WindowsEnterpriseSuite Removal Instructions

You always need to be on the lookout for rogue security applications, which is why you should look out for WindowsEnterpriseSuite. This rogue will go to great lengths to fool you into buying its program as well as protect itself from being removed. Once it has infected your computer, most likely through a Trojan horse, it will start blocking security websites. It will also disable your Task Manager, among other things.

The scam it runs involves fake security warnings about infections and fake system scans that produce false results. It will also pretend to be Windows Security Center and generating alerts that will promote WindowsEnterpriseSuite. Therefore, be wary of any alerts from “Windows Advanced Security Center.”

This program isn’t just a scam, it is harmful to your computer. It will slow its performance, slow your Internet connection, and flood your computer with pop-ups and malware. Therefore, it should be removed as soon as possible.

You can remove it manually by killing the following processes:

WE83b.exe

wee4a1.exe

cb.exe

WinESuite.exe

eb.exe

energy.exe

ppal.exe


Type : Rogue Security Application

Relative file contents : WE83b.exe, WES.ico, wes.cfg, vd952342.bd, Windows Enterprise Suite.lnk, cookies.sqlite, 47.mof, mozcrt19.dll, sqlite3.dll, Instructions.ini, ANTIGEN.sys, cb.exe, cid.dll, CLSV.dll, DBOLE.sys, ddv.dll, eb.exe, eb.sys, energy.exe, exec.tmp, kernel32.drv, PE.drv, PE.tmp, ppal.exe, SICKBOY.tmp, sld.drv, tjd.dll, tjd.sys, search.xml

Then, delete these registry values:

HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_ca0d5.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes “URL” => “http://search-gala.com/?&uid=7&q={searchTerms}”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “RunInvalidSignatures” = 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Windows Enterprise Suite”

Unregister the following DLLs:

mozcrt19.dll
sqlite3.dll
cid.dll
CLSV.dll
tjd.dll

Delete these files:

WE83b.exe
WES.ico
wes.cfg
vd952342.bd
Windows Enterprise Suite.lnk
cookies.sqlite
47.mof
mozcrt19.dll
sqlite3.dll
Instructions.ini
ANTIGEN.sys
cb.exe
cid.dll
CLSV.dll
DBOLE.sys
ddv.dll
eb.exe
eb.sys
energy.exe
exec.tmp
kernel32.drv
PE.drv
PE.tmp
ppal.exe
SICKBOY.tmp
sld.drv
tjd.dll
tjd.sys
search.xml

Finally, delete these directories:

C:\Documents and Settings\All Users\Application Data\e4a12b7
C:\Documents and Settings\All Users\Application Data\WESSys
C:\Documents and Settings\[UserName]\Application Data\Windows Enterprise Suite

Automatic Removal is Simpler and Easier:
Though these instructions will remove WindowsEnterpriseSuite from your computer, it isn’t the best means of removal. If there are any other malware programs on your PC, they should be removed as well. This is why you should use a trustworthy antispyware program to clean up your computer.

 


Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Sandra Malloy says:

    WindowsEnterpriseSuite infected my computer and I didn’t know how to get rid of it. I was tired of so many pop-ups, telling me to buy the product. This is horrible!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php