How to Uninstall the Enterprise Suite

Enterprise Suite is a program that claims it can remove viruses from your computer and provide protection from online threats. It displays system scan messages showing viruses on your hard drive. The messages urge you to pay for Enterprise Suite, download it and then run it to get rid of the found malware. Computer users who do pay for this so-called software, however, still receive Enterprise Suite system scan messages. This program does not have a virus-removal engine and cannot find any viruses either. The messages it displays are fake. Uninstall Enterprise Suite immediately upon detection.

End System Processes

• 1

  Press the "Ctrl," "Shift" and "Esc" keys at the same time to start the Task Manager.

• 2

  Click the "Processes" tab in the Task Manager's window to view programs running on your PC.

• 3

  Click "WE345d.exe" under "Processes" and click "End Process" button.

• 4

  Repeat Step 3 for "eb.exe," "FS.exe" and "cb.exe."

• 5

  Close the Task Manager.

Remove Registry Entries

• 1

  Go to the "Start" menu, type "Regedit" in the Start Search box and press "Enter" to start the Registry Editor.

• 2

  Browse to and delete the following registry entries in the Registry Editor's window:

  HKEY_CURRENT_USER\Software\3

  HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}

  HKEY_CLASSES_ROOT\WE345d.DocHostUIHandler

  HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=162&q={searchTerms}"

  HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"

  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_162]"

  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "887805703"

  HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=162&q={searchTerms}"

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Enterprise Suite"

• 3

  Close the Registry Editor.

Unregister DLLs

• 1

  Go to the "Start" menu, click "All Programs," click "Accessories" and then "Command Prompt" to start the command-line window.

• 2

  Type "regsvr32 /u antigen.dll" in the Start Search box and press "Enter" to unregister the DLL.

• 3

  Repeat Step 2 for "cid.dll" and "tempdoc.dll."

• 4

  Close the command prompt window.

Delete Files

• 1

  Go to the "Start" menu, type "752.mof" in the Start Search box and press "Enter." Delete all search results.

• 2

  Repeat Step 1 for "mozcrt19.dll," "sqlite3.dll," "WE345d.exe," "WES.ico," "vd952342.bd," "wes.cfg," "cookies.sqlite," "Instructions.ini," "Enterprise Suite.lnk," "antigen.dll," "cb.exe," "cid.dll," "clsv.tmp," "dbole.sys," "ddv.sys," "eb.exe," "energy.sys," "exec.tmp," "FS.exe," "grid.drv," "runddlkey.drv," "sld.drv," "sm.drv," "tempdoc.dll," "tempdoc.tmp" and "tjd.sys."

• 3

  Restart your computer.