Remove Live Security Suite
Live Security Suite is another fake antispyware program from the Internet Antivirus Pro rogue family. Like other fake antispyware programs, this rogue infects your computer and then tries to convince you to purchase it in order to remove spyware/virus infections. Once installed, it will perform a fake scan, display fake infection reports, and bombard you with fake Windows security messages. Igore these scammy attempts from Live Security Suite and remove it immediately from your computer.
Automatic Live Security Suite removal:
Live Security Suite Remover
Warning! If the automatic remover is blocked by the spyware, then boot into Windows Safe Mode and try again. Learn how to boot into Safe Mode here.
Manual Live Security Suite removal:
Kill processes: LiveSS.exe, services.exe, unins000.exe
(Learn how to kill processes)
Unregister DLLs:
C:\Program Files\Live Security Suite\db\WMILib.dll
(Learn how to unregister DLLs)
Delete registry keys:
HKEY_CURRENT_USER\Software\Live Security Suite
HKEY_LOCAL_MACHINE\SOFTWARE\Live Security Suite
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Suite_is1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
HKEY_CURRENT_USER\Software\Microsoft\FTP “SearchDir” = “C:\Program Files\Live Security Suite\”
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS” = “http://gen-avpay.com/choose/?productid=GENAV3&uid=0&machineid=c3f92274b4b15694ae2311bd2316c727″
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “uniname” = “Live Security Suite_is1″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Live Security Suite”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AVPath” = “\\.\root\SecurityCenter:AntiVirusProduct.instanceGuid=”{653E64F8-62B6-4F96-B22D-4FFC6E44130E}”"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent “URLSS[2.0.3.0]”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallDisableNotify” = “0″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirstRunDisabled” = “0″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “UpdatesDisableNotify” = “0″
(Learn how to delete registry keys)
Delete files:
C:\Documents and Settings\All Users\Desktop\Live Security Suite.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Live Security Suite Home Page.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Live Security Suite.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Purchase Licence.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite\Purchase License.lnk
C:\Program Files\Live Security Suite\activate.ico
C:\Program Files\Live Security Suite\Explorer.ico
C:\Program Files\Live Security Suite\LiveSS.exe
C:\Program Files\Live Security Suite\unins000.dat
C:\Program Files\Live Security Suite\uninstall.ico
C:\Program Files\Live Security Suite\working.log
C:\Program Files\Live Security Suite\db\DBInfo.ver
C:\Program Files\Live Security Suite\db\ia080614.db
C:\Program Files\Live Security Suite\db\lists.ini
C:\Program Files\Live Security Suite\db\WMILib.dll
%UserProfile%\Application Data\Live Security Suite\settings.ini
%UserProfile%\Application Data\Live Security Suite\uill.ini
%UserProfile%\Application Data\Live Security Suite\unins000.exe
%UserProfile%\Application Data\Live Security Suite\Uninstall Live Security Suite.lnk
%UserProfile%\Application Data\Live Security Suite\db\config.cfg
%UserProfile%\Application Data\Live Security Suite\db\Timeout.inf
%UserProfile%\Application Data\Live Security Suite\db\Urls.inf
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Live Security Suite.lnk
%UserProfile%\Desktop\Live Security Suite.lnk
%UserProfile%\Desktop\LiveSS.exe.txt
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
%UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
(Learn how to delete files)
Delete folders:
C:\Documents and Settings\All Users\Start Menu\Programs\Live Security Suite
C:\Program Files\Live Security Suite
%UserProfile%\Application Data\Live Security Suite
Once you have removed Live Security Suite from your computer using either the automatic or manual method, make sure to block it and other malicious software using a HOSTS file. Please note that with the auomatic method, your computer should be protected from future spyware threats since you now have a spyware blocker program installed. We recommend downloading the HOSTS file from here, which contains a complete, up-to-date list of malicious websites especially if you used the manual method.
If this article has helped you, please take this time to share it with Digg using the Digg button (see Digg share button to the left) or retweet it using Twitter (see retweet button to the left). You may also want to follow us on Twitter to keep up-to-date with the latest spyware prevention tips and spyware threats. If you'd rather follow us from your Facebook account, please join our Facebook fan page.
Popular Articles