Home Malware Programs Rogue Anti-Spyware Programs Windows Enterprise Defender

Windows Enterprise Defender

Posted: October 12, 2009

Threat Metric

Threat Level: 10/10
Infected PCs: 44
First Seen: December 1, 2009
Last Seen: January 23, 2022
OS(es) Affected: Windows

ScreenshotWindows Enterprise Defender is a new rogue anti-spyware (scam, scareware). This program would try and trick a user to purchase it so a user could remove the assumed infections it generated and then detected. When Windows Enterprise Defender installs itself on a user's computer, it will automatically start when Windows is loaded. Before it would launch itself, it would produce a huge amount of essentially harmless files on a user's computer (cb.sys, ddv.dll, eb.sys, energy.exe, pal.sys, PE.drv, ppal.exe and tempdoc.tmp). Then, it would pretend a scan of a user's computer and would show these files as viruses. After all, a user will be asked to purchase the false software program to avoid these viruses.

Additionally, Windows Enterprise Defender would run a huge number of security warnings that would alert a user about an active malware that has been detected, or that a user's computer is currently under attack. These are all false warnings and a user should not purchase this application as it is a scam. If you have any suspect that Windows Enterprise Defender might be on your PC, you should remove it at once. There are two removal process options: manual and automatic.

ScreenshotScreenshotScreenshotScreenshotScreenshot

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



WEb5ef.exe File name: WEb5ef.exe
Size: 2.22 MB (2228224 bytes)
MD5: f75a45dd02cb5ea351d4f40ba09b2d7e
Detection count: 92
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
WindowsEDefender.exe File name: WindowsEDefender.exe
Size: 2.1 MB (2104832 bytes)
MD5: 06b62b83338860ebe70074db8732dc25
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
WEe514.exe File name: WEe514.exe
Size: 2.22 MB (2224128 bytes)
MD5: 7b4534361bbba2e3d66391a781d98f0b
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\Windows Enterprise Defender.exe File name: Windows Enterprise Defender.exe
Size: 2.37 MB (2376282 bytes)
MD5: de3b1c86ae9706766fab94daff64413b
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: C:\Documents and Settings\<username>\Documenti\Download\***s Rogue Pack\***'s Rogue Pack\Windows Enterprise Defender.exe
Group: Malware file
Last Updated: January 23, 2022

Registry Modifications

The following newly produced Registry Values are:

File name without pathWindows Enterprise Defender.lnk
Loading...