If You Need Expert Help we recommend you hire a Ninja! Ninja's are well trained in the art of virus removal and can remove all threats from your computer right now. See this Description: Live Enterprise Suite is one of the more dangerous fake anti-spyware programs propagating through the internet today. It is related to Ghost Antivirus and Internet Antivirus, but uses even more aggressive methods than its relatives to push users to buy a license for Live Enterprise Suite. This rogue software reaches the user through malware and fake anti-malware scanners on the internet. As soon as it is installed, it will disable essential Windows services like Task manager and Registry editor, making it harder to remove. In addition, it creates random paths within the Windows folder which results in random termination of Windows Explorer and as a result the user gets completely lost when trying to traverse the files and folders in their PC. Next, Live Enterprise Suite will load at startup and start performing fake system scans, flagging legitimate Windows software as threats via countless pop-ups. The rogue software will also claim that the currently installed ‘trial’ version of Live Enterprise Suite is inadequate to clean the detected threats, and it recommends that the user purchase the ‘full’ version of the rogue software. However, it is important to note that the so-called ‘full’ version is incapable of removing the falsely-generated threats. In some cases as it has flagged Windows files as spyware, removing them could cause the system to malfunction. Therefore no user should allow themselves to be bullied into paying for a license of Live Enterprise Suite.
Live Enterprise Suite
» Download Live Enterprise Suite Removal Software
You should take steps to remove Live Enterprise Suite if you find a copy of it on your system. The required steps are outlined below.
Live Enterprise Suite File Removal Procedures
First of all, it is necessary to stop the following processes which are related to Live Enterprise Suite: ( Learn how to terminate a running process )
- winlogon.exe ( Please note this is a real file process that is most likely infected. DO NOT delete the process. Simply end it if you can.
- services.exe
- [random path]char.exe
- IAPro.exe (this is the main LES program. Stop this and you should then be able to use your current secuirity software )
The next step is to unregister the following DLL files:
- WMILib.dll
- [random path].dll
You will need to run a virus scan using whatever security client you like best to determine the other DLL for you. We do just recommend purchasing a security client to unregister the dlls for you.
The final step in file removal is deleting the files and folders themselves. To complete this step, remove the following files and folders from your computer:
- %UserProfile%Application DataLive Enterprise Suite
- %UserProfile%Application DataLive Enterprise Suitesettings.ini
- %UserProfile%Application DataLive Enterprise Suiteuill.ini
- %UserProfile%Application DataLive Enterprise Suiteunins000.exe
- %UserProfile%Application DataLive Enterprise Suiteupdateloadlist.ini
- %UserProfile%Application DataLive Enterprise Suitedb
- %UserProfile%Application DataLive Enterprise Suitedbconfig.cfg
- %UserProfile%Application DataLive Enterprise SuitedbTimeout.inf
- %UserProfile%Application DataLive Enterprise SuitedbUrls.inf
- %UserProfile%Application DataMicrosoftInternet ExplorerQuick LaunchInternet Antivirus Pro.lnk
- %UserProfile%Application DataMicrosoftWindowswinlogon.exe
- %UserProfile%Local SettingsApplication DataMicrosoftWindowslog.txt
- %UserProfile%Local SettingsApplication DataMicrosoftWindowspguard.ini
- %UserProfile%Local SettingsApplication DataMicrosoftWindowsservices.exe
- %UserProfile%My DocumentsMy Picturesatbyin.exe
- c:Program FilesCommon Files[random path]char.exe
- c:Program FilesCommon Files[random path]calc.exe
- c:Program FilesInternet Antivirus Pro
- c:Program FilesInternet Antivirus Proactivate.ico
- c:Program FilesInternet Antivirus ProExplorer.ico
- c:Program FilesInternet Antivirus ProIAPro.exe
- c:Program FilesInternet Antivirus Prounins000.dat
- c:Program FilesInternet Antivirus Prouninstall.ico
- c:Program FilesInternet Antivirus Proworking.log
- c:Program FilesInternet Antivirus Prodb
- c:Program FilesInternet Antivirus ProdbDBInfo.ver
- c:Program FilesInternet Antivirus Prodbia080614.db
- c:Program FilesInternet Antivirus Prodblists.ini
- c:Program FilesInternet Antivirus ProdbWMILib.dll
- c:Program FilesInternet Antivirus ProLanguages
- c:Program FilesInternet Antivirus ProLanguagesIAEs.lng
- c:Program FilesInternet Antivirus ProLanguagesIAFr.lng
- c:Program FilesInternet Antivirus ProLanguagesIAGer.lng
- c:Program FilesInternet Antivirus ProLanguagesIAIt.lng
- c:WINDOWSsystem32[random path].dll
- c:WINDOWSsystem32[random path].dll
- c:Documents and SettingsAll UsersDesktopInternet Antivirus Pro.lnk
- c:Documents and SettingsAll UsersStart MenuProgramsInternet Antivirus Pro
- c:Documents and SettingsAll UsersStart MenuProgramsInternet Antivirus ProInternet Antivirus Pro Home Page.lnk
- c:Documents and SettingsAll UsersStart MenuProgramsInternet Antivirus ProInternet Antivirus Pro.lnk
- c:Documents and SettingsAll UsersStart MenuProgramsInternet Antivirus ProPurchase License.lnk
- c:Documents and SettingsAll UsersStart MenuProgramsInternet Antivirus ProUninstall Internet Antivirus Pro.lnk
Once these steps have been completed, Live Enterprise Suite no longer resides on your hard disk.
Registry Removal Procedures
In order to remove Live Enterprise Suite completely from your system, the following registry keys and settings should also be removed: (How to Edit Registry Here)
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstaskmgr.exe "Debugger"
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstaskmgr.exe "RealDebugger"
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall567 1.4.2.0_is1
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallLive Enterprise Suite_is1
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstaskmgr.exe
- HKEY_LOCAL_MACHINESYSTEMControlSet001EnumRootLEGACY_HTGRDENGINE
- HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesHTGrdEngine
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumRootLEGACY_HTGRDENGINE
- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesHTGrdEngine
- HKEY_CURRENT_USERSoftwareMicrosoftFTP "SearchDir" = "c:program filesInternet Antivirus Pro"
- HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRun "[random]"
- HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Live Enterprise Suite"
- HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "Microsoft Windows logon process"
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMainFeatureControlFEATURE_BROWSER_EMULATION "svchost.exe"
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet Settings5.0User Agent "URIAPRO[]"
- HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsUser Agent "URIAPRO[]"
Once these entries have been removed from the Windows Registry, your computer is completely safe from Live Enterprise Suite.
Conclusion
Inexperienced users should not attempt to remove Live Enterprise Suite manually as a wrong action could cause damage to your system. Unless you are an experienced system administrator, it is recommended to use a web-based repair service such as www.pcninja.com or legitimate anti-virus software such as Spyware Doctor with Antivirus in order to safely and completely remove Live Enterprise Suite. Using a real security client will also make it so you do not get infected again 
Other Software clients that Removevirus.org likes to use
- Spyware Doctor with Antivirus
- Norton
- Trend Micro
- Kaspersky
- AVG
- MalwareBytes
As always please post updates to the file traces. If yours are different then other users will find it helpful.
