Remove Live Security Platinum (Uninstall Guide)

Photo of author

Written by: Stelian

Published on:

Live Security Platinum is a malicious program also known as rogue security software, which will display fake security alerts in an attempt to scare you into buying this fake security product.
In addition, Live Security Platinum has also hijacked your PC,blocking your from running files,so now when your trying to open and executable file (file ending with .exe), this program will instead display this fake alerts:
Warning!
Application cannot be executed. The file rdpclip.exe is infected. Please active your antivirus software.

Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk.
To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
Click Yes to download official intrusion detection system (IDS software).

Live Security Platinum Warning Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla FireFox, Outlook and other programs. Click here to remove it immediately with Live Security Platinum

Live Security Platinum Firewall Alert Live Security Platinum Firewall has blocked a program from accessing the Internet. Internet Explorer Internet Browser is infected with SVCHOST.Stealth.Key-logger. This worm is trying to send your credit card details using Internet Explorer Internet Browser to connect to remove host

Live Security Platinum will also cause malicious browser redirects and system slowdowns so it needs to be removed from your computer as soon as possible.
This is are a few images of Live Security Platinum:

[Image: Live Security Platinum virus]

[Image: Live Security Platinum Alert]

[Image: Live Security Platinum Warning]

Registration codes for Live Security Platinum
As an optional step,you can use the following license key to register Live Security Platinum and stop the fake alerts.
AA39754E-715219CE
Please keep in mind that entering the above registration code will NOT remove Live Security Platinum from your computer , instead it will just stop the fake alerts so that you’ll be able to complete our removal guide more easily.

Live Security Platinum Removal Guide

STEP 1 : Start your computer in Safe Mode with Networking

  1. Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.
  2. Press and hold the F8 key as your computer restarts.Please keep in mind that you need to press the F8 key before the Windows start-up logo appears.
    Note: With some computers, if you press and hold a key as the computer is booting you will get a stuck key message. If this occurs, instead of pressing and holding the “F8 key”, tap the “F8 key” continuously until you get the Advanced Boot Options screen.
  3. On the Advanced Boot Options screen, use the arrow keys to highlight Safe Mode with Networking , and then press ENTER.
    [Image: Safemode.jpg]

STEP 2: Remove Live Security Platinum malicious proxy server

Live Security Platinum may add a proxy server which prevents the user from accessing the internet,follow the below instructions to remove the proxy.

  1. Start the Internet Explorer browser and if you are using Internet Explorer 9 ,click on the gear icon [Image: IE gear icon] (Tools for Internet Explorer 8 users) ,then select Internet Options.
    [Image: Internet-options-IE.png]
  2. Go to the tab Connections.At the bottom, click on LAN settings.
    [Image: Remove-proxy-server2.png]
  3. Uncheck the option Use a proxy server for your LAN. This should remove the malicious proxy server and allow you to use the internet again.
    [Image: Remove-proxy-server3.png]

If you are a Firefox users, go to Firefox(upper left corner) → Options → Advanced tab → Network → Settings → Select No Proxy

STEP 3: Repair your Windows Registry from Live Security Platinum malicious changes.

Smart Fortress 2012 has changed your Windows registry settings so that when you try to run a executable file (ending with .exe ) , it will instead launch the infection rather than the desired program.

  1. Download the registryfix.reg file to fix the malicious registry changes from Live Security Platinum.
    REGISTRYFIX.REG DOWNLOAD LINK (This link will automatically download the registry fix called registryfix.reg)
  2. Double-click on registryfix.reg file to run it. Click “Yes” for Registry Editor prompt window,then click OK.
    [Image: fix registry]

STEP 4: Run RKill to terminate known malware processes associated with Live Security Platinum.

RKill is a program that will attempt to terminate all malicious processes associated with Live Security Platinum,so that we will be able to perform the next step without being interrupted by this malicious software.
Because this utility will only stop Live Security Platinum running process, and does not delete any files, after running it you should not reboot your computer as any malware processes that are configured to start automatically will just be started again.

  1. While your computer is in Safe Mode with Networking ,please download the latest official version of RKill.Please note that we will use a renamed version of RKILL so that Live Security Platinum won’t block this utility from running.
    RKILL DOWNLOAD LINK (This link will automatically download RKILL renamed as iExplore.exe)
  2. Double-click on the iExplore.exe icon in order to automatically attempt to stop any processes associated with Live Security Platinum.
    [Image: run-rkill-1.png]
  3. RKill will now start working in the background, please be patient while the program looks for various malware programs and tries to terminate them.
    [Image: run-rkill-2.png]
    IF you are having problems starting or running RKill, you can download any other renamed versions of RKill from here.
  4. When Rkill has completed its task, it will generate a log. You can then proceed with the rest of the guide.
    [Image: Live Security Platinum rkill3.jpg]

WARNING: Do not reboot your computer after running RKill as the malware process will start again , preventing you from properly performing the next step.

STEP 5: Remove Live Security Platinum malicious files with Malwarebytes Anti-Malware FREE

  1. Download the latest official version of Malwarebytes Anti-Malware FREE.
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK (This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)
  2. Start the Malwarebytes’ Anti-Malware installation process by double clicking on mbam-setup file.
    [Image: Malwarebytes Installer]
  3. When the installation begins, keep following the prompts in order to continue with the setup process. Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked. Then click on the Finish button. If Malwarebytes’ prompts you to reboot, please do not do so.
    [Image: Finishing Malwarebytes installation]
  4. Malwarebytes Anti-Malware will now start and you’ll be prompted to start a trial period , please select ‘Decline‘ as we just want to use the on-demand scanner.
    [Image: Decline Malwarebytes trial]
  5. On the Scanner tab,select Perform full scan and then click on the Scanbutton to start scanning your computer.
    [Image: Starting a full system sca]
  6. Malwarebytes’ Anti-Malware will now start scanning your computer for Live Security Platinum malicious files as shown below.
    [Image: Malwarebytes scanning for malicious files]
  7. When the scan is finished a message box will appear, click OK to continue.[Image: Malwarebytes scan results]
  8. You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image.Make sure that everything is Checked (ticked) and click on the Remove Selectedbutton.
    [Image: Infections found by Malwarebytes]
  9. Malwarebytes’ Anti-Malware will now start removing the malicious files.After completing this task it will display a message stating that it needs to reboot,please allow this request and then let your PC boot in Normal mode.

STEP 6: Double check your system for any left over infections with HitmanPro

  1. This step can be performed in Normal Mode ,so please download the latest official version of HitmanPro.
    HITMANPRO DOWNLOAD LINK(This link will open a download page in a new window from where you can download HitmanPro)
  2. Double click on the previously downloaded fileto start the HitmanPro installation.
    [Image: hitmanpro-icon.png]
    IF you are experiencing  problems while trying to starting HitmanPro, you can use the “Force Breach” mode.To start this program in Force Breach mode, hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including the malware process. (How to start HitmanPro in Force Breach mode – Video)
  3. Click on Next to install HitmanPro on your system.
    [Image: installing-hitmanpro.png]
  4. The setup screen is displayed, from which you can decide whether you wish to install HitmanPro on your machine or just perform a one-time scan, select a option then click on Next to start a system scan.
    [Image: hitmanpro-setup-options.png]
  5. HitmanPro will start scanning your system for malicious files. Depending on the size of your hard drive, and the performance of your computer, this step will take several minutes.
    [Image: hitmanpro-scanning.png]
  6. Once the scan is complete,a screen displaying all the malicious files that the program found will be shown as seen in the image below.After reviewing each malicious object click Next.
    [Image: hitmanpro-scan-results.png]
  7. Click Activate free license to start the free 30 days trial and remove the malicious files.
    [Image: hitmanpro-activation.png]
  8. HitmanPro will now start removing the infected objects, and in some instances, may suggest a reboot in order to completely remove the malware from your system. In this scenario, always confirm the reboot action to be on the safe side.

STEP 7: Remove any left over malicious registry keys and files

Live Security Platinum has sadded some malicious registry keys to your Windows installation , to remove this malicious changes we need to run a scan with RogueKiller

  1. Please download the latest official version of RogueKiller.
    ROGUEKILLER DOWNLOAD LINK (This link will automatically download RogueKiller on your computer)
  2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Start button to perform a system scan.
    RogueKiller scanning after Live Security Platinum virus virus
  3. After the scan has completed, press the Delete button to remove any malicious registry keys.
    Remove Live Security Platinum virus infection with RogueKiller
  4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.
    Remove residual damage from Live Security Platinum virus virus

If you are still experiencing problems while trying to remove Windows Custom Safety from your machine, please start a new thread in our Malware Removal Assistance forum.

10 Rules to Avoid Online Scams

Here are 10 practical safety rules to help you avoid malware, online shopping scams, crypto scams, and other online fraud. Each tip includes a quick “if you already got hit” action.

  1. Stop and verify before you click, log in, download, or pay.

    warning sign

    Most scams win by creating urgency. Verify using a trusted method: type the website address yourself, use the official app, or call a known number (not the one in the message).

    If you already clicked: close the page, do not enter passwords, and run a malware scan.

  2. Keep your operating system, browser, and apps updated.

    updates guide

    Updates patch security holes used by malware and malicious ads. Turn on automatic updates where possible.

    If you saw a scary “update now” pop-up: close it and update only through your device settings or the official app store.

  3. Use layered protection: antivirus plus an ad blocker.

    shield guide

    Antivirus helps block malware. An ad blocker reduces scam redirects, phishing pages, and malvertising.

    If your browser is acting weird: remove unknown extensions, reset the browser, then run a full scan.

  4. Install apps, software, and extensions only from official sources.

    install guide

    Avoid cracked software, “keygens,” and random downloads. During installs, choose Custom/Advanced and decline bundled offers you do not recognize.

    If you already installed something suspicious: uninstall it, restart, and scan again.

  5. Treat links and attachments as untrusted by default.

    cursor sign

    Phishing often impersonates delivery services, banks, and popular brands. If it is unexpected, do not open attachments or log in through the message.

    If you entered credentials: change the password immediately and enable 2FA.

  6. Shop safely: research the store, then pay with protection.

    trojan horse

    Be cautious with brand-new stores, “closing sale” stories, and prices that make no sense. Prefer credit cards or PayPal for dispute options. Avoid wire transfers, gift cards, and crypto payments.

    If you already paid: contact your card issuer or PayPal quickly to dispute the transaction.

  7. Crypto rule: never pay a “fee” to withdraw or recover money.

    lock sign

    Common patterns include fake profits, then “tax,” “gas,” or “verification” fees. Another is a “recovery agent” who demands upfront crypto.

    If you already sent crypto: stop paying, save evidence (wallet addresses, TXIDs, chats), and report the scam to the platform used.

  8. Secure your accounts with unique passwords and 2FA (start with email).

    lock sign

    Use a password manager and unique passwords for every account. Enable 2FA using an authenticator app when possible.

    If you suspect an account takeover: change passwords, sign out of all devices, and review recent logins and recovery settings.

  9. Back up important files and keep one backup offline.

    backup sign

    Backups protect you from ransomware and device failure. Keep at least one backup on an external drive that is not always connected.

    If you suspect infection: do not connect backup drives until the system is clean.

  10. If you think you are a victim: stop losses, document evidence, and escalate fast.

    warning sign

    Move quickly. Speed matters for disputes, account recovery, and limiting damage.

    • Stop payments and contact: do not send more money or respond to the scammer.
    • Call your bank or card issuer: block transactions, replace the card if needed, and start a dispute or chargeback.
    • Secure your email first: change the email password, enable 2FA, and remove unfamiliar recovery options.
    • Secure other accounts: change passwords, enable 2FA, and log out of all sessions.
    • Scan your device: remove suspicious apps or extensions, then run a full malware scan.
    • Save evidence: screenshots, emails, order pages, tracking pages, wallet addresses, TXIDs, and chat logs.
    • Report it: to the payment provider, marketplace, social platform, exchange, or wallet service involved.

These rules are intentionally simple. Most online losses happen when decisions are rushed. Slow down, verify independently, and use payment methods and account controls that give you recourse.

538 thoughts on “Remove Live Security Platinum (Uninstall Guide)”

  2. Hey Stelian,thanks a lot for creating this guide. But my Malwarebytes’ Anti-Malware did not manage to complete its full scan (I’ve tried four times and usually the scan only runs 20 minutes+) and my laptop shuts itself off. And also when I’m running IExplore/RKill it does not terminate any processes. Any input from you(or any other user) would be greatly appreciated.Thanks a lot!

    • Hello,
      Lets try do this another way.Please follow the below steps while your computer is in Normal Mode:
      1.Run a scan with Malwarebytes Anti-Malware in Chameleon Mode:

      1. Download Malwarebytes Chameleon from here and extract it to a folder in a convenient location
      2. Make certain that your PC is connected to the internet and then open the folder where you extracted Chameleon to and double-click on the Chameleon help file and then follow the onscreen instructions to use it.
      3. If the Chameleon help file itself will not open, then double-click each file one by one until you find one that works, which will be indicated by a black DOS/command prompt window Note: Do not attempt to open mbam-killer as that is not a Chameleon executable and serves a different purpose)
      4. Follow the onscreen instructions to press a key to continue and Chameleon will proceed to download and install Malwarebytes Anti-Malware for you
      5. Once it has done this, it will attempt to update Malwarebytes Anti-Malware, click OK when it says that the database was updated successful
      6. Next, Malwarebytes Anti-Malware will automatically open and perform a Quick scan
      7. Upon completion of the scan, if anything has been detected, click on Show Result
      8. Have Malwarebytes Anti-Malware remove any threats that are detected and click Yes if prompted to reboot your computer to allow the removal process to complete
      9. After your computer restarts, open Malwarebytes Anti-Malware and perform a Full System scan to verify that there are no remaining threats

      2.Next,please perform a scan with HitmanPro as seen on the guide.

      3. Run a scan with ESET Online Scanner

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push List of found threats
      9. Push Export to Text file  and save the file to your desktop using a unique name, such as ESET Scan. Include the contents of this report in your next reply.Note – when ESET doesn’t find any threats, no report will be created.
      10. Push the back button.
      11. Push Finish

      Waiting for your reply to tell me how everything is working.. :) Good luck!

      • Hey Stelian,progress has been made,my pc is on normal mode now without any sight of Live Security Platinum.However, the ESET scanner could not be updated and states “cannot get update.Is proxy configured?”,any solutions to this? Thanks !

      • Did you check for any proxy server (see step 2 on the guide)?
        Can you try to disable your antivirus and firewall while doing the ESET scan and see if this will fix the problem…

  3. Thanks a bunch for your help! The Live Platinum Security virus would not allow me to connect to the internet at all, even after trying all the internet connection tips. I finally resorted to using the fake registration code, and that allowed me to gain access to the internet once again. I am now running all the software to get rid of the virus for good! Thanks again!

  5. I share an iMac (OSX 10.6.8) with my wife. We installed Parallels 7 desktop to run Windows 7 on the Mac so she could access a work related site that requires a PC. The other day she was checking e-mail on the Mac side (aol.com) and found an official looking e-mail from USPS saying that a package she was supposed to have sent was undeliverable. She never sent such a package. She clicked a link to get more info about the package, and it downloaded Live Security Platinum. Not knowing what that was she tried to open it, and it opened Windows and displayed the Live Security Platinum Warnings and error messages. The correct thing to do would have been to send the USPS e-mail to Spam.

    Since my wife only uses Windows 7 to get on one web site , and she has no other data files saved on the PC side, is it possible to re-install Parallels, Windows and Explorer to remove the Live Security Platinum? What do you think?

    Thanks,
    Joe

  6. Yeah!! The solution worked great..!! Thanks for the help!!
    Don’t even realize when was the virus get into my pc..

  8. Further help please!

    Firstly as with all the comments, thanks for you advice. Top man.
    I have cleared the Live Security Platinum malware using your initial steps, followed by both Kaspersky Virus Removal Tool and then ESET Online Scanner utility. Like one of the other threads everything is working fine but my windows firewall is corrupted as is my windows update. I get the error message “update your firewall settings” then when I click on “use recommended settings” I get the error message “windows cannot change some of your settings. Error code 0x8007042c”. On the Windows update page this was also corrupted. Following your advice I installed and ran through all the steps of tweaking.com – windows repair (all in one) but the Firewall error perists. The windows update now allows checking for updates but throws an error when I try to download and install new updates. Please help. It would be a great shame after clearing things so well to have to re-install the operating system (Win 7 profession 64-bit). Fix this am I become a Barcelona fan!

    • Hello,
      Lets try to fix this and have a new FC Barcelona fan:D
      First run a scan with RogueKiller:

      1. Please download the latest official version of RogueKiller.
        ROGUEKILLER DOWNLOAD LINK (This link will automatically download RogueKiller on your computer)
      2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Start button to perform a system scan.
        RogueKiller scanning
      3. After the scan has completed, press the Delete button to remove any malicious registry keys.
        Remove File Recovery virus infection with RogueKiller
      4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.
        Remove residual damage

      Next,you’ll need to run a File System Check and Disk Check… To do this , download Windows Repair All In One and install this utility.
      Then go to Step 2 (Check File System) and click on “DO IT”, after this step is done, go to Step 3 (System File Check) and again click on DO IT.
      NEXT,go to the last Startup Repairs tab and click the Start button (bottom right)
      Note: When asked if you would like to create a restore point. It is recommended just in-case something does not go as planned.

      1. Click Unselect All
      2. Put a checkmark in the following items:
        • Repair Hosts File
        • Remove Temp Files
        • Repair Windows Updates
        • Repair Windows Firewall
        • Remove Policies Set By Infections

        Note: Leave everything else unchecked

      3. Put a checkmark in Restart System When Finished
      4. Now click the Start button (bottom right)

      Let me know everything goes…:D

      • Thanks – I seem to be all sorted. I am officially a FC Barcelona fanatic!. Top man, keep up the good work.

        Chris

  10. Thank you Thank you, Stelian!!!

    I successfully removed Live Security Platinum, however the Firewall on my McAfee Security Center is off. I can’t turn it on anymore, every time I turned it on, it went off again. Is it because of the Hitman Pro or Malwarebytes’ Anti-Malware? Thank you for your heavenly help again!

    • I have no idea why you can’t turn your McAfee Firewall on,however a re-install should fix this.However I do advise you to remove McAfee and install another security product because McAfee is not that great..
      Quick tips;
      Free – Avast 7 Free version or COMODO Internet Security
      Paid : Norton Internet Security 2012 or Avast Internet Security 7
      Anyway ,you should really start a thread in our Security Configuration forum as you need to build a layerd security config: http://malwaretips.com/Forum-Security-Configuration-Wizard

      Also it would very good if you took the time and read this article that I’ve wrote: http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/ .. If you follow it,then we’ll never meet again in this conditions:)

  11. Thank you for all the time and effort in putting this together. I have followed the instructions after having this physically show up on my Start menu and pop up when browsing starting two days ago (who knows how long it’s been around). We have 4 users on our home computer and my daughter used hers before we notified her not to, it just showed up today in her user account.
    I didn’t need to use the registration code, although a few things popped up initially the other day…I was able to start in Safe Mode, LAN wasn’t checked, used Registryfix, Rkill, and Malwarebytes (already on my computer but had to update) with moderate success. Live Security Platinum still showed up in my start menu so I ran Kaspersky checking the five boxes you listed for others (including my huge removable drive). Finally, LSP is wiped out of my start menu but I still have three flashing suspicious icons (7966335.exe-two of these same item and Java Auto Updater) “is requesting permission to…” The Java program is one that had corrupted files/virus. I plan on running the Eset Online Scanner next unless you have another suggestion.

    • Hello,
      Please do a ESET Online Scan,and next do a scan with RogueKiller as seen below:

      1. Please download the latest official version of RogueKiller.
        ROGUEKILLER DOWNLOAD LINK (This link will automatically download RogueKiller on your computer)
      2. Double click on RogueKiller.exe to start this utility and then wait for the Prescan to complete.This should take only a few seconds and then you can click the Start button to perform a system scan.
        RogueKiller scanning
      3. After the scan has completed, press the Delete button to remove any malicious registry keys.
        Remove File Recovery virus infection with RogueKiller
      4. Next we will need to restore your shortcuts, so click on the ShortcutsFix button and allow the program to run.
        Remove residual damage

      If you are still experiencing problems while trying to remove this rogue from your machine, please start a new thread in our Malware Removal Assistance forum.
      Good luck!

  12. Hello
    When I went to add the rkill it gives me a message that says the iexplore.exe has stopped working and the only option is “close program”. I have tried downloading other versions of the rkill but they continue to give me that same message. I left it be while typing this and in the notepad that pops up it said that it terminated the process downloads\explorer.exe is that what is suppose to happen to continue on to the next step with the malwarebytes?

    • Hello,
      Lets try do this another way.Please follow the below steps…

      STEP 1. While in NORMAL MODE,download HitmanPro and then start this program in ForceBreach Mode
      1.Here are the direct download links for HitmanPro,
      – http://dl.surfright.nl/HitmanPro36.exe (For 32bit)
      – http://dl.surfright.nl/HitmanPro36_x64.exe (For 64bit)
      2.Hold down the left CTRL-key when you start HitmanPro and all non-essential processes are terminated, including this rogue malicious process
      Here is a video that explains with graphic details how to do this : http://www.youtube.com/watch?v=m6eRWTv2STk
      3. Let HitmanPro scan and remove the detected infections.

      STEP 2: While in NORMAL MODE,download/Run Rkill and then run a scan with Malwarebytes
      1.Download any re-named version of Rkill (direct download links bellow):
      RKILL DOWNLOAD LINK #1
      RKILL DOWNLOAD LINK #2
      RKILL DOWNLOAD LINK #3
      2.Next,please perform a scan with Malwarebytes and then do a RogueKiller and Unhide.exe scan as seen on the guide

      STEP 3. Run a scan with ESET Online Scanner

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push List of found threats
      9. Push Export to Text file  and save the file to your desktop using a unique name, such as ESET Scan. Include the contents of this report in your next reply.Note – when ESET doesn’t find any threats, no report will be created.
      10. Push the back button.
      11. Push Finish

      Waiting for your reply to tell me how everything is working.. :) Good luck!

  13. I got to the point of installing Malwarebytes a Anti-Malware and right after clicking finish, I got an error message staying I couldn’t run the program in SAFE MODE. At this point, is it safe for me to reboot in normal mode to continue the removal process?

    • Yes,you can try to run a scan in Normal mode,if it doesn’t work than reply and I’ll help you. :)
      Good luck!

      • Thanks sooo much for your help and the money you just saved me. Do you know of any good, FREE anti-virus software I can install until im able to but the Norton i seen advertised recently?

      • just tried it on mine and got the same error. however, i just clicked ok and it still ran fine while in safe mode. hope this helps

      • No you’re fine to just continue.. just rerun the Malaware Bytes software again, it’s because you chose incorrectly during the installation, but no worries all is good.

  14. Thank you very much for putting this together. It was easy to follow and appears to have worked well. Going forward, will the Malwarebytes Anti-Malware be enough to protect my computer? What’s the recommended method to prevent something similar going forward?
    -Nat

  15. Thanks for the help and advice.
    -started in safe mode removing the Live Security Platinum references from registry per another’s suggestions
    -came back with malwarebytes scanned and removed some more
    -next reboot found malwarbytes was picking up some items still
    -used Rkill I believe from the links above and returned nothing
    -Hitman Pro was a life saver…however, it took two attempts and a “force to delete instead of quarantine” to take.
    -thought I was complete…decided to run ESET scanner and now have found 2 infected files variant of Win32/Injector.TYT trojan JS/Redirector.NIQ trojan”…which makes sense as while testing I had just clicked on a few google search results pages that bounced me to some obviously incorrect pages.

    I likely missed a step or followed the instructions from multiple sources that overlapped with yours, but I’m worried every time I add a new scanner I find new stuff. Regardless, thank you and I’ll keep following the thread for any new advice. Good luck everyone and keep at it.

    • Hello Mark,
      You can perform a scan with the following utilities for your peace of mind:

      1.Run a scan with Kaspersky Virus Removal Tool
      Click here to download the Kaspersky Virus Removal Tool.

      1. Save it to your desktop.
      2. Double click the setup file to run it.
      3. Follow the onscreen prompts until it is installed
      4. Click the Options button (the ‘Gear’ icon), then make sure only the following are ticked:
        • System Memory
        • Hidden startup objects
        • Disk boot sectors
        • Local Disk (C:)
        • Also any other drives (Removable that you may have)
      5. Then click on Actions on the left hand side
      6. Click Select Action, then make sure both Disinfect and Delete if disinfection fails are ticked
      7. Click on Automatic Scan
      8. Now click the Start Scanning button, to run the scan
      9. After the scan is complete, click the reports button (‘Paper icon’, next to the ‘cog’ icon) on the right hand side
      10. Click Detected threats on the left
      11. Now click the Save button, and save it as kaslog.txt to your Desktop
      12. Please copy and paste the contents of kaslog.txt in your next reply.

      2.Run a scan with Eset Online Scanner.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Stay safe!

      • Your generosity in providing this information and providing your time is amazing. See, there are some “good guys” still around.

        I went through the steps successfully. Found it interesting that every scan, the last one being eset, found virus’

        A heart felt thank you.

        Flash

  16. THANK YOU! THANK YOU! THANK YOU!You are the best!! You saved me 100$…. ***** you geek Squad!
    Thank you MalwareTips.coM!

  17. Hello, I followed all the steps and it worked great! However, since I got the virus off my laptop Firefox takes forever to respond and the computer seems slow any suggestion?

    • You can try to uninstall and then re-install back Firefox.
      As far as the slow down did you check your startup items?If no,then you can use Malwarebytes StartupLite to remove any unnacesary files from starting with Windows.
      Next,please defragment your computer – http://windows.microsoft.com/en-us/windows7/improve-performance-by-defragmenting-your-hard-disk
      Also please run a scan with ESET Online Scanner,just to make sure you don’t have any left over infections.

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      If it is still slow than you’ll need to run a File System Check and Disk Check… To do this , download Windows Repair All In One and install this utility.
      Then go to Step 2 (Check File System) and click on “DO IT”, after this step is done, go to Step 3 (System File Check) and again click on DO IT.
      NEXT,go to the last Startup Repairs tab and click the Start button (bottom right)
      Note: When asked if you would like to create a restore point. It is recommended just in-case something does not go as planned.

      1. Click Unselect All
      2. Put a checkmark in the following items:
        • Repair Hosts File
        • Repair Temp Files
        • Remove Policies Set By Infections

        Note: Leave everything else unchecked

      3. Put a checkmark in Restart System When Finished
      4. Now click the Start button (bottom right)

      • I’m going to use the windows repair right now, but I don’t see “Repair Temp Files” I only see “Remove Temp Files” is that the option I’m suppose to chose?

      • Thank for the help, but the computer is still very slow and unresponsive, to the point where it says Windows is not responding. What should I do? Should I factory restart my laptop?

      • Lets try one more thing and than if it doesn’t work, your can reset your computer.
        Please follow this guide and run a scan with Combofix.
        Let me know if that fixed the problem or not.

      • Thanks for the help, the computer starting running normally again on normal mode without me using combofix. However, if the computer starts acting up again I will use it and get back to you. Thanks again for the help.

  19. hello, here is my story, i was checking a blog, and then suddenly the virus installed on the computer, sending his messages constantly, and not letting me open any executable files, not even the notepad; since i coulnt log on the internet to check your advice, i was very desesperate and i didnt know what to do; then suddenly out of curiosity, i decided to restart the computer in secure mode, then i feel relaxed again beacause the messages stopped and it let me open other executables; so what i did afterwards was to right click the icon of the virus on the desktop, and when i found the adress, i went to the carpet and delete it, and then i throw the trash, after that i delete the icon of the desktop; then i restart the computer in normal mode, and run the mcafee to make a complete revision of the computer, and it didnt found anything. My question is, is the problem really solved? or do i need to check something else?

    • Hello Dank,
      Did you run a scan with Malwarebytes and HitmanPro?
      As a additional step ,you can perform a check with ESET Online Scanner:

      1. Download ESET Online Scanner utility.
        ESET Online Scanner Download Link (This link will automatically download ESET Online Scanner on your computer.)
      2. Double click on the Eset installer program (esetsmartinstaller_enu.exe).
      3. Check Yes, I accept the Terms of Use
      4. Click the Start button.
      5. Check Scan archives
      6. Push the Start button.
      7. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
      8. When the scan completes, push Finish

      Stay safe!

      • thanks for the respond, the think is that when i delete the virus, i did it manually by right click the delete botton and then empty the trash; i check this page afterwards, and i am worry that what i did was not enough, still i dont see any problems any more; what i want to know if the only thing i still need to do is to make more scans with other softwares, or if there is the certainty that there is nothing else around, and that my deleting it manually is not enough, i delete a carpet with three archives, and then i delete all the icons; i will make more scans anyway, but i would like to know what else can the virus do, beacause i have access to internet, and i can click on executables now, is there any other treat that virus do? or if it is possible that it reinsurrect again some how?

  20. Thank you!!! These steps worked great for removing the virus from my computer, and using the License Key to stop the fake alerts was very satisfying for some reason.

Comments are closed.

Previous

Remove Windows Custom Safety (Uninstall Guide)

Next

Remove Windows Privacy Counsel (Uninstall Guide)