Remove Live Security Platinum (Uninstall Guide)

Live Security Platinum is a malicious program also known as rogue security software, which will display fake security alerts in an attempt to scare you into buying this fake security product.
In addition, Live Security Platinum has also hijacked your PC,blocking your from running files,so now when your trying to open and executable file (file ending with .exe), this program will instead display this fake alerts:
Warning! Application cannot be executed. The file rdpclip.exe is infected. Please active your antivirus software.

Advertisements

Security Monitor: WARNING! Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk. To get rid of unwanted spyware and keep your computer safe you need to update your current security software. Click Yes to download official intrusion detection system (IDS software).

Live Security Platinum Warning Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla FireFox, Outlook and other programs. Click here to remove it immediately with Live Security Platinum

Live Security Platinum Firewall Alert Live Security Platinum Firewall has blocked a program from accessing the Internet. Internet Explorer Internet Browser is infected with SVCHOST.Stealth.Key-logger. This worm is trying to send your credit card details using Internet Explorer Internet Browser to connect to remove host

Advertisements

Live Security Platinum will also cause malicious browser redirects and system slowdowns so it needs to be removed from your computer as soon as possible.
This is are a few images of Live Security Platinum:

Advertisements

Registration codes for Live Security Platinum
As an optional step,you can use the following license key to register Live Security Platinum and stop the fake alerts.
AA39754E-715219CE
Please keep in mind that entering the above registration code will NOT remove Live Security Platinum from your computer , instead it will just stop the fake alerts so that you’ll be able to complete our removal guide more easily.

Advertisements

Live Security Platinum Removal Guide

STEP 1 : Start your computer in Safe Mode with Networking

Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.
Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER.

Advertisements

STEP 2: Remove Live Security Platinum malicious proxy server

Live Security Platinum may add a proxy server which prevents the user from accessing the internet,follow the below instructions to remove the proxy.

Start the Internet Explorer browser and if you are using Internet Explorer 9 ,click on the gear icon (Tools for Internet Explorer 8 users) ,then select Internet Options.
Go to the tab Connections.At the bottom, click on LAN settings.
Uncheck the option Use a proxy server for your LAN. This should remove the malicious proxy server and allow you to use the internet again.

If you are a Firefox users, go to Firefox(upper left corner) → Options → Advanced tab → Network → Settings → Select No Proxy

STEP 3: Repair your Windows Registry from Live Security Platinum malicious changes.

Smart Fortress 2012 has changed your Windows registry settings so that when you try to run a executable file (ending with .exe ) , it will instead launch the infection rather than the desired program.

Download the registryfix.reg file to fix the malicious registry changes from Live Security Platinum.
Download RegistryFix.regOpens the download page in a new tab.
Double-click on registryfix.reg file to run it. Click “Yes” for Registry Editor prompt window,then click OK.

STEP 4: Run RKill to terminate known malware processes associated with Live Security Platinum.

RKill is a program that will attempt to terminate all malicious processes associated with Live Security Platinum,so that we will be able to perform the next step without being interrupted by this malicious software.
Because this utility will only stop Live Security Platinum running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again.

While your computer is in Safe Mode with Networking ,please download the latest official version of RKill.Please note that we will use a renamed version of RKILL so that Live Security Platinum won’t block this utility from running.
Download RKillYour download starts right away.
Double-click on the iExplore.exe icon in order to automatically attempt to stop any processes associated with Live Security Platinum.
RKill will now start working in the background, please be patient while the program looks for various malware programs and tries to terminate them.

IF you are having problems starting or running RKill, you can download any other renamed versions of RKill from here.
When Rkill has completed its task, it will generate a log. You can then proceed with the rest of the guide.

WARNING: Do not reboot your computer after running RKill as the malware process will start again , preventing you from properly performing the next step.

STEP 5: Remove Live Security Platinum malicious files with Malwarebytes Anti-Malware FREE

Download the latest official version of Malwarebytes Anti-Malware FREE.
Download MalwarebytesFree official installer. Your download starts right away.
Start the Malwarebytes’ Anti-Malware installation process by double clicking on mbam-setup file.
When the installation begins, keep following the prompts in order to continue with the setup process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked. Then click on the Finish button. If Malwarebytes’ prompts you to reboot, please do not do so.
Malwarebytes Anti-Malware will now start and you’ll be prompted to start a trial period , please select ‘Decline‘ as we just want to use the on-demand scanner.
On the Scanner tab,select Perform full scan and then click on the Scanbutton to start scanning your computer.
Malwarebytes’ Anti-Malware will now start scanning your computer for Live Security Platinum malicious files as shown below.
When the scan is finished a message box will appear, click OK to continue.
You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image.Make sure that everything is Checked (ticked) and click on the Remove Selectedbutton.
Malwarebytes’ Anti-Malware will now start removing the malicious files.After completing this task it will display a message stating that it needs to reboot,please allow this request and then let your PC boot in Normal mode.

STEP 6: Double check your system for any left over infections with HitmanPro

This step can be performed in Normal Mode ,so please download the latest official version of HitmanPro.
Download HitmanProOfficial Sophos download. Free scan, free 30-day trial to remove threats.
Double click on the previously downloaded fileto start the HitmanPro installation.

IF you are experiencing problems while trying to starting HitmanPro, you can use the “Force Breach” mode.To start this program in Force Breach mode, hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (How to start HitmanPro in Force Breach mode – Video)
Click on Next to install HitmanPro on your system.
The setup screen is displayed, from which you can decide whether you wish to install HitmanPro on your machine or just perform a one-time scan, select a option then click on Next to start a system scan.
HitmanPro will start scanning your system for malicious files. Depending on the size of your hard drive, and the performance of your computer, this step will take several minutes.
Once the scan is complete,a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click Next.
Click Activate free license to start the free 30 days trial and remove the malicious files.
HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.

STEP 7: Remove any left over malicious registry keys and files

Live Security Platinum has sadded some malicious registry keys to your Windows installation , to remove this malicious changes we need to run a scan with RogueKiller

Please download the latest official version of RogueKiller.
Download RogueKillerOpens the download page in a new tab.
Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Start button to perform a system scan.
After the scan has completed, press the Delete button to remove any malicious registry keys.
Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.

If you are still experiencing problems while trying to remove Windows Custom Safety from your machine, please start a new thread in our Malware Removal Assistance forum.

Advertisements

Finish the cleanup. Keep protection on.

Follow the removal steps above, then consider ongoing protection against malicious software and unwanted advertising.

Affiliate links We may earn a commission if you buy through these links, at no extra cost to you. How we’re funded

MalwarebytesSCAM & MALWARE PROTECTION

Go beyond a one-time scan.

Malwarebytes can detect and remove malware and unwanted programs. Premium Security adds real-time protection against new threats.

Scam Guard for suspicious messages
Real-time malware protection with Premium

Explore MalwarebytesExplore features on the official website

AdGuardAD & TRACKER BLOCKING

Reduce unwanted ads and redirects.

AdGuard filters ads and trackers while you browse. It can help reduce exposure to advertising that sends you to unwanted pages.

Blocks intrusive ads and pop-ups
Filters trackers while you browse

Explore AdGuardExplore features on the official website

Features vary by device and plan. These tools add protection; they do not guarantee that a website or offer is trustworthy.

Join the discussion

538 comments

Share your experience or ask a question about this article.

Your progress

Did these steps help?

Let us know how the guide worked for you.

Erika14 years ago
Thank you so much!! You are my savior :)

Reply Report
C
Chris Devlin14 years ago
Further help please!

Firstly as with all the comments, thanks for you advice. Top man.
I have cleared the Live Security Platinum malware using your initial steps, followed by both Kaspersky Virus Removal Tool and then ESET Online Scanner utility. Like one of the other threads everything is working fine but my windows firewall is corrupted as is my windows update. I get the error message “update your firewall settings” then when I click on “use recommended settings” I get the error message “windows cannot change some of your settings. Error code 0x8007042c”. On the Windows update page this was also corrupted. Following your advice I installed and ran through all the steps of tweaking.com – windows repair (all in one) but the Firewall error perists. The windows update now allows checking for updates but throws an error when I try to download and install new updates. Please help. It would be a great shame after clearing things so well to have to re-install the operating system (Win 7 profession 64-bit). Fix this am I become a Barcelona fan!

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to Chris Devlin
  Hello,
  Lets try to fix this and have a new FC Barcelona fan:D
  First run a scan with RogueKiller:
  1. Please download the latest official version of RogueKiller.
    ROGUEKILLER DOWNLOAD LINK (This link will automatically download RogueKiller on your computer)
  2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Start button to perform a system scan.
  3. After the scan has completed, press the Delete button to remove any malicious registry keys.
  4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.
  Next,you’ll need to run a File System Check and Disk Check… To do this , download Windows Repair All In One and install this utility.
  Then go to Step 2 (Check File System) and click on “DO IT”, after this step is done, go to Step 3 (System File Check) and again click on DO IT.
  NEXT,go to the last Startup Repairs tab and click the Start button (bottom right)
  Note: When asked if you would like to create a restore point. It is recommended just in-case something does not go as planned.
  1. Click Unselect All
  2. Put a checkmark in the following items:
    
    Repair Hosts File
    
    Remove Temp Files
    
    Repair Windows Updates
    
    Repair Windows Firewall
    
    Remove Policies Set By Infections
    
    Note: Leave everything else unchecked
  3. Put a checkmark in Restart System When Finished
  4. Now click the Start button (bottom right)
  Let me know everything goes…:D
  Reply Report
  1. Chris Devlin14 years ago
    In reply to Stelian Pilici
    Thanks – I seem to be all sorted. I am officially a FC Barcelona fanatic!. Top man, keep up the good work.
    
    Chris
    
    Report
Tommy14 years ago
Thanks for the effort. Your instruction helps me by fixed my problems. Thanks!

Reply Report
Y
YaYa14 years ago
Thank you Thank you, Stelian!!!

I successfully removed Live Security Platinum, however the Firewall on my McAfee Security Center is off. I can’t turn it on anymore, every time I turned it on, it went off again. Is it because of the Hitman Pro or Malwarebytes’ Anti-Malware? Thank you for your heavenly help again!

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to YaYa
  I have no idea why you can’t turn your McAfee Firewall on,however a re-install should fix this.However I do advise you to remove McAfee and install another security product because McAfee is not that great..
  Quick tips;
  Free – Avast 7 Free version or COMODO Internet Security
  Paid : Norton Internet Security 2012 or Avast Internet Security 7
  Anyway ,you should really start a thread in our Security Configuration forum as you need to build a layerd security config: http://malwaretips.com/Forum-Security-Configuration-Wizard
  
  Also it would very good if you took the time and read this article that I’ve wrote: http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/ .. If you follow it,then we’ll never meet again in this conditions:)
  
  Reply Report
  1. YaYa14 years ago
    In reply to Stelian Pilici
    Thank you Thank you, Stelian! Will go read the articles now!
    
    Report
J
Jaci G14 years ago
Thank you for all the time and effort in putting this together. I have followed the instructions after having this physically show up on my Start menu and pop up when browsing starting two days ago (who knows how long it’s been around). We have 4 users on our home computer and my daughter used hers before we notified her not to, it just showed up today in her user account.
I didn’t need to use the registration code, although a few things popped up initially the other day…I was able to start in Safe Mode, LAN wasn’t checked, used Registryfix, Rkill, and Malwarebytes (already on my computer but had to update) with moderate success. Live Security Platinum still showed up in my start menu so I ran Kaspersky checking the five boxes you listed for others (including my huge removable drive). Finally, LSP is wiped out of my start menu but I still have three flashing suspicious icons (7966335.exe-two of these same item and Java Auto Updater) “is requesting permission to…” The Java program is one that had corrupted files/virus. I plan on running the Eset Online Scanner next unless you have another suggestion.

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to Jaci G
  Hello,
  Please do a ESET Online Scan,and next do a scan with RogueKiller as seen below:
  1. Please download the latest official version of RogueKiller.
    ROGUEKILLER DOWNLOAD LINK (This link will automatically download RogueKiller on your computer)
  2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Start button to perform a system scan.
  3. After the scan has completed, press the Delete button to remove any malicious registry keys.
  4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.
  If you are still experiencing problems while trying to remove this rogue from your machine, please start a new thread in our Malware Removal Assistance forum.
  Good luck!
  Reply Report
M
MichaelS14 years ago
Hello
When I went to add the rkill it gives me a message that says the iexplore.exe has stopped working and the only option is “close program”. I have tried downloading other versions of the rkill but they continue to give me that same message. I left it be while typing this and in the notepad that pops up it said that it terminated the process downloads\explorer.exe is that what is suppose to happen to continue on to the next step with the malwarebytes?

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to MichaelS
  Hello,
  Lets try do this another way.Please follow the below steps…
  
  STEP 1. While in NORMAL MODE,download HitmanPro and then start this program in ForceBreach Mode
  1.Here are the direct download links for HitmanPro,
  – http://dl.surfright.nl/HitmanPro36.exe (For 32bit)
  – http://dl.surfright.nl/HitmanPro36_x64.exe (For 64bit)
  2.Hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including this rogue malicious process
  Here is a video that explains with graphic details how to do this : http://www.youtube.com/watch?v=m6eRWTv2STk
  3. Let HitmanPro scan and remove the detected infections.
  
  STEP 2: While in NORMAL MODE,download/Run Rkill and then run a scan with Malwarebytes
  1.Download any re-named version of Rkill (direct download links bellow):
  RKILL DOWNLOAD LINK #1
  RKILL DOWNLOAD LINK #2
  RKILL DOWNLOAD LINK #3
  2.Next,please perform a scan with Malwarebytes and then do a RogueKiller and Unhide.exe scan as seen on the guide
  
  STEP 3. Run a scan with ESET Online Scanner
  1. Download ESET Online Scanner utility.
    ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
  2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
  3. Check Yes, I accept the Terms of Use
  4. Click the Start button.
  5. Check Scan archives
  6. Push the Start button.
  7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  8. When the scan completes, push List of found threats
  9. Push Export to Text file and save the file to your desktop using a unique name, such as ESET Scan. Include the contents of this report in your next reply.Note – when ESET doesn’t find any threats, no report will be created.
  10. Push the back button.
  11. Push Finish
  Waiting for your reply to tell me how everything is working.. :) Good luck!
  Reply Report
T
Tonae14 years ago
I got to the point of installing Malwarebytes a Anti-Malware and right after clicking finish, I got an error message staying I couldn’t run the program in SAFE MODE. At this point, is it safe for me to reboot in normal mode to continue the removal process?

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to Tonae
  Yes,you can try to run a scan in Normal mode,if it doesn’t work than reply and I’ll help you. :)
  Good luck!
  
  Reply Report
  1. Tonae14 years ago
    In reply to Stelian Pilici
    Thanks sooo much for your help and the money you just saved me. Do you know of any good, FREE anti-virus software I can install until im able to but the Norton i seen advertised recently?
    
    Report
2. underhatten14 years ago
  In reply to Tonae
  I got that message too. Then the program updated and i was able to continue.
  
  Reply Report
View all 5 replies
N
Nat Estes14 years ago
Thank you very much for putting this together. It was easy to follow and appears to have worked well. Going forward, will the Malwarebytes Anti-Malware be enough to protect my computer? What’s the recommended method to prevent something similar going forward?
-Nat

Reply Report
1. Stelian PiliciTeam14 years ago
  In reply to Nat Estes
  As a quick answer :
  Free – Avast 7 Free version or COMODO Internet Security
  Paid : Norton Internet Security 2012 or Avast Internet Security 7
  Anyway ,you should really start a thread in our Security Configuration forum as you need to build a layerd security config: http://malwaretips.com/Forum-Security-Configuration-Wizard
  
  Also it would very good if you took the time and read this article that I’ve wrote: http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/ .. If you follow it,then we’ll never meet again in this conditions:)
  
  Reply Report
M
Mark14 years ago
Thanks for the help and advice.
-started in safe mode removing the Live Security Platinum references from registry per another’s suggestions
-came back with malwarebytes scanned and removed some more
-next reboot found malwarbytes was picking up some items still
-used Rkill I believe from the links above and returned nothing
-Hitman Pro was a life saver…however, it took two attempts and a “force to delete instead of quarantine” to take.
-thought I was complete…decided to run ESET scanner and now have found 2 infected files variant of Win32/Injector.TYT trojan JS/Redirector.NIQ trojan”…which makes sense as while testing I had just clicked on a few google search results pages that bounced me to some obviously incorrect pages.

I likely missed a step or followed the instructions from multiple sources that overlapped with yours, but I’m worried every time I add a new scanner I find new stuff. Regardless, thank you and I’ll keep following the thread for any new advice. Good luck everyone and keep at it.

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to Mark
  Hello Mark,
  You can perform a scan with the following utilities for your peace of mind:
  
  1.Run a scan with Kaspersky Virus Removal Tool
  Click here to download the Kaspersky Virus Removal Tool.
  1. Save it to your desktop.
  2. Double click the setup file to run it.
  3. Follow the onscreen prompts until it is installed
  4. Click the Options button (the ‘Gear’ icon), then make sure only the following are ticked:
    
    System Memory
    
    Hidden startup objects
    
    Disk boot sectors
    
    Local Disk (C:)
    
    Also any other drives (Removable that you may have)
  5. Then click on Actions on the left hand side
  6. Click Select Action, then make sure both Disinfect and Delete if disinfection fails are ticked
  7. Click on Automatic Scan
  8. Now click the Start Scanning button, to run the scan
  9. After the scan is complete, click the reports button (‘Paper icon’, next to the ‘cog’ icon) on the right hand side
  10. Click Detected threats on the left
  11. Now click the Save button, and save it as kaslog.txt to your Desktop
  12. Please copy and paste the contents of kaslog.txt in your next reply.
  2.Run a scan with Eset Online Scanner.
  1. Download ESET Online Scanner utility.
    ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
  2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
  3. Check Yes, I accept the Terms of Use
  4. Click the Start button.
  5. Check Scan archives
  6. Push the Start button.
  7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  8. When the scan completes, push Finish
  Stay safe!
  Reply Report
  1. Flash Buddy14 years ago
    In reply to Stelian Pilici
    Your generosity in providing this information and providing your time is amazing. See, there are some “good guys” still around.
    
    I went through the steps successfully. Found it interesting that every scan, the last one being eset, found virus’
    
    A heart felt thank you.
    
    Flash
    
    Report
DoingDin14 years ago
THANK YOU! THANK YOU! THANK YOU!You are the best!! You saved me 100$…. ***** you geek Squad!
Thank you MalwareTips.coM!

Reply Report
C
Chris14 years ago
Hello, I followed all the steps and it worked great! However, since I got the virus off my laptop Firefox takes forever to respond and the computer seems slow any suggestion?

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to Chris
  You can try to uninstall and then re-install back Firefox.
  As far as the slow down did you check your startup items?If no,then you can use Malwarebytes StartupLite to remove any unnacesary files from starting with Windows.
  Next,please defragment your computer – http://windows.microsoft.com/en-us/windows7/improve-performance-by-defragmenting-your-hard-disk
  Also please run a scan with ESET Online Scanner,just to make sure you don’t have any left over infections.
  1. Download ESET Online Scanner utility.
    ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
  2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
  3. Check Yes, I accept the Terms of Use
  4. Click the Start button.
  5. Check Scan archives
  6. Push the Start button.
  7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  8. When the scan completes, push Finish
  If it is still slow than you’ll need to run a File System Check and Disk Check… To do this , download Windows Repair All In One and install this utility.
  Then go to Step 2 (Check File System) and click on “DO IT”, after this step is done, go to Step 3 (System File Check) and again click on DO IT.
  NEXT,go to the last Startup Repairs tab and click the Start button (bottom right)
  Note: When asked if you would like to create a restore point. It is recommended just in-case something does not go as planned.
  1. Click Unselect All
  2. Put a checkmark in the following items:
    
    Repair Hosts File
    
    Repair Temp Files
    
    Remove Policies Set By Infections
    
    Note: Leave everything else unchecked
  3. Put a checkmark in Restart System When Finished
  4. Now click the Start button (bottom right)
  Reply Report
  1. C
    Chris14 years ago
    In reply to Stelian Pilici
    I’m going to use the windows repair right now, but I don’t see “Repair Temp Files” I only see “Remove Temp Files” is that the option I’m suppose to chose?
    
    Report
    1. Stelian PiliciTeam14 years ago
      In reply to Chris
      Yes,Remove Temp Files….made a typo :)….
      
      Report
View all 6 replies
Michael14 years ago
Phenomenal. Thanks.

Reply Report
D
dank14 years ago
hello, here is my story, i was checking a blog, and then suddenly the virus installed on the computer, sending his messages constantly, and not letting me open any executable files, not even the notepad; since i coulnt log on the internet to check your advice, i was very desesperate and i didnt know what to do; then suddenly out of curiosity, i decided to restart the computer in secure mode, then i feel relaxed again beacause the messages stopped and it let me open other executables; so what i did afterwards was to right click the icon of the virus on the desktop, and when i found the adress, i went to the carpet and delete it, and then i throw the trash, after that i delete the icon of the desktop; then i restart the computer in normal mode, and run the mcafee to make a complete revision of the computer, and it didnt found anything. My question is, is the problem really solved? or do i need to check something else?

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to dank
  Hello Dank,
  Did you run a scan with Malwarebytes and HitmanPro?
  As a additional step ,you can perform a check with ESET Online Scanner:
  1. Download ESET Online Scanner utility.
    ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
  2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
  3. Check Yes, I accept the Terms of Use
  4. Click the Start button.
  5. Check Scan archives
  6. Push the Start button.
  7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  8. When the scan completes, push Finish
  Stay safe!
  Reply Report
  1. dank14 years ago
    In reply to Stelian Pilici
    thanks for the respond, the think is that when i delete the virus, i did it manually by right click the delete botton and then empty the trash; i check this page afterwards, and i am worry that what i did was not enough, still i dont see any problems any more; what i want to know if the only thing i still need to do is to make more scans with other softwares, or if there is the certainty that there is nothing else around, and that my deleting it manually is not enough, i delete a carpet with three archives, and then i delete all the icons; i will make more scans anyway, but i would like to know what else can the virus do, beacause i have access to internet, and i can click on executables now, is there any other treat that virus do? or if it is possible that it reinsurrect again some how?
    
    Report
JM14 years ago
Thank you!!! These steps worked great for removing the virus from my computer, and using the License Key to stop the fake alerts was very satisfying for some reason.

Reply Report
Mark14 years ago
Thank you for taking the time to post this! It worked out great and I really appreciate your instructions. Go FC Barcelona

Reply Report
M
Michelle14 years ago
How long should it take for RKILL to scan and create a log? I have been waiting about 10 minutes, every once in a while I see an hourglass by the pointer.
Should I try another RKILL?

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to Michelle
  Hello Michelle,
  Yes, try another RKILL version… If it doesn’t kill the process in 10 minutes then it’s most likely stuck.
  
  If it still doesn’t work,please try the below steps:
  STEP 1. While in NORMAL MODE,download HitmanPro and then start this program in ForceBreach Mode
  1.Here are the direct download links for HitmanPro,
  – http://dl.surfright.nl/HitmanPro36.exe (For 32bit)
  – http://dl.surfright.nl/HitmanPro36_x64.exe (For 64bit)
  2.Hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including this rogue malicious process
  Here is a video that explains with graphic details how to do this : http://www.youtube.com/watch?v=m6eRWTv2STk
  3. Let HitmanPro scan and remove the detected infections.
  
  STEP 2: While in NORMAL MODE,download/Run Rkill and then run a scan with Malwarebytes
  1.Download any re-named version of Rkill (direct download links bellow):
  RKILL DOWNLOAD LINK #1
  RKILL DOWNLOAD LINK #2
  RKILL DOWNLOAD LINK #3
  2.Next,please perform a scan with Malwarebytes as seen on the guide.
  
  STEP 3. Run a scan with ESET Online Scanner
  1. Download ESET Online Scanner utility.
    ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
  2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
  3. Check Yes, I accept the Terms of Use
  4. Click the Start button.
  5. Check Scan archives
  6. Push the Start button.
  7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  8. When the scan completes, push List of found threats
  9. Push Export to Text file and save the file to your desktop using a unique name, such as ESET Scan. Include the contents of this report in your next reply.Note – when ESET doesn’t find any threats, no report will be created.
  10. Push the back button.
  11. Push Finish
  Waiting for your reply to tell me how everything is working.. :) Good luck!
  Reply Report
  1. Michelle14 years ago
    In reply to Stelian Pilici
    I ended up going back to safe mode and using HitManPro. It found A LOT of items and removed them. I then used malwarebytes Anti-malware and it found 21 more. Went back to HitMan, it found more and then back to malwarebytes, it didn’t find any, went back to Hitman, it didn’t find any….I can now use my computer!! Thanks so much!! there are free advice places that have a section where you can donate to help out you wonderful people. Do you have one???
    
    Report
H
Heather14 years ago
Stelian,
I tried to use your advice to remove the platinum malware virus but I cannot even access the I tenet on my computer anymore so I can go all the way to step 6 where it tries to access the Internet and I can’t go any further to finish the process, please help, my IT department can’t figure it out either!!??
Any help would be appreciated??!!

Heather

Reply Report
1. Stelian PiliciTeam14 years ago
  In reply to Heather
  This is an activation code for Live Security Platinum: AA39754E-715219CE , this will NOT remove this rogue software,however it should stop those annoying alerts until you will use the removal tools.Does your internet connection work now?
  Also you can download Malwarebytes and perform a scan now?
  
  Reply Report
K
Keyna14 years ago
Hi :) i have this virus and every time i try to install RKill or one of its renamed counterparts i get an error field stating that the installation failed because ‘it was already being used in another process’..could it be because i think this computer is infected with live security platinum as well as security shield? (at the same time!)…please help!!

Reply Report
1. S
  Stelian PiliciTeam14 years ago
  In reply to Keyna
  Hello,
  Hello,
  Lets try do this another way.Please follow the below steps:
  
  STEP 1. While in NORMAL MODE,download HitmanPro and then start this program in ForceBreach Mode
  1.Here are the direct download links for HitmanPro,
  – http://dl.surfright.nl/HitmanPro36.exe (For 32bit)
  – http://dl.surfright.nl/HitmanPro36_x64.exe (For 64bit)
  2.Hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including this rogue malicious process
  Here is a video that explains with graphic details how to do this : http://www.youtube.com/watch?v=m6eRWTv2STk
  3. Let HitmanPro scan and remove the detected infections.
  
  STEP 2: While in NORMAL MODE,download/Run Rkill and then run a scan with Malwarebytes
  1.Download any re-named version of Rkill (direct download links bellow):
  RKILL DOWNLOAD LINK #1
  RKILL DOWNLOAD LINK #2
  RKILL DOWNLOAD LINK #3
  2.Next,please perform a scan with Malwarebytes as seen on the guide.
  
  STEP 3. Run a scan with ESET Online Scanner
  1. Download ESET Online Scanner utility.
    ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
  2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
  3. Check Yes, I accept the Terms of Use
  4. Click the Start button.
  5. Check Scan archives
  6. Push the Start button.
  7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  8. When the scan completes, push List of found threats
  9. Push Export to Text file and save the file to your desktop using a unique name, such as ESET Scan. Include the contents of this report in your next reply.Note – when ESET doesn’t find any threats, no report will be created.
  10. Push the back button.
  11. Push Finish
  Waiting for your reply to tell me how everything is working.. :) Good luck!
  Reply Report
  1. K
    Keyna14 years ago
    In reply to Stelian Pilici
    Ok. I got HitmanPro to run, but at the end of the scan, there was no ‘activate free license’ option. …is that normal?
    
    Report
    1. Stelian PiliciTeam14 years ago
      In reply to Keyna
      If this is your personal computer then it’s not normal….HitmanPro is free to use for scanning and removal for home users…..
      This is an activation code for Live Security Platinum: AA39754E-715219CE , this will NOT remove this rogue software,however it should stop those annoying alerts.
      Now,can you please run the HitmanPro Force Breach Mode again just stop the malicious process.
      Next, please start a scan with Malwarebyte Anti-Malware as seen on the guide and remove any detected infections.
      Next,run a ESET Online scan (you have the instructions in my previous reply) to remove any other malicious files.
      Then please re-scan with HitmanPro and if it will find any malicious files then write the path and then we will manually remove them.
      
      Report
View all 12 replies
Max14 years ago
Worked great! Thanks for your help!

Reply Report
Nick14 years ago
Thanks for this!! Actually, I was fixing this on a remote machine and couldn’t start any programs or boot into safe mode (because I was remote). Putting in the activation code allowed me to run the regedit fix and delete the virus all without safe mode, am currently scanning to remove anything else.

Reply Report

Written by

Stelian

Stelian leverages over a decade of cybersecurity expertise to lead malware analysis and removal, uncover scams, and educate people. His experience provides insightful analysis and valuable perspective.

61,116 articlesWriting since 2011

Stuck on a step? 75,000+ members can help you for free.

Post your question on the forum and our volunteer malware removal experts will walk you through it, step by step.

75K+members

999K+forum messages

100K+forum topics

17+years online

Get free malware removal help Join the forum →

Remove Live Security Platinum (Uninstall Guide)

Live Security Platinum Removal Guide

STEP 1 : Start your computer in Safe Mode with Networking

STEP 2: Remove Live Security Platinum malicious proxy server

STEP 3: Repair your Windows Registry from Live Security Platinum malicious changes.

STEP 4: Run RKill to terminate known malware processes associated with Live Security Platinum.

STEP 5: Remove Live Security Platinum malicious files with Malwarebytes Anti-Malware FREE

STEP 6: Double check your system for any left over infections with HitmanPro

STEP 7: Remove any left over malicious registry keys and files

If you are still experiencing problems while trying to remove Windows Custom Safety from your machine, please start a new thread in our Malware Removal Assistance forum.

Go beyond a one-time scan.

Reduce unwanted ads and redirects.

Did these steps help?

Discussion

Stelian

Stuck on a step? 75,000+ members can help you for free.

Latest investigationsAll →

Remove Windows Custom Safety (Uninstall Guide)

Remove Windows Privacy Counsel (Uninstall Guide)