Windows Enterprise Suite manual removal:
Kill processes:
WE83b.exe wee4a1.exe cb.exe WinESuite.exe eb.exe energy.exe ppal.exe
Delete registry values:HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_ca0d5.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Enterprise Suite"
Unregister DLLs:mozcrt19.dll sqlite3.dll cid.dll CLSV.dll tjd.dll
Delete files:WE83b.exe WES.ico wes.cfg vd952342.bd Windows Enterprise Suite.lnk cookies.sqlite 47.mof mozcrt19.dll sqlite3.dll Instructions.ini ANTIGEN.sys cb.exe cid.dll CLSV.dll DBOLE.sys ddv.dll eb.exe eb.sys energy.exe exec.tmp kernel32.drv PE.drv PE.tmp ppal.exe SICKBOY.tmp sld.drv tjd.dll tjd.sys search.xml
Delete directories:C:\Documents and Settings\All Users\Application Data\e4a12b7
C:\Documents and Settings\All Users\Application Data\WESSys
C:\Documents and Settings\[UserName]\Application Data\Windows Enterprise Suite
Post Comment:
Attention: Use this form only if you have additional information about Windows Enterprise Suite parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.