Severity scale  
  (73/100)

Windows Enterprise Suite. How to Remove? (Uninstall Guide)

removal by - -   Also known as WindowsEnterpriseSuite, Windows EnterpriseSuite, WindowsEnterprise Suite | Type: Rogue Antispyware
12
Windows Enterprise Suite is a misleading application that reports false computer infections or threats and displays fake security warnings to convince you that your computer is infected with malware. Once installed, the rogue program will perform a fake system scan and report various infections. In reality, the scan results from this misleading program are false. It displays the same scan results one each compromised computer. The main goal of WindowsEnterprise Suite is to trick you into purchasing the program. Obviously, you shouldn't buy it. This is nothing more but a scan. Instead, uninstall Windows Enterprise Suite from the system upon detection.

When running, Windows Enterprise Suite will modify Windows Hosts file and restrict access to the security websites mostly to protect itself from being deleted. It will also produce outbound traffic, open certain system ports and download other files from the Internet. To make this scam even more effective, WindowsEnterpriseSuite will flood your computer with very annoying and of course fake security alerts and notifications about serious security and privacy issues. It imitates the legitimate Windows Security Center. The fake one is called Windows Advanced Security Center and it promotes the rogue program. It uses Windows Genuine Advantage Notification image as Activation button to make it look more reliable and legitimate. And last but not least, Windows Enterprise Suite will disable Task Manager, Registry Editor, System Restore and block anti-virus software. If you are infected with this malicious software, please use the removal guide below to remove Windows Enterprise Suite from your PC manually for free. If you have already purchased it, you should contact your credit card company and dispute the charges. Related files: cookies.sqlite, mozcrt19.dll, sqlite3.dll, ANTIGEN.sys, cb.exe

Windows Enterprise Suite properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Enterprise Suite. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall Windows Enterprise Suite. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes Windows Enterprise Suite (2009-10-29 06:00:43)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Windows Enterprise Suite (2009-10-29 06:00:43)
Plumbytes
We are testing Plumbytes's efficiency (2009-10-29 23:25)
Hitman Pro
STOPzilla
Tested and Confirmed! STOPzilla removes Windows Enterprise Suite (2009-10-29 06:00:43)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes Windows Enterprise Suite (2009-10-29 06:00:43)
Webroot SecureAnywhere AntiVirus
Windows Enterprise Suite screenshot
Windows Enterprise Suite snapshot

Windows Enterprise Suite manual removal

Kill processes:
WE83b.exe
wee4a1.exe
cb.exe
WinESuite.exe
eb.exe
energy.exe
ppal.exe
Delete registry values:
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_ca0d5.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Suite"
Unregister DLLs:
mozcrt19.dll
sqlite3.dll
cid.dll
CLSV.dll
tjd.dll

Delete files:
WE83b.exe
WES.ico
wes.cfg
vd952342.bd
Windows Enterprise Suite.lnk
cookies.sqlite
47.mof
mozcrt19.dll
sqlite3.dll
Instructions.ini
ANTIGEN.sys
cb.exe
cid.dll
CLSV.dll
DBOLE.sys
ddv.dll
eb.exe
eb.sys
energy.exe
exec.tmp
kernel32.drv
PE.drv
PE.tmp
ppal.exe
SICKBOY.tmp
sld.drv
tjd.dll
tjd.sys
search.xml
Delete directories:
C:\Documents and Settings\All Users\Application Data\e4a12b7
C:\Documents and Settings\All Users\Application Data\WESSys
C:\Documents and Settings\[UserName]\Application Data\Windows Enterprise Suite

Geolocation of Windows Enterprise Suite

Map reveals the prevalence of Windows Enterprise Suite. Countries and regions that have been affected the most are: United States.

Information updated:

Comments on Windows Enterprise Suite

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)