English 
Windows Enterprise Suite Windows Enterprise Suite
By
JubileeX in Rogue Anti-Spyware Program |
0 views
(No Ratings Yet)
Loading ...
Windows Enterprise Suite Description
Windows Enterprise Suite is another false pretender from the notorious VirusMelt rogue anti-spyware family. Security tools such as Windows Enterprise Defender, Volcano Security Suite and Windows Protection Suite are all representatives of this malicious program. Windows Enterprise Suite installs itself onto the compromised computer unexpectedly and operates undetected by using various types of Trojan viruses. Once active the rogue Windows Enterprise Suite will make its own alterations to the Registry and the System32 directory. The host Operating System will now start to fulfil the rogue’s malicious commands. Soon a random PC usage session will be activated with a fake scan which will report false results. The Windows Enterprise Suite will claim to detect malicious applications on your computer and frighten you into buying a licensed copy. Windows Enterprise Suite promises to handle all the forged threats which are really not on your PC at all.
Windows Enterprise Suite is an untrustworthy and dangerous utility. We highly recommend you to remove Windows Enterprise Suite rogue anti-spyware from your computer.
Type: Rogue AntiSpyware Programs
Aliases: WindowsEnterprise Suite
, Windows EnterpriseSuite .
Automatic Detection of Windows Enterprise Suite
Windows Enterprise Suite Technical Report
As new Windows Enterprise Suite details are reported by our customers and findings from our Threat Research Center, we will update this section.
The following Windows Enterprise Suite files with its MD5s were created in the system:
| File Name | File Size | MD5 |
|---|
| WE82f5.exe | 1908736 | 87d71eb6beec7127cfc88d4e900a90e9 |
| WEc584.exe | 1957376 | 9b357776519d55a73f86872037889868 |
| WEccb0.exe | 1897472 | 5178a2fd2832912cc5520aed886ecf7e |
| WE51b2.exe | 1962496 | ace2af59e76595f1cd668b45a029e595 |
| WE0a39.exe | 1929728 | a88fb136f63201c14bdf8ecae26e35f6 |
| WE40ea.exe | 1968640 | 9d0d0cc11fd83a4f6a65836745fee07a |
| WEbf92.exe | 1910784 | b7fa379e1e2a8eed0f097ea58a020cf4 |
| WEc03f.exe | 1926144 | 9590e9e1227548a6eab4bb033bdd48a6 |
Windows Enterprise Suite has typically the following processes in memory:
- uninstall.exe
- Windows Enterprise Suite.exe
Windows Enterprise Suite created the following directories, files, paths:
- %AppData%\Windows Enterprise Suite
- %AllUsersProfile%\Application Data\WESSys
Windows Enterprise Suite creates the following registry entries:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Windows Enterprise Suite”
Important Article Disclaimer
