Live Security Suite Rogue Anti-Spyware - removal guide

Live Security Suite

Created: 2010-05-17 02:48:23 Author: Renata Mykolaityte

Information about Live Security Suite

Live Security Suite is an application that spreads on computer systems imitating a security tool but in fact it’s a computer infection. It infiltrates with a help of Trojan viruses and once there, displays tons of security alerts, runs its scanner without you asking to do so and causes many more problems.

Live Security Suite is started when computer is rebooted. It is done automatically each time you log in to Windows. At first Live Security Suite runs its scanner and reports about tons of detected infections. In fact the program doesn’t detect infections, but displays completely fake files.

Moreover, the application displays fake security notifications. Some of them look like that:

Live Security Suite has detected harmful software in your system. We strongly recommended you to register Live Security Suite to remove these threats immediately.

Spyware activity alert!
Spyware.BrowserDeath activity detected. This kind of spyware is attempts to steal passwords from Internet Explorer, Mozilla Firefox, Opera and other programs, including logins and passwords from online banking sessions, eBay, PayPal, etc.

Privacy Violation alert!
Live Security Suite detected a Privacy Violation. A program is secretly sending your private data to an untrusted internet host. Click here to block this activity by removing the threat (Recommended).

System files modification alert!
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss. Click here to block unauthorized modification by removing threats (Recommended).

Intercepting programs that may compromise your privacy and harm your system have been detected on your PC. Click here to remove it immediately with Live Security Suite.

Tracking cookies that steal your passwords, accounts and credit card information have been detected in your system. Click here to remove them immediately with Live Security Suite.

Malicious spyware that can harm your system has been detected on your PC. Click here to remove this riskware immediately with Live Security Suite.

We strongly recommend removing Live Security Suite as soon as you notice its existance on your system. Consult our removal guide or download a legitimate antispyware program for a full removal of Live Security Suite.

Parasite images

Live Security Suite Facts

For automatic Live Security Suite removal, please download Spyware Doctor:

Spyware Doctor

Live Security Suite pretends to increase security of your PC
Live Security Suite free version will show popups, alerts and fake results to convince you to pay
Live Security Suite creators will not deliver license keys upon paying or the full version will not be functional
Live Security Suite might be used to download and advertise other malicious software
Live Security Suite might disable some of your PCs or its programs functions

Manual Live Security Suite removal instructions

Note: Manual removal of parasite Live Security Suite is tedious and dangerous task if done incorectly. Stoping and deleting incorrect executables and DLLs, deleting registry entries might harm your PC. Thus we recommend using Spyware Doctor of PCTools for automatical scan and removal of computer parasites, or another reputable spyware remover.

1

Kill malicious Processes:

How to kill malicious processes

LiveSS.exe
services.exe

2

Remove malicious Registery entries:

How to remove malicious registry entries

HKEY_CURRENT_USER\Software\Live Security Suite
HKEY_LOCAL_MACHINE\SOFTWARE\Live Security Suite
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Suite_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\FTP "SearchDir" = "C:\Program Files\Live Security Suite\"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PrS" = "http://gen-avpay.com/choose/?productid=GENAV3&uid=0&machineid=c3f92274b4b15694ae2311bd2316c727"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "uniname" = "Live Security Suite_is1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Live Security Suite"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AVPath" = "\\.\root\SecurityCenter:AntiVirusProduct.instanceGuid="{653E64F8-62B6-4F96-B22D-4FFC6E44130E}""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent "URLSS[2.0.3.0]"

CHANGE THESE KEYS TO 1:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallDisableNotify" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirstRunDisabled" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "UpdatesDisableNotify" = "0"

3

Remove harmful Files:

How to remove harmful files

c:\Documents and Settings\All Users\Desktop\Live Security Suite.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite
c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Live Security Suite Home Page.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Live Security Suite.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Purchase Licence.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Purchase License.lnk
c:\Program Files\Live Security Suite
c:\Program Files\Live Security Suite\activate.ico
c:\Program Files\Live Security Suite\Explorer.ico
c:\Program Files\Live Security Suite\LiveSS.exe
c:\Program Files\Live Security Suite\unins000.dat
c:\Program Files\Live Security Suite\uninstall.ico
c:\Program Files\Live Security Suite\working.log
c:\Program Files\Live Security Suite\db
c:\Program Files\Live Security Suite\db\DBInfo.ver
c:\Program Files\Live Security Suite\db\ia080614.db
c:\Program Files\Live Security Suite\db\lists.ini
c:\Program Files\Live Security Suite\db\WMILib.dll
c:\Program Files\Live Security Suite\Languages
%UserProfile%\Application Data\Live Security Suite
%UserProfile%\Application Data\Live Security Suite\settings.ini
%UserProfile%\Application Data\Live Security Suite\uill.ini
%UserProfile%\Application Data\Live Security Suite\unins000.exe
%UserProfile%\Application Data\Live Security Suite\Uninstall Live Security Suite.lnk
%UserProfile%\Application Data\Live Security Suite\db
%UserProfile%\Application Data\Live Security Suite\db\config.cfg
%UserProfile%\Application Data\Live Security Suite\db\Timeout.inf
%UserProfile%\Application Data\Live Security Suite\db\Urls.inf
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Live Security Suite.lnk
%UserProfile%\Desktop\Live Security Suite.lnk
%UserProfile%\Desktop\LiveSS.exe.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

4

Scan your System:

Scan your System with free scanners for remaining computer parasites

*Name
*E-mail

Live Enterprise Suite

Created: 2010-01-27 04:25:13 Author:Gaby C.

Stay away from Live Enterprise Suite application. It’s a rogue program that spreads through the use of spyware and fake anti-spyware scanners online. If installed, LiveEnterpriseSuite disables Task Manager at first, so that you cannot terminate any processes of this parasite and the program can successfully work on its major purpose. It’s not difficult to guess that the main thing Live Enterprise Suite was created for is to steal computer users’ money. Just like most of the...

Posted in: Rogue Anti-Spyware

No comments yet

AV Security Suite

Created: 2010-06-30 08:19:37 Author:Gaby C.

AV Security Suite is another malicious program of the family of rogues presenting such dangerous programs as Antivirus Soft or Antispyware Soft. Being promoted by malicious PDF files, AVSecuritySuite applies its tricky tactics on the target computer – it shows fake alerts and pop up ads so often that they can hardly be ignored. Malware similarly tells for its victims that there is a great number of viruses on their PCs detected that need to be eliminated immediately. For that, people...

Posted in: Rogue Anti-Spyware

No comments yet

Live PC Care

Created: 2009-12-08 01:14:53 Author:Gaby C.

Live PC Care (sometimes called LivePC Care or LivePCCare) is another rogue application which comes into the computer’s system unexpectedly and tries to convince users that it is a reputable security tool. In reality Live PC Care is just another copy of badwares Additional Guard, Windows Protection Suite and System Security which all seek to deceive users into wasting their money on the classically called “full” version. After being purchased, it reveals to be a real scam...

Posted in: Rogue Anti-Spyware

No comments yet