How to Remove Live Security Suite Rogue Anti-Spyware?
Live Security Suite Information:
Live Security Suite is a rogue security application that is the successor of another rogue anti-spyware known as Live Enterprise Suite. Live Security Suite is spread by Trojans, misleading advertisements or other misleading programs. It injects into your computer system secretly without not letting know and never asking for your approval. Once active, Live Security Suite will be triggering multiple scanners and popup ads about interception of imaginary threats to convince you to purchase it in order to remove spyware/virus infections. Ignore these malicious attempts from Live Security Suite and remove it immediately from your computer with the following instruction.
Live Security Suite Screenshot:
Manual Removal
Note: If you are not proficient with computer, it’s suggested that you backup your registry before manually removing Live Security Suite Rogue Anti-Spyware. And double check the entries that you are going to delete, or your computer can’t work for missing some files.
Step 1: End its process by opening Task Manager.
LiveSS.exe
services.exe
unins000.exe
Step 2: The registry entries you need to delete:
HKEY_CURRENT_USER\Software\Live Security Suite
HKEY_LOCAL_MACHINE\SOFTWARE\Live Security Suite
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Suite_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\FTP “SearchDir” = “C:\Program Files\Live Security Suite\”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS” = “http://gen-avpay.com/choose/?productid=GENAV3&uid=0&
machineid=c3f92274b4b15694ae2311bd2316c727″
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “uniname” = “Live Security Suite_is1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Live Security Suite”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AVPath” = “\\.\root\SecurityCenter:AntiVirusProduct.instanceGuid=”{653E64F8-62B6-4F96-B22D-4FFC6E44130E}””
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent “URLSS[2.0.3.0]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallDisableNotify” = “0″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirstRunDisabled” = “0″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “UpdatesDisableNotify” = “0″
Step 3: Unregister DLL files:
C:\Program Files\Live Security Suite\db\WMILib.dll
Step 4: Files you need to delete:
C:\Documents and Settings\All Users\Desktop\Live Security Suite.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Live Security Suite Home Page.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Live Security Suite.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Purchase Licence.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Purchase License.lnk
C:\Program Files\Live Security Suite\activate.ico
C:\Program Files\Live Security Suite\Explorer.ico
C:\Program Files\Live Security Suite\LiveSS.exe
C:\Program Files\Live Security Suite\unins000.dat
C:\Program Files\Live Security Suite\uninstall.ico
C:\Program Files\Live Security Suite\working.log
C:\Program Files\Live Security Suite\db\DBInfo.ver
C:\Program Files\Live Security Suite\db\ia080614.db
C:\Program Files\Live Security Suite\db\lists.ini
C:\Program Files\Live Security Suite\db\WMILib.dll
%UserProfile%\Application Data\Live Security Suite\settings.ini
%UserProfile%\Application Data\Live Security Suite\uill.ini
%UserProfile%\Application Data\Live Security Suite\unins000.exe
%UserProfile%\Application Data\Live Security Suite\Uninstall Live Security Suite.lnk
%UserProfile%\Application Data\Live Security Suite\db\config.cfg
%UserProfile%\Application Data\Live Security Suite\db\Timeout.inf
%UserProfile%\Application Data\Live Security Suite\db\Urls.inf
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Live Security Suite.lnk
%UserProfile%\Desktop\Live Security Suite.lnk
%UserProfile%\Desktop\LiveSS.exe.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
Step 5: Directories you need to delete:
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite
C:\Program Files\Live Security Suite
%UserProfile%\Application Data\Live Security Suite
Please, be aware that manual removal of Live Security Suite Rogue Anti-Spyware is a cumbersome task and can not always ensure complete removal of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards.Moreover, lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. That’s why it’s strongly recommended automatic removal of Live Security Suite Rogue Anti-Spyware, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.
Automatic Live Security Suite Rogue Anti-Spyware Removal:
1. Restart your computer and keep pressing F8 Key before Windows launches. Use the arrow keys to select the “Safe Mode with Networking” option, and then hit ENTER Key to continue.
2. Download Spyware Cease (Spyware Cease review), install it and update its database to the latest. After that, restart your computer so as to make Spyware Cease fully functional. Repeat Step 1 into Safe Mode and run an Online Scan of your computer so that Spyware Cease can detect all potential malware in your system.
NOTE: If you have problem installing Spyware Cease, you can download this correction script, unzip it and then double click to run it. It will correct your registry settings that the virus has modified. Then double click the program and finish the installation.
3. After the Online Scan finishes, click “Details” for the malware detected to make sure that your important data are not infected and removed. Ignore or select the scan result and click “Remove” to remove the threats. Reboot your computer and let Spyware Cease delete all detected virus.
4. Click to repair your corrupted registry
Why should you need to repair the registry?
As we all know, virus and Trojans modify and destroy system registry and make the computer malfunction so that the computer will not perform normally. Even if the virus and Trojans are removed, the registry is still destroyed or modified, so the computer still has problems. That’s the very reason why you need to repair the registry. At the meanwhile, some virus and Trojans leave some DLL files in the registry and this will cause strange DLL errors and affect the computer performance.
To make your computer run as perfectly as before or much faster than before:
1. Download and install Multi-Awarded Registry Tool.
2. Run a full scan of your registry.
3. Click “Repair Problems” and repair all errors detected.
After these 3 easy steps, your computer will run much faster than before within minutes!
Related posts:
Step by Step Uninstall/remove Live Enterprise Suite Guide | Spyware Removal Guides on May 14th, 2010
[…] Enterprise Suite is a rogue security program from the same family as Live Security Suite. Live Enterprise Suite is promoted through the use of malware and advertisements that pretend to be […]