How to remove Enterprise Suite

Friday, November 13th, 2009 at 3:00 am

Enterprise Suite description

Enterprise Suite is a clone of Windows Enterprise Defender and Windows Enterprise Suite rogue programs. EnterpriseSuite is made to mimic actions of security tools in order to push people into purchasing the application.

EnterpriseSuite

Enterprise Suite is usually installed without user’s permission. It reports numerous threats although it’s not capable of scanning a computer. EnterpriseSuite also offers computer protection but the program itself is a malware. Don’t trust pop-ups loaded by Enterprise Suite!

Annoying fake alerts are not the only problem caused by EnterpriseSuite. It interrupts web surfing and slows the compromised machine down. It may also block real security applications.

Get rid of Enterprise Suite

Enterprise Suite is a Rogue Antispyware software

How to manually remove Enterprise Suite

To remove Enterprise Suite spyware you must block Enterprise Suite sites, stop and remove processes, unregister DLL files, search and delete all other Enterprise Suite files and registry utility. Follow the Enterprise Suite detection and removal instructions below.

The most typical software removal method is to remove Enterprise Suite by using "Add or Remove Programs" service. However there may be hidden Enterprise Suite files, running processes and registries in your computer, so Enterprise Suite may recreate all other files after reboot.

Enterprise Suite manual removal instructions

Stop and remove Enterprise Suite processes:
WinESuite.exe
FS.exe
eb.exe
cb.exe
WE345d.exe
Read more how to kill Enterprise Suite processes

Locate and delete Enterprise Suite registry entries:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WE345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=162&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_162]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "887805703"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=162&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Enterprise Suite"
Read more how to delete Enterprise Suite registry entries
Download RegistryBooster 2010 to scan errors caused by Enterprise Suite

Search and unregister Enterprise Suite DLL libraries:
tempdoc.dll
cid.dll
ANTIGEN.dll
mozcrt19.dll
sqlite3.dll
Read more how to unregister Enterprise Suite DLL files

Detect and delete other Enterprise Suite files:
c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\345d567\752.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\WE345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\WES.ico
c:\Documents and Settings\All Users\Application Data\345d567\WESSys
c:\Documents and Settings\All Users\Application Data\345d567\WESSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WESSys
c:\Documents and Settings\All Users\Application Data\WESSys\wes.cfg
%UserProfile%\Application Data\Enterprise Suite
%UserProfile%\Application Data\Enterprise Suite\cookies.sqlite
%UserProfile%\Application Data\Enterprise Suite\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Enterprise Suite.lnk
%UserProfile%\Desktop\Enterprise Suite.lnk
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.sys
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\FS.exe
%UserProfile%\Recent\grid.drv
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\SM.drv
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Enterprise Suite.lnk
%UserProfile%\Start Menu\Programs\Enterprise Suite.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml

We strongly recommend you to use spyware remover to track Enterprise Suite and automaticaly remove Enterprise Suite processes, registries and files as well as other spyware threats.


Tags: ,

Posted in Rogue Antispyware

Leave a Reply