Home » News » Rogue Antispyware » Remove Enterprise Suite, Enterprise Suite Removal Help

Remove Enterprise Suite, Enterprise Suite Removal Help

By Luciana on November 13, 2009 | Rogue Antispyware Remove Enterprise Suite, Enterprise Suite Removal Help

Enterprise Suite is a fake security application which tries to gain purchase by misleading the user with falsified system scans and fabricated warning messages. EnterpriseSuite is the program identical to the recently launched Windows Enterprise Suite malware.

The purpose of Enterprise Suite as well as of Windows Enterprise Suite is to corrupt the computer and to trick the user into thinking that their system had actually been infected with viruses and parasites. EnterpriseSuite then suggests purchasing the license for using the software which should take care of the imaginary threats. However, all Enterprise Suite does is make the computer even more vulnerable and accessible for the other rogue tools. Paying money for this application means wasting them away. What you should do when having Enterprise Suite on your computer is remove it immediately.

New processes created

WinESuite.exe
FS.exe
eb.exe
cb.exe
WE345d.exe Learn how to remove malicious processes

New Enterprise Suite registry entries created

HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WE345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=162&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_162]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "887805703"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=162&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Enterprise Suite" Download RegistryBooster 2010 to scan your registry errors
Learn how to remove malicious registry entries

New files and directories created

c:\Documents and Settings\All Users\Application Data\345d567
c:\Documents and Settings\All Users\Application Data\345d567\752.mof
c:\Documents and Settings\All Users\Application Data\345d567\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\345d567\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\345d567\WE345d.exe
c:\Documents and Settings\All Users\Application Data\345d567\WES.ico
c:\Documents and Settings\All Users\Application Data\345d567\WESSys
c:\Documents and Settings\All Users\Application Data\345d567\WESSys\vd952342.bd
c:\Documents and Settings\All Users\Application Data\WESSys
c:\Documents and Settings\All Users\Application Data\WESSys\wes.cfg
%UserProfile%\Application Data\Enterprise Suite
%UserProfile%\Application Data\Enterprise Suite\cookies.sqlite
%UserProfile%\Application Data\Enterprise Suite\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Enterprise Suite.lnk
%UserProfile%\Desktop\Enterprise Suite.lnk
%UserProfile%\Recent\ANTIGEN.dll
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.sys
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\FS.exe
%UserProfile%\Recent\grid.drv
%UserProfile%\Recent\runddlkey.drv
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\SM.drv
%UserProfile%\Recent\tempdoc.dll
%UserProfile%\Recent\tempdoc.tmp
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Enterprise Suite.lnk
%UserProfile%\Start Menu\Programs\Enterprise Suite.lnk
c:\Program Files\Mozilla Firefox\searchplugins\search.xml Learn how to unregister malicious DLL files

How to remove Enterprise Suite

To remove Enterprise Suite manually you must block rogue Enterprise Suite related websites, remove malicious processes and registry entries, unregister dlls and delete all malicious Enterprise Suite files from your computer.
Please note: cleaning your computer is a difficult and dangerous task, manually editing registry entries and removing processes and files may cause serious damage to your system. We strongly recommend scanning your computer with one of the legitimate antispyware scanners.

Scan your computer

More Rogue Antispyware news

System Protection Tools removal guide

System Protection Tools removal guide

System Protection Tools is a rogue anti-spyware tool which spreads via trojan horse. Trojan comes to the system via its vulnerabilities and leaves a backdoor for System Protection Tools to sneak. The parasite comes to the system without user’s knowledge and consent. Read more.


News categories

Latest news