Active Security Removal

Active Security is a rogue anti-spyware program from the same family as Protection System and CoreGuard Antivirus 2009. It is designed specifically to damage or disrupt a computer system. In this case, not only is the software going to disrupt your system, it’s going to try and trick you into making a purchase using your credit card. Active Security is one of the worst fake security products to hit the market in a while. Unlike many other rouge products this one may disable your task manager and several other Windows features. Desktop Hijacks are very common with this threat. Many people find that they can not update their security software when infected with this. If you are infected with this threat then you do have your work cut out. If you are not all that computer savvy I hate to say it but hiring a pro to remove this threat is probably your best option. If you are computer savvy then the below guide should help you out.

Active Security

Active Security

» Download Active Security Removal Software

http://www.pcninja.com is a great site that can help you in your Active Security removal for around 89 bucks. That's far cheaper then hiring a tech to come out and having your system repaired online is very fast when you have an expert doing it. What ever you do DON'T PURCHASE this bogus program. It only shows fake scan results. These fraudsters are just trying to steal your money. What Does Active Security do? At first, those Trojans create certain files on the personal computer and configures the Registry to start Active Security every time the machine boots. The rogue software starts to scan your computer and recognizes the files it has created as infections. You will get different pop-ups on your screen. You will be warned that your system is infected. Active Security will block anti-virus software and security related websites, mainly to protect itself from being deleted. It will disable Task Manager Registry Editor and other tools too. The System Restore can be also disabled. All of that are used in order to make you buy a registered version of Active Security. fake security alerts can be: "Active Security detected the virus of the harmful program on your computer! Internet Explorer is infected with worm Rootkit.Win32.Agent.pp. This worm can harm your computer."

Some symptoms of Active Security:

  • Bogus Scan results
  • Auto Scans on Start-up
  • Warning coming out of a fake shield in the system tray
  • pop-ups and re-directs to the fake software's website
  • constant warnings of being infected as well as false statements of other trojans

How did I get infected with Active Security ?

The software usually sneaks into your computer without even noticing that through Trojans which start to perform nasty things. You can also get Active Security through fake online scanners. The infection normally occurs in one of many ways. A first one is from the user downloading a fake video codec. This is a very common way of tricking users into installing the fake security client. Another way if for the hackers to build or hack into a website. Once there they setup what is known as a drive by download. When a user visits the site it will then attempt to push software onto the visitors computer. If proper security is not in place or a new exploit just came out then the users computer can become infected. If you find yourself infected with this then you will need to run a full and in-depth scan to ensure you have no other viruses installed on your computer. This will help to ensure you do not get infected again with Active Security. We do recommend Spyware doctor with Antivirus to help you along Active Security removal. We do recommend you scan your computer with the free trial of SpyHunter to see how infected you really are. If it is just this fake security product then follow the manual directions below.

Manual removal instructions for Active Security ( Please read our disclaimer below )

Kill Active Security processes: ( Learn How to Kill a Process Here. Opens in new Window )

  • asecurity.exe
  • uninstall.exe

We do recommend you run a full scan using SpyHunter. Even if you do not intend on purchasing the product it will help to stop the virus from re-installing and re-activating while you manually remove it. Also it will inform you of any new changes to the file names. You may need this if it mutates. Delete Active Security registry values: ( Learn How to Edit Registry Here. Opens in new Window )

  • HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Active Security
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Active Security
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Active Security"

Delete files: ( Hint ) Most of these files will be in the %Program Files\Protection System\ directory.

  • asecurity.exe
  • core.cga
  • coreext.dll
  • help.ico
  • uninstall.exe
  • Active Security ReadMe.txt
  • Active Security Support.lnk
  • Active Security.lnk Support.lnk
  • 4otjesjty.mof
  • c.dat
  • creg.dat

Delete directories: ( Please note that in most cases everything in this folder can be deleted. Just be sure it's the correct folder 😉

  • c:\Documents and Settings\All Users\Start Menu\Programs\Protection System
  • c:\Program Files\Protection System ( And files \ folders within this folder)

Outside Resources:

http://www.wikihow.com/Remove-Active-Security-%28Rogue%29

http://www.bleepingcomputer.com/virus-removal/remove-active-security

Speak Your Mind

*

RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.