Remove Windows Enterprise Suite
November 2nd, 2009 | by Alex |Windows Enterprise Suite Descriptions:
Windows Enterprise Suite, also known as WindowsEnterpriseSuite, WindowsEnterprise Suite, Windows EnterpriseSuite, is one of the latest roguewares from the same family as Volcano Security Suite which started to scare computer users several days ago.
Windows Enterprise Suite will start its scans as the installation process of the program ends. However, this is only a tactics to make computer users believe that their computers are in danger. In fact, the scans are simulated in advance, and are nothing more than the scareware for you.
We advise you to be extremely careful with this fake anti-spyware application. Do not install it. Do not have anything in common with it. Keep away from it.
In case, Windows Enterprise Suite is on your computer, we will soon provide you full instructions how to remove this malicious application.
Download SpyHunter* Spyware Detection Utility.
Manual Windows Enterprise Suite Removal Instructions:
Stop These Windows Enterprise Suite Processes:
(Learn how to do this)
Windows Enterprise Suite.exe
uninstall.exe
Find and Delete These Windows Enterprise Suite Files:
(Learn how to do this)
c:\Program Files\Mozilla Firefox\searchplugins\search.xml
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Enterprise Suite.lnk
%UserProfile%\Application Data\Windows Enterprise Suite
%UserProfile%\Application Data\Windows Enterprise Suite\cookies.sqlite
%UserProfile%\Application Data\Windows Enterprise Suite\47.mof
%UserProfile%\Application Data\Windows Enterprise Suite\mozcrt19.dll
%UserProfile%\Application Data\Windows Enterprise Suite\sqlite3.dll
%UserProfile%\Application Data\Windows Enterprise Suite\Instructions.ini
%UserProfile%\Desktop\Windows Enterprise Suite.lnk
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\cb.exe
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\DBOLE.sys
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\eb.exe
%UserProfile%\Recent\eb.sys
%UserProfile%\Recent\energy.exe
%UserProfile%\Recent\exec.tmp
%UserProfile%\Recent\kernel32.drv
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\ppal.exe
%UserProfile%\Recent\SICKBOY.tmp
%UserProfile%\Recent\sld.drv
%UserProfile%\Recent\tjd.dll
%UserProfile%\Recent\tjd.sys
%UserProfile%\Start Menu\Windows Enterprise Suite.lnk
%UserProfile%\Start Menu\Programs\Windows Enterprise Suite.lnk
c:\Documents and Settings\All Users\Application Data\61a60
c:\Documents and Settings\All Users\Application Data\61a60\WE83b.exe
c:\Documents and Settings\All Users\Application Data\61a60\WES.ico
c:\Documents and Settings\All Users\Application Data\WESSys
c:\Documents and Settings\All Users\Application Data\WESSys\wes.cfg
c:\Documents and Settings\All Users\Application Data\WESSys\vd952342.bd
Remove These Windows Enterprise Suite Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Windows Enterprise Suite”
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_ca0d5.DocHostUIHandler
Download SpyHunter* Spyware Detection Utility
13 Responses to “Remove Windows Enterprise Suite”
By Kaela on Nov 10, 2009 | Reply
We’ve got this bugger on the boss’ computer at work. Only problem is that its preventing us from accessing the Task manager. No matter how we try to open it, no dice. How can I get around this?
By jose on Nov 12, 2009 | Reply
i got this in my computer but i dont know how to delete it ?
how do i do this why did this happen?
By alina on Nov 13, 2009 | Reply
I had same problem as Kaela, task manager isnt opening no matter how i tried to open it. I’ve tried to go to safe mode, but its blocking access to safe mode as well. Also its blocking all antivirus programmes. I keep trying anyways.
By john on Nov 13, 2009 | Reply
I ran into the same problem with taskmanager. What I did was find the path to the application and renamed it and restarted. It didn’t clean the whole thing out but it gets you started if you cant get to taskmanager. Another option is “msconfig” and uncheck the startup item WEc60b. Apply and reboot. This will at least keep you from being bothered with the stupid thing at startup
By Rex on Nov 15, 2009 | Reply
I have this on my wife’s laptop. I was able to get tas manager to run by making a copy of the taskmgr.exe file and putting it on the desktop. Then I renamed it. I was unable to find all of the items listed above so I’m hopeing for the best.
By h2onz on Nov 15, 2009 | Reply
Hi Kaela, do a system search for ‘taskmgr’ and change the exe name to taskmgr1 or something. This allows you to boot it. Try this on any other antivirus apps that won’t open too. Unhide all files and system files as well from Folder Options. Even so, I did this and managed to remove all the files but still experiencing problems. Nasty program this one. Good luck!
By doug on Nov 16, 2009 | Reply
Same here. I have manually removed all of the files, registry entries, etc.. and still have the problem. I am currently running sfc /scannow to see if I can remove it long enough to install other antivirus/antispyware programs.
By Paul on Nov 21, 2009 | Reply
I have ran a couple of different removal programs for this, and it seemed to work. But, now the only thing I can not fix is on my Windows Security Center it still shows “Enterprise Suite” as my current Virus Protection software. How can I remove that, and put my original Virus Protection software back? Thanks for any help in advance!
By Bill Burns on Nov 22, 2009 | Reply
How do I remove this very dangerous “Enterprise Suite” visus scam?
By Ryan Grange on Nov 22, 2009 | Reply
I’m helping uninfect a computer with this right now. To get the safe mode menu to come up, turn the computer off as the windows boot screen comes up. Windows will force you to choose a selection, with safe mode being an option when you turn it back on.
By omar on Dec 1, 2009 | Reply
ok very siple for the task down load spy hunter anti. htey ask you that you have turned off serial componentes and one of them is the task just click where its says turn on and off you go
By vic on Dec 7, 2009 | Reply
hi,
ive tried these above instructions and looked at other website instructions but none of these files come up in search or my laptop seems to have different folder names..im 100% i have entereprise suite as it shows up on my desktop an alwyas get virus warnings..i dont know what to do can someone pls help??
By juanita jay on Dec 12, 2009 | Reply
I paid for a year of enterprise suite protection–it was on my computer and working for a few days— then has disappeared entirly from my computer—–
What happened?
And how do I get it back???
Or a year’s refund???
Thank you
Juanita Jay