How to remove Enterprise Suite
Friday, November 13th, 2009 at 3:00 amHome » Rogue Antispyware » Enterprise Suite
Enterprise Suite description
Enterprise Suite is a clone of Windows Enterprise Defender and Windows Enterprise Suite rogue programs. EnterpriseSuite is made to mimic actions of security tools in order to push people into purchasing the application.
Enterprise Suite is usually installed without user’s permission. It reports numerous threats although it’s not capable of scanning a computer. EnterpriseSuite also offers computer protection but the program itself is a malware. Don’t trust pop-ups loaded by Enterprise Suite!
Annoying fake alerts are not the only problem caused by EnterpriseSuite. It interrupts web surfing and slows the compromised machine down. It may also block real security applications.
Get rid of Enterprise Suite
Enterprise Suite is a Rogue Antispyware software
How to manually remove Enterprise Suite
To remove Enterprise Suite spyware you must block Enterprise Suite sites, stop and remove processes, unregister DLL files, search and delete all other Enterprise Suite files and registry utility. Follow the Enterprise Suite detection and removal instructions below.
The most typical software removal method is to remove Enterprise Suite by using "Add or Remove Programs" service. However there may be hidden Enterprise Suite files, running processes and registries in your computer, so Enterprise Suite may recreate all other files after reboot.
Enterprise Suite manual removal instructions
Stop and remove Enterprise Suite processes:
WinESuite.exe
FS.exe
eb.exe
cb.exe
WE345d.exe
Read more how to kill Enterprise Suite processes
Locate and delete Enterprise Suite registry entries:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WE345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=162&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_162]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "887805703"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=162&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Enterprise Suite"
Read more how to delete Enterprise Suite registry entries
Download RegistryBooster 2010 to scan errors caused by Enterprise Suite
Search and unregister Enterprise Suite DLL libraries:
tempdoc.dll
cid.dll
ANTIGEN.dll
mozcrt19.dll
sqlite3.dll
Read more how to unregister Enterprise Suite DLL files
Detect and delete other Enterprise Suite files:
c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\345d567\752.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\WE345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\WES.ico
c:\Documents and Settings\All Users\Application Data\345d567\WESSys
c:\Documents and Settings\All Users\Application Data\345d567\WESSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WESSys
c:\Documents and Settings\All Users\Application Data\WESSys\wes.cfg
%UserProfile%\Application Data\Enterprise Suite
%UserProfile%\Application Data\Enterprise Suite\cookies.sqlite
%UserProfile%\Application Data\Enterprise Suite\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Enterprise Suite.lnk
%UserProfile%\Desktop\Enterprise Suite.lnk
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.sys
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\FS.exe
%UserProfile%\Recent\grid.drv
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\SM.drv
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Enterprise Suite.lnk
%UserProfile%\Start Menu\Programs\Enterprise Suite.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
We strongly recommend you to use spyware remover to track Enterprise Suite and automaticaly remove Enterprise Suite processes, registries and files as well as other spyware threats.
