Home » News » Rogue Antispyware » How to Remove Windows Enterprise Suite, Windows Enterprise Suite Removal Guide

How to Remove Windows Enterprise Suite, Windows Enterprise Suite Removal Guide

By Gina on October 30, 2009 | Rogue Antispyware How to Remove Windows Enterprise Suite, Windows Enterprise Suite Removal Guide

Windows Enterprise Suite is a rogue anti-spyware application. Although it tries pretending to be a real system security program, all that WindowsEnterpriseSuite is actually capable of doing is imitate to act as a security application, but not really perform any useful actions. What Windows Enterprise Suite really does is infect the system with parasites which violate computers security and make it even more vulnerable.

Windows Enterprise Suite is a clone of another recent malicious application – Volcano Security Suite. Both programs are known to be installed by trojans along with a number of harmful and hard-to-remove files. Once Windows EnterpriseSuite enters the system it starts advertising its payed software which is presented as a Windows security tool meant for protecting the computer. However, purchasing this software does not solve the problem, the user does not receive anything in exchange for the money transfer and is left with even more security threats in their system. If you have Windows Enterprise Suite is your computer you should remove it immediately using the instructions provided bellow.

Windows Enterprise Suite websites

windowsenterprisesuite.com Learn how to block rogue websites

New processes created

WinESuite.exe
wee4a1.exe
ppal.exe
energy.exe
eb.exe
cb.exe
WE83b.exe Learn how to remove malicious processes

New Windows Enterprise Suite registry entries created

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_ca0d5.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Suite" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\Documents and Settings\All Users\Application Data\61a60
c:\Documents and Settings\All Users\Application Data\61a60\WE83b.exe
c:\Documents and Settings\All Users\Application Data\61a60\WES.ico
c:\Documents and Settings\All Users\Application Data\WESSys
c:\Documents and Settings\All Users\Application Data\WESSys\wes.cfg
c:\Documents and Settings\All Users\Application Data\WESSys\vd952342.bd
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Enterprise Suite.lnk
%UserProfile%\Application Data\Windows Enterprise Suite
%UserProfile%\Application Data\Windows Enterprise Suite\cookies.sqlite
%UserProfile%\Application Data\Windows Enterprise Suite\47.mof
%UserProfile%\Application Data\Windows Enterprise Suite\mozcrt19.dll
%UserProfile%\Application Data\Windows Enterprise Suite\sqlite3.dll
%UserProfile%\Application Data\Windows Enterprise Suite\Instructions.ini
%UserProfile%\Desktop\Windows Enterprise Suite.lnk
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.exe
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\tjd.dll
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Windows Enterprise Suite.lnk
%UserProfile%\Start Menu\Programs\Windows Enterprise Suite.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml Learn how to unregister malicious DLL files

How to remove Windows Enterprise Suite

To remove Windows Enterprise Suite manually you must block rogue Windows Enterprise Suite related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Windows Enterprise Suite files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

System Protection Tools removal guide

System Protection Tools removal guide

System Protection Tools is a rogue anti-spyware tool which spreads via trojan horse. Trojan comes to the system via its vulnerabilities and leaves a backdoor for System Protection Tools to sneak. The parasite comes to the system without user’s knowledge and consent. Read more.


News categories

Latest news