Live Security Professional provide fake features such as SCAN NOW, SUMMARY, SCAN PC, REAL-TIME SHIELDS, MAINTENANCE, General Security, Self-protection from malware, Definition auto update and etc. All of them cannot protect the computer from any kind of malware.
Live Security Professional can be uninstalled by by stopping all processes with random name and also kill its files. Then, all registry entries added and modified must be cleared by using Windows Registry Editor.
Live Security Professional should be removed immediately!
Live Security Professional Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe
Delete Registry
HKEY_CURRENT_USER\Software\Live Security Professional
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ctfmon32.exe" = "C:\DOCUME~1\ALLUSE~1\APPLIC~1\rundll32.exe C:\DOCUME~1\ALLUSE~1\APPLIC~1\[random].dat,XFG00"
Remove Folders and Files
%AllUsersProfile%\Application Data\[random].txt
%AllUsersProfile%\Application Data\[random].js
%AllUsersProfile%\Application Data\[random].pad
%AllUsersProfile%\Application Data\[random].dat
%AllUsersProfile%\Application Data\rundll32.exe
%AllUsersProfile%\Application Data\sdaksda.txt
%Temp%\tratra.lnk
%StartMenu%\Programs\Startup\regmonstd.lnk
File Location Notes:
%Temp% refers to the Windows Temp folder. By default, this is C:\Windows\Temp for Windows 95/98/ME, C:\DOCUMENTS AND SETTINGS\[Current User]\LOCAL SETTINGS\Temp for Windows 2000/XP, and C:\Users\[Current User]\AppData\Local\Temp in Windows Vista, Windows 7, and Windows 8.
%AllUsersProfile% refers to the All Users Profile folder. By default, this is C:\Documents and Settings\All Users for Windows 2000/XP and C:\ProgramData\ for Windows Vista, Windows 7, and Windows 8.
%StartMenu% refers to the Windows Start Menu. For Windows 95/98/ME it refers to C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\[Current User]\Start Menu\, and for Windows Vista/7/8 it is C:\Users\[Current User]\AppData\Roaming\Microsoft\Windows\Start Menu.
Live Security Professional can be uninstalled by by stopping all processes with random name and also kill its files. Then, all registry entries added and modified must be cleared by using Windows Registry Editor.
Live Security Professional should be removed immediately!
Live Security Professional Removal Guide
Kill Process
(How to kill a process effectively?)
[random].exe
Delete Registry
HKEY_CURRENT_USER\Software\Live Security Professional
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ctfmon32.exe" = "C:\DOCUME~1\ALLUSE~1\APPLIC~1\rundll32.exe C:\DOCUME~1\ALLUSE~1\APPLIC~1\[random].dat,XFG00"
Remove Folders and Files
%AllUsersProfile%\Application Data\[random].txt
%AllUsersProfile%\Application Data\[random].js
%AllUsersProfile%\Application Data\[random].pad
%AllUsersProfile%\Application Data\[random].dat
%AllUsersProfile%\Application Data\rundll32.exe
%AllUsersProfile%\Application Data\sdaksda.txt
%Temp%\tratra.lnk
%StartMenu%\Programs\Startup\regmonstd.lnk
File Location Notes:
%Temp% refers to the Windows Temp folder. By default, this is C:\Windows\Temp for Windows 95/98/ME, C:\DOCUMENTS AND SETTINGS\[Current User]\LOCAL SETTINGS\Temp for Windows 2000/XP, and C:\Users\[Current User]\AppData\Local\Temp in Windows Vista, Windows 7, and Windows 8.
%AllUsersProfile% refers to the All Users Profile folder. By default, this is C:\Documents and Settings\All Users for Windows 2000/XP and C:\ProgramData\ for Windows Vista, Windows 7, and Windows 8.
%StartMenu% refers to the Windows Start Menu. For Windows 95/98/ME it refers to C:\windows\start menu\, for Windows XP, Vista, NT, 2000 and 2003 it refers to C:\Documents and Settings\[Current User]\Start Menu\, and for Windows Vista/7/8 it is C:\Users\[Current User]\AppData\Roaming\Microsoft\Windows\Start Menu.
No comments:
Post a Comment