Remove Windows Enterprise Suite
November 2nd, 2009 | by Alex |Windows Enterprise Suite Descriptions:
Windows Enterprise Suite, also known as WindowsEnterpriseSuite, WindowsEnterprise Suite, Windows EnterpriseSuite, is one of the latest roguewares from the same family as Volcano Security Suite which started to scare computer users several days ago.
Windows Enterprise Suite will start its scans as the installation process of the program ends. However, this is only a tactics to make computer users believe that their computers are in danger. In fact, the scans are simulated in advance, and are nothing more than the scareware for you.
We advise you to be extremely careful with this fake anti-spyware application. Do not install it. Do not have anything in common with it. Keep away from it.
In case, Windows Enterprise Suite is on your computer, we will soon provide you full instructions how to remove this malicious application.
Download SpyHunter* Spyware Detection Utility.
Manual Windows Enterprise Suite Removal Instructions:
Stop These Windows Enterprise Suite Processes:
(Learn how to do this)
Windows Enterprise Suite.exe
uninstall.exe
Find and Delete These Windows Enterprise Suite Files:
(Learn how to do this)
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Enterprise Suite.lnk
%UserProfile%\Application Data\Windows Enterprise Suite
%UserProfile%\Application Data\Windows Enterprise Suite\cookies.sqlite
%UserProfile%\Application Data\Windows Enterprise Suite\47.mof
%UserProfile%\Application Data\Windows Enterprise Suite\mozcrt19.dll
%UserProfile%\Application Data\Windows Enterprise Suite\sqlite3.dll
%UserProfile%\Application Data\Windows Enterprise Suite\Instructions.ini
%UserProfile%\Desktop\Windows Enterprise Suite.lnk
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.exe
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\tjd.dll
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Windows Enterprise Suite.lnk
%UserProfile%\Start Menu\Programs\Windows Enterprise Suite.lnk
c:\Documents and Settings\All Users\Application Data\61a60
c:\Documents and Settings\All Users\Application Data\61a60\WE83b.exe
c:\Documents and Settings\All Users\Application Data\61a60\WES.ico
c:\Documents and Settings\All Users\Application Data\WESSys
c:\Documents and Settings\All Users\Application Data\WESSys\wes.cfg
c:\Documents and Settings\All Users\Application Data\WESSys\vd952342.bd
Remove These Windows Enterprise Suite Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Windows Enterprise Suite”
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_ca0d5.DocHostUIHandler
Download SpyHunter* Spyware Detection Utility
7 Responses to “Remove Windows Enterprise Suite”
By Kaela on Nov 10, 2009 | Reply
We’ve got this bugger on the boss’ computer at work. Only problem is that its preventing us from accessing the Task manager. No matter how we try to open it, no dice. How can I get around this?
By jose on Nov 12, 2009 | Reply
i got this in my computer but i dont know how to delete it ?
how do i do this why did this happen?
By alina on Nov 13, 2009 | Reply
I had same problem as Kaela, task manager isnt opening no matter how i tried to open it. I’ve tried to go to safe mode, but its blocking access to safe mode as well. Also its blocking all antivirus programmes. I keep trying anyways.
By john on Nov 13, 2009 | Reply
I ran into the same problem with taskmanager. What I did was find the path to the application and renamed it and restarted. It didn’t clean the whole thing out but it gets you started if you cant get to taskmanager. Another option is “msconfig” and uncheck the startup item WEc60b. Apply and reboot. This will at least keep you from being bothered with the stupid thing at startup
By Rex on Nov 15, 2009 | Reply
I have this on my wife’s laptop. I was able to get tas manager to run by making a copy of the taskmgr.exe file and putting it on the desktop. Then I renamed it. I was unable to find all of the items listed above so I’m hopeing for the best.
By h2onz on Nov 15, 2009 | Reply
Hi Kaela, do a system search for ‘taskmgr’ and change the exe name to taskmgr1 or something. This allows you to boot it. Try this on any other antivirus apps that won’t open too. Unhide all files and system files as well from Folder Options. Even so, I did this and managed to remove all the files but still experiencing problems. Nasty program this one. Good luck!
By doug on Nov 16, 2009 | Reply
Same here. I have manually removed all of the files, registry entries, etc.. and still have the problem. I am currently running sfc /scannow to see if I can remove it long enough to install other antivirus/antispyware programs.