandler
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes "URL"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:61a6083b6194a2314e3dd54cf9615e36_7]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "876902803"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Defender"
Read more how to delete Windows Enterprise Defender registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Enterprise Defender
Search and unregister Windows Enterprise Defender DLL libraries:
ddv.dll
mozcrt19.dll
sqlite3.dll
Read more how to unregister Windows Enterprise Defender DLL files
Detect and delete other Windows Enterprise Defender files:
c:\Documents and Settings\All Users\Application Data\c9ba
c:\Documents and Settings\All Users\Application Data\c9ba\83.mof
c:\Documents and Settings\All Users\Application Data\c9ba\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\c9ba\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\c9ba\unins000.dat
c:\Documents and Settings\All Users\Application Data\c9ba\WED.ico
c:\Documents and Settings\All Users\Application Data\c9ba\WindowsEDefender.exe
c:\Documents and Settings\All Users\Application Data\c9ba\WEDDSys
c:\Documents and Settings\All Users\Application Data\c9ba\WEDDSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WEDDSys
c:\Documents and Settings\All Users\Application Data\WEDDSys\wed.cfg
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Enterprise Defender.lnk
%UserProfile%\Application Data\Windows Enterprise Defender
%UserProfile%\Application Data\Windows Enterprise Defender\cookies.sqlite
%UserProfile%\Desktop\Windows Enterprise Defender.lnk
%UserProfile%\Recent\cb.sys
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.exe
%UserProfile%\Recent\pal.sys
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Start Menu\Windows Enterprise Defender.lnk
%UserProfile%\Start Menu\Programs\Windows Enterprise Defender.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
We strongly recommend you to use spyware remover to track Windows Enterprise Defender and automaticaly remove Windows Enterprise Defender processes, registries and files as well as other spyware threats.



Windows Enterprise Defender