What is Live Security Platinum and how to remove it?
Live Security Platinum is a rogue antivirus program which tries to trick unsuspecting PC users into believing that their computers are infected with spyware and Trojans. This misleading strategy is used to sell a licence key for this malicious software. Live Security Platinum rogue is distributed using fake online security scanners and malicious websites which exploits your computer's security vulnerabilities to install this bogus program. When installed on your PC this fake security scanner will begin imitating a security check-up and will come up with a big list of detected Trojans, worms and spyware. You shouldn't trust this detection list - it's fake, this bogus software displays the same list of supposedly detected security threats on every computer that it infects.
This misleading software doesn't have a virus definition database nor any of the features required for a legitimate security program, it uses generated security scans and warning messages to trick you into activating it's full version. You shouldn't buy Live Security Platinum, it's a scam created by Internet criminals who are hoping that you will fall for the trickery shown by this fake security scanner and you will send your money form them. To make the security scan and the malware detection list appear more real Live Security Platinum will modify your operating system's registry entries. These modifications will block your Task Manager, Registry Editor and Command Prompt.
This malicious program originates from a family of fake antivirus software called "Winwebsec", previous it's variants were named Smart Fortress 2012, Personal Shield Pro, Smart Protection 2012. This family of misleading programs are know for it's aggressive tactics used to scare PC users into thinking that computers have serious security infections. When Live Security Platinum infiltrates your PC it will block almost all the features of your operating system making the removal process more complicated. Don't trust any of the information that is shown by this program, it's a rogue antivirus software that has a main goal of tricking you into buying a licence key to remove security infections that doesn't actually exist on your computer. If you have already bought Live Security Platinum you should contact your credit card company and dispute the charges, explain that you have been tricked into buying a fake antivirus software. Use this removal guide to help you eliminate Live Security Platinum from your PC.
Such fake security warning messages are generated by Live Security Platinum:
"Live Security Platinum Warning Spyware.IEMonster activity detected. This is spyware that attempts to steal passwords from Internet Explorer, Mozilla FireFox, Outlook and other programs. Click here to remove it immediately with Live Security Platinum"
"Live Security Platinum Firewall Alert Live Security Platinum Firewall has blocked a program from accessing the Internet. Internet Explorer Internet Browser is infected with SVCHOST.Stealth.Key-logger. This worm is trying to send your credit card details using Internet Explorer Internet Browser to connect to remove host"
"Warning! 37 infections found. Last scan detected malicious programs (2), viruses (25), adware (2), spyware (6), tracking cookies (2). These harmful programs causes: System crash, Permanent Data loss, System startup failures, System slowdowns, Internet connection loss, Infecting other computers on your network. It is highly recommended that you remove all the threats from your computer immediately. Remove all threats now, Continue unprotected."
"Activate Live Security Platinum. To perform this action you must activate Live Security Platinum on this computer. Do you want to activate Live Security Platinum now? Yes activate Live Security Platinum (Recommended) Click to activate antivirus and remove all infections, No, continue unprotected (Dangerous) Continue without activation Live Security Platinum."
All of these security warning pop-ups are fake and are only generated to scare you, ignore them. None of the security infections that are indicated by Live Security Platinum actually exist on your PC. Detecting non existent security threats are just a misleading strategy used in order to scare you into purchasing a useless licence key for Live Security Platinum scam.
Live Security Platinum removal:
This infection modifies your system registry settings and you can have troubles running your applications. However, automatic remover (link below) bypasses this restriction and runs successfully on almost all computers.
Remover file is named as iexplore.exe because this infection does not block execution of files with this name. If you can't download or run remover installation file, you can try to download alternate installer
If you can't use Internet or your browser (Internet explorer, Firefox, Opera, Chrome)
Depending on the version of this infection, on some cases Live Security Platinum disables Internet browsing capabilities and you can't use your browser to download removal software or the browser doesn't work at all. If you have this problem, you may try to do the following:
Click Start then click Run. (Windows logo button on Win7/Vista)
In Windows XP, When the Run dialog appears enter this text: www.pcrisk.com/download-spyware-remover and then press ENTER. In Windows 7 and Vista you can just type this text directly in search field and press ENTER (when pressed Windows logo button)
After pressing enter, Download file dialog will appear. Click Run and follow the on-screen instructions to scan your computer. If you can't run the downloaded file, try renaming it to iexplore.exe
By renaming this file, you will trick Live Security Platinum and it will think, that you are trying to run Internet Explorer.
Live Security Platinum manual removal (experienced users):
1. Load your computer in safe mode with networking. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
2. Open Internet explorer, click Tools and select Internet Options. Select "Connections".
3.Click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
4. Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):
O4 - HKCU\..\RunOnce: [<random characters>] %CommonAppData%\<random characters>\<random characters>.exe
After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.
5. Live Security Platinum modifies system hosts file. It is used to resolve some canonical names of websites to ip addresses. When it is changed, the user may be redirected to malicious site still seeing good URL in address bar. It is very hard to find out if the site is genuine or not, when hosts file is modified. To fix this, please download Microsoft FixIt tool, that restores your hosts file to windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:
6. Download and install Anti-spyware software to completely remove the infection.
Before downloading automatic remover, we need to enter fake license key in registration window of this program. Click "registration" button at the top of the main window of Live Security Platinum and enter this key: AA39754E-715219CE If this key doesn't work, it may be that newer version of this rogue infected your computer. You can proceed to the next step without entering this key. (Notice that this registration key worked only with the first variants of Live Security Platinum, latest versions of this fake antivirus software doesn't have a working key, so even if you would purchase this rogue program you wouldn't be able to activate it).
It will not remove the infection, but will help removal process. Note, that if you copy this key to clipboard and click "registration" button Live Security Platinum may automatically detect your copied key and will thank you for registration.
NOTE: Some rogue programs can block the downloading of spyware removers. If You can't download it using default location, try one of the alternative download locations below:
- Location 1 (The file is renamed to "iexplore.exe" because most of spyware doesn't block this file)
- Location 2
If you are unable to remove Live Security Platinum, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
End these Live Security Platinum processes:
Remove these Live Security Platinum registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Live Security Platinum
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "<random characters>"
Delete these Live Security Platinum files:
%StartMenu%\Programs\Live Security Platinum\
%StartMenu%\Programs\Live Security Platinum\Live Security Platinum.lnk
%UserProfile%\Desktop\Live Security Platinum.lnk
%CommonAppData%\<random characters>\<random characters>
%CommonAppData%\<random characters>\<random characters>.exe