Symptoms

Removal instructions:

Analyzed By

Technical Description:

This relatively small executable is most probably just a part of a larger-scale malware attack. When run, it checks under HKLM\System\CurrentControlSet for the WinDefend service (belonging to Microsoft Windows Defender) and disables this service, leaving the user without Windows Defender's protection and making the system more vulnerable to other malware threats.