How to remove Windows Enterprise Suite
Thursday, October 29th, 2009 at 2:04 amHome » Rogue Antispyware » Windows Enterprise Suite
Windows Enterprise Suite description
Windows Enterprise Suite is a computer infection and a fake application combined in a single piece of software. The program may look like a legitimate tool since it mimics behavior of real security tools. It’s named as it was part of Windows operating system; the fact may confuse some people into actually buying WindowsEnterpriseSuite.
Windows EnterpriseSuite is made by the same scammers who presented Volcano Security Suite earlier this week. The malware displays large numbers of counterfeit security alerts. It creates many problems including slow performance and hijacked web browser. WindowsEnterprise Suite offers fixing the computer after users pay for a full version of the program. That is the core of the scam: getting money for a nonfunctional tool.
Get rid of Windows Enterprise Suite
Windows Enterprise Suite is a Rogue Antispyware software
How to manually remove Windows Enterprise Suite
To remove Windows Enterprise Suite spyware you must block Windows Enterprise Suite sites, stop and remove processes, unregister DLL files, search and delete all other Windows Enterprise Suite files and registry utility. Follow the Windows Enterprise Suite detection and removal instructions below.
The most typical software removal method is to remove Windows Enterprise Suite by using "Add or Remove Programs" service. However there may be hidden Windows Enterprise Suite files, running processes and registries in your computer, so Windows Enterprise Suite may recreate all other files after reboot.
Windows Enterprise Suite manual removal instructions
Block Windows Enterprise Suite sites:
windowsenterprisesuite.com
Read more how to block Windows Enterprise Suite sites
Stop and remove Windows Enterprise Suite processes:
WinESuite.exe
wee4a1.exe
ppal.exe
energy.exe
eb.exe
cb.exe
WE83b.exe
Read more how to kill Windows Enterprise Suite processes
Locate and delete Windows Enterprise Suite registry entries:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_ca0d5.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Suite"
Read more how to delete Windows Enterprise Suite registry entries
Download RegistryBooster 2010 to scan errors caused by Windows Enterprise Suite
Search and unregister Windows Enterprise Suite DLL libraries:
tjd.dll
cid.dll
CLSV.dll
ddv.dll
mozcrt19.dll
sqlite3.dll
Read more how to unregister Windows Enterprise Suite DLL files
Detect and delete other Windows Enterprise Suite files:
c:\Documents and Settings\All Users\Application Data\61a60
c:\Documents and Settings\All Users\Application Data\61a60\WE83b.exe
c:\Documents and Settings\All Users\Application Data\61a60\WES.ico
c:\Documents and Settings\All Users\Application Data\WESSys
c:\Documents and Settings\All Users\Application Data\WESSys\wes.cfg
c:\Documents and Settings\All Users\Application Data\WESSys\vd952342.bd
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Enterprise Suite.lnk
%UserProfile%\Application Data\Windows Enterprise Suite
%UserProfile%\Application Data\Windows Enterprise Suite\cookies.sqlite
%UserProfile%\Application Data\Windows Enterprise Suite\47.mof
%UserProfile%\Application Data\Windows Enterprise Suite\mozcrt19.dll
%UserProfile%\Application Data\Windows Enterprise Suite\sqlite3.dll
%UserProfile%\Application Data\Windows Enterprise Suite\Instructions.ini
%UserProfile%\Desktop\Windows Enterprise Suite.lnk
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.exe
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\tjd.dll
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Windows Enterprise Suite.lnk
%UserProfile%\Start Menu\Programs\Windows Enterprise Suite.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
We strongly recommend you to use spyware remover to track Windows Enterprise Suite and automaticaly remove Windows Enterprise Suite processes, registries and files as well as other spyware threats.
Windows Enterprise Suite