Security Suite Virus: Removal Guide

By Posted 12 Aug 2010, 11:34

If you have recently infected with the legitimate-looking Security Suite virus you are probably wondering how to remove it, well the good news is that it is part of the Antivir Solution Pro rogue family, therefore can be removed in a very similar way.

The first thing you need to do is download a few utilities from the Internet (from another PC), all of which are free, these are CCleaner (here), rkill.com (here) and Malwarebytes AntiMalware (here), when they are downloaded burn the files to a CD, if you do not have another computer with a CD burner you can always download these files when you have booted into Safe Mode with Networking (see below).

Now on the infected PC, turn the PC on and whilst it is booing press the F8 key constantly, before the operating system loading screen appears you should get a choice of different boot options, one of which says “Safe Mode with Networking”, choose this option and wait for the desktop to load, if you are having trouble with this step check out this link.

Once you are at your desktop put in your CD and copy the downloaded files to your desktop. The first thing you must do is open Internet Explorer (even if you run an alternative web browser), once loaded go to tools and choose internet options, a windows should appear, click on the connections tab and then click LAN settings, here you should uncheck the box next to “Use a proxy server for your LAN”, once done click OK, then on the next windows click OK again.

Now install CCleaner, there are no custom options you need to choose, so just click next, ok etc, one installed open CCleaner click on the Cleaner button on the left and select run cleaner (this will delete all file build up on your computer, including removing all items in your recycle bin and cookies etc).

Now run rkill, this will stop any processes associated with the infection, this process may take some time however is essential, if any popups say that rkill is an infection they are fake warnings.

Now install Malwarebytes’ Anti-Malware, again there are no custom settings to worry about just click next, next, continue etc. Once installed run the program and click on the update tab, click update to ensure that you have the latest definitions installed, now click on the scanner tab and perform a full scan, this will take some time but will locate any infected files on your PC, when the scan if finished click OK, and then click the show results button, ensure that all of the infections are ticked and then press the Remove Selected button, your computer may need to restart to finish the process, however when it reboots the infection should be no more.

Once your PC seems fine try to ensure that your antivirus software is up-to-date and configured to run regular scans, also always install Windows Updates as these patch critical security vulnerabilities.

If you are still having problems with this infection check out the source link below.

Source: BleepingComputer

  • Jeff

    Thanks for posting this!! It worked perfectly!!

    • DEL44

      Excellent, worked perfectly, thanks for posting help.

  • Marc

    Thanks so much – this worked perfectly

  • Scott

    Does this work on Windows 7? I still have problems after doing all this.

    • liamjhughes

      scott or anyone else contact me if you need help i have a much easier way :D yey liam-hughes@hotmail.co.uk

      • bobby

        I wouldn't trust anyone from the UK about this. The contact information directs you to a phone number in teh UK.

        • Will

          "I wouldn't trust anyone from the UK about this.".. ? Bit of a prejudiced remark, don't you think?
          nevertheless, if this solution seems to work, I would think twice about contacting someone else only claiming to have an easier way (like 'let me do "remote assistance"..')

  • luke

    This worked wonderfully! Thanks for the help. I was dreading the thought of a full re-install.

  • http://www.onlinepassportphotos.com Jayesh Patel

    I had this virus yesterday! What a pain! No sure how I got it.
    It did not let me do anything. I could not open any program including anti-virus!!

    So I rebooted the computer in the Safe mode and from Accessories > Systems tools > Recovery, I recovered to a week old snapshot. This seemed to fix my issue and my computer worked fine then after. Am I really good or should I follow your steps above?

    Thanks for putting this info online

    • anne

      we did the same as you and pc seems fine now too, fingers crossed

    • Amanda

      I also did this. my laptop seems to be a little slower than it was right before the virus, but i'm not getting anything from Security Suite anymore. I hope I'm ok…

    • Emily

      I did a System Recovery too and my laptop seems fine, but I'm also wondering if that means it's really gone or not.

    • rhonda

      Worked for me,too. Thanks for the tip!

    • Vinay

      Thanks Jayesh, these steps worked perfectly for me.

    • fergal

      I did what you did but ran the scans anyway CCleaner and RKill did find a few problems – but it's hard to say, they might have been there anyway. To be honest CCLeaner and Rkill are so fast and easy you might as well run them & your regular malware software.

      Thanks for your post & hopefully this will be the ned of it.

    • merijn

      i had it a week i thought my laptop had no safe mode but when i pushed the butto it looked like i had one but i forgot where system revcovery was thanks to you i remembered but my normal computer has no recovery point so i have to use their way but thanks for helping remembering system recovery

      srry for bad english but thanks for help

    • Vicky S

      Thank you so much for your post. I was unable to get rkill to work so I wasn't able to get rid of virus. I then read your post. I ended up rebooting in safe mode, opened internet explorer unchecked the use proxy server for your lan tab and then restored computer back to an earlier date of a week prior. It worked. It got rid of the virus. I then installed internet security program. I used kaspersky. They have a 30 day free trial. I learned my lesson never let your computer be unprotected from viruses. I am also going to backup my hard drive onto a desktop unit so I never have to worry about losing my data again.

    • James The Greatful

      You deserve a medal! seriously, thanks!

    • Ayo

      restarting in safe mode and then doing a system recover to a point before the virus worked for me as well… although I think the ultimate solution is to get virus protection that will detect the threat before it paralyzes and renders normal operation useless. Thanks Jayesh

    • me me me

      Hei thanks alot, I fixed mine using your method. Btw. you need to install antivirus after you did that to make sure they don't come back.

    • natalie

      i had this virus on my laptop but was able to restore and it was gone. now my partner has it but as a few others have said he is unable to open any of his programs. We have put it into safe mode but we then cant find accessories to follow the steps you have used?? Can someone help please – its really annoying and we back in uni next week!!!

      thank you in advance

    • Mark Foster

      This works perfect. Don’t mess with anything else.

      I already had malwarebytes and it could not get it out.

      If your computer will not open Accesseries/system tools/ recovery, because the virus wont let it,

      Restart and before the virus boots you can open Accesseries etc. do it quickly before the virus boots or it will stop you. After you go back to before you down loaded security suite, say a week or so, it will be gone then run Malwarebytes and it will be gone entirely.

    • mark

      thanks for that info. Have just done what yo suggested and it seem's to have worked. it's great to know that there are helpful people out there still

      nice one.

  • Yin

    I was not able to boot to safe mode on my laptop to perform this clean up procedure. Is there a way to by pass the boot to safe mode bit and clean it up within windows XP SP3?

    • Lin

      My Windows XP also will not boot into safe mode. It only gives me one choice–normal. I downloaded CCleaner, RKill, and Malware, but the virus will not let me execute or use these programs. Please someone help us! Why don't I have a safe mode?

      • Bleh

        Press F8 repeatedly while the computer is turning on.

    • Morgonsur

      Try installing the three programmes without entering safe mode. Then restart computer, and when windows opens up quickly as h*ll double-click rkill icon. Then run CCleaner and so on.

      If Internet Explorer stops working after this go to tools/internet options/advanced and reset button.

      • Morgonsur

        I left a somewhat corny and uncomplete post yesterday, as I was in a hurry. I will try to be more clear today:

        I helped a friend who had this nasty virus, and got rid of it.

        At least his computer let me install the programmes, even if the virus wouldnt allow them to be run.

        His computer wouldnt allow safe mode either.

        Since the Security Suite virus acts lika an antivirus programme it takes a few seconds for it to start up, if your computer isnt enormously fast. Therefore you could – if youre fast and lucky – be able to start rkill BEFORE Security Suite has started. There is a short moment when Windows opens before Security Suite gets running and starts blocking your computer.

        The absolute second rkill icon appeared i double-clicked it – and got rkill to initiate BEFORE Security Suite. This terminated the Security Suite process, and made it possible to start working with the computer.

        If you use this method I dont think you have to burn a CD – you should be able to use any medium for the files. You do not have to use Safe Mode either. Just be faster than the Security Suite programme in the Windows startup process.

        • Morgonsur

          When rkill is done, after maybe ten-twenty seconds run CCleaner and Malwarebytes. Malwarebytes takes a looong while;-)

          Before running it you probably need an internet connection for the Malwarebytes programme to download the latest files. Otherwise you might not get rid of the virus in the manner you would prefer.

          If your internet connection has flawed, as I said go to tools/internet options/advanced in the Internet Explorer toolbar. There you find a "Restore" button. Go through that process, and your explorer should work again.

          (If not, find a system restore point – which my friends computer had none except todays date, which made it useless – but I got his Explorer working by resetting it.)

          My next problems was that Malwarebytes didnt seem to get rid of all infected files. Neither did his AVG antivirus. I uninstalled it and instead installed Avira AntiVir, completed a full search – and got rid of all infection.

          Hope this post is easier to use than the one i posted yesterday…

      • Morgonsur

        I left a somewhat corny and uncomplete post yesterday, as I was in a hurry. I will try to be more clear today:

        I helped a friend who had this nasty virus, and got rid of it.

        At least his computer let me install the programmes, even if the virus wouldnt allow them to be run.

        His computer wouldnt allow safe mode either.

        Since the Security Suite virus acts lika an antivirus programme it takes a few seconds for it to start up, if your computer isnt enormously fast. Therefore you could – if youre fast and lucky – be able to start rkill BEFORE Security Suite has started. There is a short moment when Windows opens before Security Suite gets running and starts blocking your computer.

        The absolute second rkill icon appeared i double-clicked it – and got rkill to initiate BEFORE Security Suite. This terminated the Security Suite process, and made it possible to start working with the computer.

        If you use this method I dont think you have to burn a CD – you should be able to use any medium for the files. You do not have to use Safe Mode either. Just be faster than the Security Suite programme in the Windows startup process.

        When rkill is done, after maybe ten-twenty seconds run CCleaner and Malwarebytes. Malwarebytes takes a looong while;-)

        Before running it you probably need an internet connection for the Malwarebytes programme to download the latest files. Otherwise you might not get rid of the virus in the manner you would prefer.

        If your internet connection has flawed, as I said go to tools/internet options/advanced in the Internet Explorer toolbar. There you find a “Restore” button. Go through that process, and your explorer should work again.

        (If not, find a system restore point – which my friends computer had none except todays date, which made it useless – but I got his Explorer working by resetting it.)

        My next problems was that Malwarebytes didnt seem to get rid of all infected files. Neither did his AVG antivirus. I uninstalled it and instead installed Avira AntiVir, completed a full search – and got rid of all infection.

        Hope this post is easier to use than the one i posted yesterday…

  • Dtown

    Thank you sir. You have restored my faith in the fact that there are still good people in this world.

  • Brad

    Tried this and still can not get rid of it.

    • Mitsuko

      I tried the procedure three times. It seems like the way I did did not complete the process. The third time I tried it worked. The only difference is on my third trial when you run clean up, I cleaned up Registry and Tools. I did not get anything from road kill. What I downloaded was just a notepad. Also, the Antimalware was adviced by Window not to run in Safe mode. So I restarted the computer and booted up again in regular mode and run the Antimalware. It found three cookies. But to remove those cookies I have to buy the software subscription. I already have Avast virus software, so I scanned my computer and the software put about five files in virus chest. Now all is clear and no more nasty pop ups. Only thing you would need to be aware is Internet histories, bookmarks, cookies are all gone. But those things can be built again.
      Thank you for posting this up. Oh the Antimalware will list the sites which infected my computer with this virus. I blocked those three sites by opening Tools, Option, privacy,. exceptions and listed those three sites as blocked. Those three days I felt very funny not being able to use my computer…Monday, Internet Cafe opened. That was the beginning of my journey of recovery. I downloaded the programs on my usb external hard drive. Never again! One note if you start seeing those warnings do not answer anything. If you click yes or no or try to close it gets worse!!!

  • Ron

    Press F8 a bunch of times as fast as you can. Then, select the one you need.

  • Joanie

    The Malwarebytes wanted me to register the product with a license key, which I did not have, so after 3 hrs and 12 minutes, I'm stuck.

    • Anon

      You might have used the wrong dl link. I accidently got spyware doctor instead of the malware one.

  • http://www.facebook.com/KittyCrow.DarkFire Ashe Hollaway

    Thanks for posting this. My laptop was infected by the virus and this cleared it up quickly.

  • mark r

    Thank you so much! I thought I was screwed. This worked. I had to find different copies of the software as i am running 64-bit windows 7.

    • michael

      What copies of the software did you use? I have Windows 7 too?

  • CKHillman

    Thank you was able to get the viris removed and the compter back up and running.

  • Josh

    I booted my computer into safe mode and followed all of these directions, are you supposed to do ALL of this in safe mode? Does it matter?

  • Greg

    Thanks a TON. This worked out perfectly for me. This virus was driving me crazy! Another family member's computer got infected on the same day… any chance this was carried by a windows update? My internet activity has been limited to a hotmail and gmail account for at least a week before I noticed this.

    • Hoho

      I got mine after the windows update too!
      I blame them!
      seriously my comp was fine and then it said it had finished downloading updates and when it restarted, this virus was there and not letting me do anything!

      • Bloc

        Same here!

      • Holly

        Same here! My computer automatically updated and rebooted over night.. When I got up this morning this virus was there!

        • Pocky

          Same here. Got the virus on my first day using my new laptop after updating. Couldnt have been anything else

  • Diego

    Great info at the right price too!! Cannot thank you enough. That crazy virus just would not let me do anything by go to its site.

  • Jim K

    Okay – thanks. I have tried this (the rapid click F8 was key for me). When I install/update the Anti-Malware I get this error
    MBAM_ERROR_UPDATING(12007,0,WinHttpSendRequest). I ran the program (took an hour or so); some stuff seems to have been cleaned up, but the problem remained.

    I was told to report the error. To whom? And more important to me, what do I do now?

    • Steve Jones

      Did you come up in Safe mode with networking? I got this message, too. I have to admit I can't quite remember all the details, but the first time I came up without networking (so it makes sense that an http request would fail). Be sure to update Malwarebytes to get the latest database. Mine removed a couple items before the update but it didn't do any good. then today, I saw this post and followed the steps just as written, and now the world is good. :-) Good luck.

    • Waiting for a Train

      I had that issue too, you have to download a newer version from malwarebytes official website, then it can update.

      • SW2

        I had to disable my firewall lockdown (McAfee) and then it updated the current database version.

    • Help

      try downloading winsockxpfix (just do a google search) this should help you download the the updated for malwarebytes also you might have to use another computer to download as it probably won't work on the infected machine……

  • Alex

    I followed your directions step by step after receiving the Security Suite Virus then rebooted and it was good as new … This would help a lot of people …Thank you so much for posting!!!!!!

  • Ken

    Worked great.. Thanks!!!

  • Steve Jones

    I got this virus yesterday and spent much of the day trying to get rid of it based on other guidance I found online. I'd even found and tried Malwarebytes. But I made the mistake of coming up in Safe mode but without networking. I figured I was OK because I knew I had the latest version, not thinking about the database being continually updated. I was about ready to wipe my disk today when I found your new post. Worked like a charm! It was hard to believe I was going to get it back. Thanks!

  • Sam

    I was skeptical as you only wrote this today, but WOW! Everything looks good so far. You're a REALLY SMART GUY!

  • carlos

    worked like a charm! thanks

  • Megan

    I cannot get the rkill program to run. I have tried all of the versions as suggested by bleepingcomputer.com but none work- they seem to still ALL be blocked by Security Suite. So, I tried skipping the rkill step and I will go back and try running rkill after malwarebytes and see if that might work. Anyone have suggestions? Thanks!

    • Steve Jones

      Are you trying to run rkill after rebooting and coming up in Safe mode? When I was running in Safe mode, I didn't see any of the "Security Suite" behavior.

      • Odinsama

        definitly make sure you are running in 'safe mode with networking" i had no problems with the download link provided by the auther. make sure you change you internet explorer proxey setting as well before going into the steps.

      • Geo

        rkill didnt work 4 me either and i was in safe mode

        • donm

          didnt appear to work and I was in safe mode kept on with the process and all good

        • mnafar

          I am having issues with rkill as well

  • OldGeo

    So, anybody else sign up for the $49 Basic Security Suite software package/download?
    I did and the problem, which as others have described, locked up my PC to where I couldn't do/access anything.
    Anyway, that all seemed a bit suspicious but the problem seems resolved. Decided to snoop around and wound up here, asking questions.
    Anyway advice would be welcome.

    • Gaka

      Call your credit company and get them to erase the charge ASAP.

      Do not give information to this virus, which it became clear it was moments after i disconnected the internet and it still claimed i was getting attacked from the internet, go figure. It's a rather "stupid" virus.

      I will be trying out this method to remove it – hopefully it works.

    • April

      YOu better call your credit card company because most likely you gave your info to people who are going to sell it and use it. They don't really give you software they steal your cc info. Sorry.

    • Steve

      Get rid of the program using the steps above. You still have the virus and you will have to continually pay the subscription to use your computer

    • crumbum

      Cancel your credit cards it a phishing scam.

    • Dustin

      i did but once i found this i asked them for my money back because of the 30 day guarantee they refunded me then i did this now everything is back to normal and i am not out of 50 bucks

      • paulette

        How did you contact them, I can't find any phone number, if you have one or know where I can get one Thanks

  • John

    I used a different procedure. I use Firefox, a firewall and a router and still somehow got it. I already had Malwarebytes’ Anti-Malware installed but could not run it because the virus stopped me from running anything. I eventually tried booting into safe mode (F8 while booting) instead of going completely into safe mode, windows will give you an option of doing a system restore, I chose a restore point that was taken before the last recorded one. That seems to have done the trick. I ran my anti-virus and Malwarebytes and both have found nothing, so far everything seems to be working normally.

  • betomidian777

    worked like a charm. read the source for really good step by step. thank you =)

  • Will

    I followed your instructions and it worked like a charm. Many thanks!

  • kal

    I followed all the instructions, including the safe-mode with network but mbam wont update. tried without updating and virus is still there – any advice?

    • Topper

      Make sure you are connected to the internet.

  • george_riley

    hey so i had the pop up but i could still do stuff ..i downloaded all the stuff whilst i was downloading the rkill.com the pop up just went away…but im not sure should i leave it like that or countine with the rounitine…should i turn my pc off and turn it back on to put it on safe mode and boot it…cause this happen to me while i waas on the pc

  • Pat

    I tried all 3 and none of them worked (2 of them wanted me to buy the software before it would remove anything leading me to believe this site is capitalizing on the virus to sell software) is, I have windows vista, does anyone have a solution for Vista

    • bobby

      I had this yesterday and followed the instruction given here and it worked perfectly. You must of downloaded the wrong version. Follow the links on the top of the site.

  • Paul

    I'm very protective and still got hit with this. Following this advice seemed to work but now I still can't get on the internet. I'm in W7 x64 and I think it's a proxy problem but I can't seem to get passed it.
    Either I missed something or it's still there though nothing pops up and I'm able to use the rest of the system save the network.
    Any ideas? And, thanks for the good work.

  • andy

    Thanks for this.your a star.

  • tmi

    so if someone does pay for this virus, who gets the money? cant someone follow the money trail so we can hang the guy by his sack and let all of us have a turn at him with a stick?

    • Will

      @tmi: The problem is that companies such as these that develop and use these fake anti-virus programs are often located overseas where they are out of reach of the law, so it's difficult for any sort of executive entity, be they from the United States or otherwise, to shut down such companies. As much as I'd love to join you in taking one of these malware programmers, tying him up, and beating him with a blunt object, it's just not easy for anyone to nullify these virus and maleware threats at their source.

  • Devon

    Ummm im using windows 7 so i can burn the disc and use on my comp wit windows vista but wen i try to download ccleaner it said my securtiy wont allow it what shoul i do?

  • mike

    hey for some reason after i did this the the internet browsers are not working ..from crome, opera, only one that works is firefox…even on itunes searching it does not work…can someone help me out plz

  • Norm

    Thanks! Your detailed instructions were easy to follow and worked like you said.

    One question… Now that the virus is gone, should the "Use a Proxy Server for your LAN" box remain unchecked or should I go back and check it?

    Thanks again!

  • D Baker

    Thank you! By following your instructions I was able to get rit of this virus on my daughters computer.

  • Chris

    I did all 3 steps but the Security shit is still working….what can i do??? >_<

  • Jeff

    The thing I hate most about the world…………………Jerk wads that spend their time making spyware when they could mprob. make more money and do more good if they just made something that was usful to someone in the world!

  • DuPontC

    I started following the steps on here, had my laptop in safe mode with networking, was running Rkill, my laptop made a whirring noise and turned off. now it won't turn back on! is there any hope?

  • IneedHELPnow

    PLEASE tell me REALLY FAST URGENT can I use a USB drive cause I dont seem to have any CD's to burn. Also i cant system restore, any way to use that instead of all this????

  • Doctorstrange9

    OldGeo the money you payed goes to the people who created the virus its a form of malware called scareware designed to scare you to pay, its a protection racket but worse whatever form of payment you made for the 49$ basic security suite you better call your credit card company and have them cancel the charge and report your credit card you used as stolen and get issued a new card if you used your bank account do the same monitor your bank statements and credit card accounts theres a very good chance your pc is still infected so follow the advice above and they will use the credit card or bank account that you used to steal your money and a small chance your identity this was on 60 minutes or 20/20 or maybe dateline recently also apply for a free credit report in about a month everybody should do this every year good luck

    Doctorstrange9

  • cristyandco

    You saved my life!!!! Well, not literally, but IT WORKED!!!! And, for that, I am forever in debt to you. It is nice to know there are still nice people in this world. Thank you!!!

  • Chris

    I would like to meet the programmers of this virus. I would then rip out all their small organs and make them eat them while I assaulted their dirty skanky wives.

    • Stuck

      I can handle the wife, you just keep the programmer busy.

  • Bill Brown

    How to get rid of in 10mins the safe way:
    (if you have any questions on any steps google is your best friend)
    1st. boot in safemode
    2nd. go to system restore
    3rd. choose a date a week or so back
    4th. enjoy the lack of a virus
    5th. update your anti virus or get a better anti virus program so you don't have the same problem again.

    wow that was hard…

    As for the origin of this virus, it uses a adobe acrobat/reader loophole(based off a false plugin I suspect). It works on vista and xp however i'm not sure about windows 7. (cursed adobe, the door upon which many viruses enter your computer). If I were you I would go about deleting this in a manual way such as a system restore or a AVG safemode scan. It is not really safe to trust the online tutorials to get rid of viruses that simply say "download this program and install in safemode" for there are hundreds of them.

    Learn how to get rid of any virus on your own and you will be much much safer. The funny thing I found about this one is that it blocked cntrl alt delete…. first program i've found to do such. Its scary how good they are getting. Hopefully they don't get too good such that conventional methods are not enough.

  • derek

    thank you so much! it is blocking me from doing anything! i cant even open malware bytes!

  • Momo

    Thank you so much for posting this!! I was freaking out the whole night, but this really helped!

    Also, for people who can't get into safe mode by pressing F8, I had to recreated an improper shut-down, which pretty much meant that I had to pull out the plug while my computer was on.

    Dangerous? Maybe, but it got me the result I wanted.

  • jay

    thanks! i got the virus when i was downloading from piratebay.org

    • Andrea

      I think that is where it came from on my PC as well.

      • greg

        Yea i got mine from piratebay too. fuckers

  • Bryan

    Thank you so much for this removal guide! It was easy to understand and I was able to disinfect my computer very quickly!

  • Lars

    I also ran into this shit. It disabled all my programs, and kept horrasing my with pop-ups so that I wouldn't be able to click anything else but the "buy software" button.

    The easy soultion for Windows7 : (thorough for non-advanced users)

    *Reboot, tapping F8 during startup allowing me to set my computer in "Safe Mode", and allowing windows to actually run stripped.
    *Started up Windows Security Essentials (anti virus) once logged on.
    It was flashing me that I had five severe problems detected
    *Removing them through the same program, click "clean computer"
    *Rebooting, and the virus was gone.

    BUT, so was my internet.
    So I did a "system restore" (just search it in the windows menu) and pulled it back a couple of days, voilà, problems solved:)

  • James

    Thanks! This worked like a charm on my mother-in-law's computer. She thinks I'm a genius. I'm not going to argue with her.

    @tmi. I'm for it. I'll bring sticks.

  • Doctorstrange9

    OldGeo the money you payed goes to the people who created the virus its a form of malware called scareware designed to scare you to pay, its a protection racket but worse whatever form of payment you made for the 49$ basic security suite you better call your credit card company and have them cancel the charge and report your credit card you used as stolen and get issued a new card if you used your bank account do the same monitor your bank statements and credit card accounts theres a very good chance your pc is still infected so follow the advice above and they will use the credit card or bank account that you used to steal your money and a small chance your identity this was on 60 minutes or 20/20 or maybe dateline recently also apply for a free credit report in about a month everybody should do this every year good luck

  • Candice

    This worked great. Took a little time and effort but it wasn't hard at all. I'm not the smartest "comuter person" and it worked for me. Thanks! =)

  • Lakey-bakey

    man u are awesome. thank you so much. i wish there was a way to donate something to u!! do u have a donations thing? u def need to be getting paid for what ur doing!

  • Kyle

    Wow too easy and too free to work…so I thought. I never have replied to anything on the net before HOWEVER I was frustrated with this virus/adware until I followed these SIMPLE and EASY along with FREE steps and it really works. Thanks to whomever, really thanks! Come people give it a try it works!

  • Steve

    Thank you for this. I was completely stuck and your steps fixed the problem in less than 20 minutes.

  • Benjamin

    I downloaded all three onto a flashdrive, and ran them RKILL first (to stop the processes) CC cleaner, then malware bytes. Worked like a charm!

    Thanks!

  • Stu

    Worked wonders.

    To everyone: please ensure that you are on your own account while doing this treatment, as it will not work otherwise.

    Rkill.com is also rather hard to find to download, but I believe you can get it from bleepingcomputer.com.

    The virus shows up on malwarebytes as ‘rogue.antivir’; making it easy to identify.

  • Mei

    I tried everything posted here, but I still had it when I rebooted my computer. However I couldn't update my malwarebytes program. Could that have been the problem? I'm really getting annoyed with this virus..

    • Ben

      I am getting the exact same problem, please could somebody help?

    • Mei

      I finally got it off my computer using the above steps except this time I redownloaded Malwarebytes and re-installed it on my computer in safe mode- I was able to update it that way. Try that if you can, it worked for me.

  • Joe

    Thanks it worked great. Your a life saver! God bless!!!

  • Chris

    You're the man, it's either gone or hiding. Ah well, out of sight, out of mind.

  • JA JA

    THERE ARE PEOPLE WHO DO GREAT THINGS FOR WORLD WITHOUT KNOWING..YOU ARE ONE OF THOSE..YU HAVE SAVED ME BIG TIME BRO…

  • Adam

    Thanks. Virus is GONE! I was scared I was going to have to buy a new laptop. You are a life saver.

  • Topper

    Thanks for restoring my faith in humanity. Worked perfectly.

  • marc

    Rkill wont run looked like a dos program takes seconds then leaves a message on notepad. Did not get red of this virus. Help

    • sad

      That is basically all Rkill does. You should be able to run your malwarebytes software and get rid of the virus – all Rkill does is disable the spyware so your virus software can recognize it and get rid of it.

  • Topper

    Virus was gone then came back after about 2 hours. Anything I missed?

  • sad

    Thank you so much for this solution! I thought all hope was lost. Also, if you want to be able to access your internet in hopes of getting rid of the virus, go into your internet explorer tools menu, select internet options, and then select LAN settings, you can disable the proxy server that the virus is using to hijack your internet (by un-checking the box that says "use a proxy server . . ."). As for the trouble with rkill, I read on an alternate site that if it isn't working for you, it is also sometimes labeled as iExplore.exe or eXplorer.exe so that the virus doesn't recognize it as easily. Hope this helps!

  • Gabe

    Thank you!!! Worked a charm the very first time!! I wish I could send you a Christmas card every year!!! LOL YOU ROCK!!!

  • Ray

    I entered safe mode and use my own anti-virus software sucessfully deleted this dawn thing. But after I reboot my lap top, I can not aceess to the internet. Does anyone know how to fix this problem?

  • mike

    Thank you for these instructions. I just ran through them this morning and my computer is virus-free! A thousand thanks!!!

  • Jen

    I booted up my computer today and it had this virus on it. I was following all your instructions, but it still wasn't removing the virus. I had the Anti-Malware program on my computer already, but the last time it was updated was back March of last year. Turns out the one you linked for downloading is newer than that. So I downloaded it onto a USB and installed/updated it on my infected computer. That was all it needed to get the virus! Thank you so much for having this up! It seems like a lot of people are getting hit with it just in the last couple days… so this is very helpful. =)

  • Andrew

    thank you sooo much worked great!

  • Hoho

    THANK YOU SO MUCH for writing this post!
    I have just come back from months holiday and hadnt backed up my PC since taking all my photos off my camera!
    I thought I had lost them all!
    and of course I was worried about all the work I would be loosing as well! :s
    Im running the Malware at the moment but fingers crossed everything should be fine!
    again THANK YOU so much for being a genius and writing this post!

  • chgrr

    is avg antivirus good enough to stop this happening again or should i get better antivirus software.

  • Kris

    thank you so much it worked after trying many other different things!

  • Don Early

    Another thing you can do is run rkill the moment your computer loads. Security Suite needs a moment to set up, and you can exploit that to run a few executables. I had the problem of using a wireless card for internet so I was unable to connect while in safe mode w/ networking, so I tried this and it worked for me. Basically I doubleclicked rkill as soon as I saw the icon and then doubleclicked malwarebytes. rkill stopped the security suite from loading and malwarebytes loaded just fine. I updated and scanned and voila: security suite is gone.

    Thanks for this thread, saved me a serious headache. That malware sucks hardcore.

    • alex

      Too any windows 7 user…this method will work.

  • Fiona

    Brilliant – worked perfectly. Thanks a million :-)

  • Angela

    Thank you so much for posting this. It worked great!

  • kwp

    I tried all three, but they could not detect Security suite.
    Scan is completed with good result, and I still have a headache.
    Please help.

  • Brandon

    Got this virus yesterday (8/14). To get rid of it, I hit ctrl-alt-del as soon as my desktop came up (Windows XP). I did not boot in safe mode. Security Suite had not loaded yet and did not block this keystroke. I opened task manager and under the processes tab, I found the executable file ahuokkvshdw.exe. I selected this file and clicked "end process". Thankfully, I now had control of my pc and was able to run my anti-virus software. The virus "Troj/PDF]s-LT" and the file "ahuokkvshdw.exe" were quickly found and quarantined. Hope this helps!

  • luke

    I have got rid of it twice now and it keeps coming back.

  • Piggers

    Followed the directions just as written. I am running Windows 7 and everything seems to be working fine. Malwarebytes software found the issue and I removed it without having to purchase a thing from them. I cannot thank you enough, I was freaking out because my husband (Tech geek) is away from home and I had to go it alone. THANK YOU SO MUCH!! A++++

  • Alex

    Thanks to this thread the virus problem is totally resolved now!

  • satisfied person

    wow thank you so much! god bless you! =)

  • Mozzer

    Thanks for posting this. It fixed it all!

  • plzhelp

    hi… i'm running in safe mode with networking, did everything fine untill now. Whenever i try to run the anti-malware thing, i get "vbaccelerator II runtime error 0" and "runtime error 404" and it won't run… so… help? plz?

  • Linda10000

    Thanks so much! This worked perfectly.

  • Geo

    do u have t pay 4 any of these programs?

  • Electrobob

    I used the procedure and it seems to have removed the Security Suite maleware, but now the computer will not connect to any webstie.
    "Internet Explorer connot connect to the webpage"

  • Sarah

    Worked Great! Thanks!

  • zoe

    this works! thank you for the instructions – they were easy to follow and effective.

  • doheerty

    Thanks man worked brilliant, nicest guy on the internet

  • Bloco

    Simply an altruistic person who posted this. Thanks so much

  • Josh

    You, sir, are a genie. You have my humblest thanks.

  • andree

    I did all the things you told me to do…still have a problem. Still have virus.

  • rob

    Guys I must say thanks to this post. It fixed my problem. BTW my system was windows 7. So to answer someones question here yes it does work under windows 7. Do not forget to follow ALL the instructions.

  • chris

    Got all the way to removing virus in Spy doctor, and it asks for name and product key….

  • chris

    Well, even went to the next step and bought Spy Doctor… Even after that, it still didnt find the Security Suite scareware….
    Why did i even bother listening to these remedial acts… Should have saved my time and reinstalled windows+all my programs…

  • Mark Hibbett

    Thank you VERY much indeed!!

  • Simon

    Okay guys, I read all this stuff and was ready to burn all the stuff over to my other computer. And so i also had the problem that i couldnt open any other anti virus programs on my computer. So what i did was that i restarted the computer. And before Security Suite started i managed to start AD-AWARE FREE VERSION (that already was installed on my computer). Made a quick scan, and the funny thing was that ad-aware found these trojans and other shit and removed them, and then asked me to restart my computer. So i did and VOILA. All problems solved.. So i give all credit to AD-Aware Free.<3 But thanks for your guide to, Really awesome that people post this online to help others. THX

  • http://www.facebook.com/loz.elliott Lorraine Elliott

    I followed all the steps as advised and removed the Security Suite. Evertything seemed to be working fine, so I decided I had better make sure that my AVG program was up to date, so I updated it and then ran a complete scan to finish off. At the completion of the scan it had detected some files to be removed upon rebooting. I selected the reboot now button. My computer then shut down as expected and when it restarted it got as far as the Windows screen with the blue bar scrolling across when it shut down and started up again. It just keeps going around in that circle. No error message, just restarting over and over. Can someone please help!!

  • rick

    My brother got this nasty virus from a porn website. I was so angry, Security Suite blocked nearly all programs I couldn't even restore my computer to an earlier date. Safe mode didn't work either. rkill did the trick, you can download it from bleepingcomputer website. After all, I spent at least 5 hours trying to remove this damn thing. Luckily I realized that Security Suite is a scam and didn't purchase it. For those who are still fighting with this virus I recommend reading these removal instructions:
    http://www.bleepingcomputer.com/virus-removal/remhttp://deletemalware.blogspot.com/2010/08/how-to-

    I hope this helps.

  • roodbaard67

    Thank you i thought i was lost 1 hour ago when i was reading an e-book.
    Now i can delete the virus and luckely i do already have ccleaner

  • jack

    hey guys. i tried to kill it with malebytes anti-malew etc, didnt work.
    but then i got the enlightment. those worked:
    just run your standard windows *backup-programm*(in GER: Wiederherstellungsprogramm)
    you can find it at (XP) START-all programms-standard-system programms
    let it bring your pc to a some-days-before-status, and the virus goes to hell
    worked perfectly
    jack

  • Mike P.

    Thank you SO much for this excellent and easily-understood explanation, which seems to have worked like a charm. Now if someone can just create a similarly-malicious, time-sucking virus and zap "Security Suite" with it, we'll really be gettiing somewhere.

  • misha11417

    i triedall of the steps and it didn't work.. when i restarted in safemode again i decided to try all of the steps again. this time i noticed that when i run "rkill" the notepad message that shows up after the black screen displays the following message:

    Processes terminated by Rkill or while it was running:

    C:\Users\Marysia\Downloads\iExplore.exe

    doesnt that mean that rkill is terminating itself? is that normal? what do i do?

    help! :(

  • Davey

    Thanks so much. It must be great to be a genius! I know a lot of cops, I'm going to ask about tracking these bastards and making some arrests. I think it is a decent possibility that someone gets prosecuted for this.

  • nick

    Wow..amazing it worked perfectly!!!

    Thanks so much….really cool!

    Depression to elation is an AMAZING FEELING

  • Dirk

    Gosh, I'm really glad I can type this on my own pc which was infected 5 minutes ago. I used Accessories > Systems tools > Recovery to fix the problem because I'm not really a fan of all those "spyware programs. I'm scanning my pc tomorrow with AVG Free to see if I'm really clean. But a big thanks to Jamie Pert because I guess that his solution would have worked if mine failed. Good luck to all the people who are strugling with the virus right now.

  • Corinne

    Thank you so much for posting this fix. My fiance's computer is ancient and antivirus expired. We thought there was no way we could fix this and were thinking of paying the $$$ to get a whole new machine until we saw your post. The fix worked… and you saved us a lot of money! Thanks a ton ;)

  • danielle

    I'm trying right now to remove this virus and everything as been fine except when i try to install the anti malware it says the applicatioon failed to initialize properly.. what do I do?

  • None Elite User

    Jayesh Patel thank you for your comment. That was the easiest and quickest way to get rid of the bitch =D

  • Fabz

    Thanks, worked well

  • Poppy

    Hi Jamie,
    Thank you so much for all the info – you're a star. I thought my laptop was a goner and it's as good as new :)!

  • Curt

    Worked very well thank you very much. Still don't understand the sickness that makes people want to mess other people up except for maybe this way: Maybe someone could write a virus that would download to a source once it was determined to be the source of a virus. Anyway your system worked well. The only problem was I came back the next day and AVG had detected six "multiple threats", all the same, from the system restore area. I moved the first one to the vault, then couldn't move the others (as they were the same file), presumably. I'm hoping this will end the problem. Any advice on that? Thanks again.

  • Marc

    ***Security Suite blocked access to my wireless network…***

    First, THANK YOU for all your help. I was quite lost until I stumbled across this article.

    Following the directions given I was partially successful in removing the malware. My difficulty was that Security Suite had also taken over my wireless network device so I was not able to update the Malwarebytes AntiMalware software. The version you download from there site is dated back in February and doesn't have the latest definitions, limiting its effectiveness.

    My solution was to bring my cable modem to my desktop area and gain access through the ethernet port…only to discover S.S. had also messed up the driver for that device as well. I dug out the CD with the factory installed drivers and reinstalled the driver (in safe mode with networking, of course!) Once all that was taken care of I was able to gain access to the internet and update the antimalware software.

    I shut down the system (as opposed to simply "restarting") and rebooted in safe mode with networking; updated CCleaner and ran it; executed rkill; launched the Malwarebytes AntiMalware program, updated it, and ran a full system scan. It found several additional threats and removed them. And "voila"! all is once again right with the world and my system is running smoothly.

    Sorry if this is a repeat as I did not take the time to read the entire thread. I just thought there may be someone else who finds themselves in a similar circumstance. If that's you – good luck! :)

  • Golfcarmad

    Absolutely brilliant-do exactly what the man says-just worked on Win 7 64 bit and I used pendrive from 1 laptop to the other-thank you so much

  • Guest

    Just simply hit CONTROL+ALT+DELETE 8-10 times until the Virus is unable to block one of the requests. Once inside TaskManager simply shut down the Virus software and run RKILL. That's all. Don't even need to reboot or anything.

  • lin

    thanks for these easy to follow instructions! they worked really well and cleared the virus!

  • Matthew

    Hi, i got this virus yesterday, and im following the steps but for some reason the Malwarebytes program wont work, i keep getting error messages, ive tried everything from a different download link to copying the file straight from another pc.

  • feza

    You saved my stupid brothers PC :)

  • Adam

    Thanks, what a lame virus.

  • MMan

    Im am afraid this doesn't work, and a work colleague who has also been affected agrees. I ended up deleting my profile and starting that again. You can backup all files while in safe mode so not lose anything other than hours of your life.

  • Stuart

    Brilliant. Worked perfectly and the best of all, I have not had access to IE for over 6months now and no matter what I tried could not sort it out. I had to use firefox as my default browser. The above has sorted out both the virus and I now have access to IE again.Thanks again.

  • Dr Sami

    I am also very grateful to you. Your instruction were very clear. The computer is now working normal. Thanks again

  • Andrea

    I got this bloody virus from thepiratebay.org I think and I followed these three steps and half an hour later, I was virus free. THANK YOU!!!

  • April

    Thank you so much for this post. My husband and I thought for sure we would be spending another $250 for a computer repair, but your post resolved our problems with the virus. Like other readers, I had to do a system restore while in safe mode (I chose a date that was one week prior to our date of infection). I then ran all the suggested downloads, and my computer is now like new. Thank you again so much, and other readers out there with this problem, follow the directions on this page and your computer, and for some of us your "life" will be saved.

  • Neil

    Worked great. Thanks very much.

  • Ricky Gonzalez

    "and then click the show results button, ensure that all of the infections are ticked and then press the Remove Selected button" where is the show results button? i can't find it

  • michael

    Cant get the safe mode up.. i'v pressed the F8 key constantly, even held it down, but nothing!! Is there another way to bring up the safe mode screen?

  • markh

    I am reluctant to download any "recommended'" software from the web however this virus had me back in a corner. The a above procedure worked for me. I did it in safe mode, It took about 2 hours with all the scans and installations, but totally worth it. I am a total hack on the computer, so if i can do this anyone can. thx

  • brandonb

    This must deff, be on of the newwest Virus's out there. It may not be the smartest one, but it's different than anything i've ever seen, especially the whole fake attack crap, even when I didn't have internet. Tonight, i'm going to try this. I have nearly 60k songs on my computer. No way am I re-doing all of that. You might save me here man. Thank you for this.

  • Alexander

    Wow, I can't thank you enough. Perfectly detailed instructions. You have restored my faith in altruism on the internet. Good vibes to you sir, very good vibes.

  • earthunearth

    Thanx a lot dude!! it worked like a charm for me….exactly followed what you said…have had windows7 (64bit) dell xps…

  • Britt

    When I run rkill the only process it terminates is itself

  • Jared

    I had this virus and i put in a cd and my whole computer crashed, then i looked it up and this came up and its been very useful

  • Rox

    works

  • don

    thank you for saving two computers although I had a rkill issue went forward and the virus appears to have been removed so all good and thanks a million for the guidance

  • Sac

    Jamie Pert, mate you deserve a nobel prize for this. I have no words to express my gratitude to you. Keep it up.

  • Roebuck

    The only thing that was able to remove this Rogue program on my laptop was a System Restore. Malwarebytes did not work. I also had no luck with Super AntiSpyware.

    But doing a System Restore to two days prior to the infection wiped it out in good time. Try that before downloading anything that may not be needed.

  • Lisa

    i cannot believe this worked! i was skeptical because stuff like this almost never works! i didn't lose a thing on my hard-drive and everything is working as well as/better than before! thanks a tooooonnnnn!!

  • Carly

    When my dad or I try to put system restore back to a couple days ago, it doesn't let us. About to throw the whole damn thing outside. What is an easy way to defeat this thing for Windows XP.

    *NOTE*
    I haven't tried the poster's suggestion yet. We're feeling a little sketchy? (How could you not after this whole thing?)

  • Jon

    Very sucky virus, however, easy to remove. Turn on your computer and repeatedly tap F8. It will take you to an option screen. Scroll down to safemode with networking and do a system restart. It will ask you to choose a date. Simply choose one before the virus infected your computer. Your computer will start back up under normal settings and enjoy your virus free computer. No need to download anything.

  • Rayray0117

    I just got this virus a few minutes ago. i got rid of it by finding the folder it was in and trying to delete it. i found the folder by clicking properties on the program that popped up for it and copying the location. then i moved it to my documents folder. i had to put the computer in safe mode in order to delete it! Then i quick scanned it with McAfee. Gonna do a full scan tom and run CCleaner too.

    Any other steps i should take? cus it seemed to have work!

    This virus is the hardest one ive ever had to delete b4! when i wasnt in safe mode it made it so most programs would close as soon as i opened them and made McAfee and AntiAdware unable to scan for it by causing an error. also when i tried to delete or move the virus (without being in safemode) it said i couldn't do that cus i had no permission even though im the admin! it wouldnt even allow me to run task manager when i pressed Alt-Ctrl-Delete! this virus is prolly the most powerful i've seen so far.

  • netbook

    I don't have a cd utility on my pc (netbook), what to do?

  • sabz =)

    thanks so much =) im so happy my computers fixed i cant live without it!!
    thanks again!

  • Dee

    Thank you…thank you…thank you…Your directions saved me and my computer. You guys are the best!!!!!!

  • Webby369

    hey yh my laptop doesn't have a disc tray cos its a tiny dell!!! can anyone help me fix this another way, cos my anti-virus is failing to take care of the problem even after a 3 hour scan!! please HELP ME

    • Mitsuko

      USB drive works if your Dell has the port. Flash card and external hard drive work.

      • Webby369

        thank u =)

  • Roger

    I followed all of the steps to the letter but the virus popped up immediately after returning from safe mode. It must be contained in one of the start up routines. But after reading the other user comments, I did a system restore from the safe mode. That worked but like many of the others, my IE is not working anymore. I guess I will try to reinstall it using Chrome as it's still working. I can't believe this guy is sitting somewhere collecting money from this. Can't the credit card companies he uses locate him and call the cops?

  • thankyuu

    THANK YOU SO MUCH FOR THIS <3
    worked perfectly

  • Tom

    This has been brilliant thank you very much the author of this you saved me a new laptop or an expensive repair man no doubt

  • Hannah

    I cant even boot my laptop in safe mode, any help please?!?

  • Matt

    i think thers something really wrong.. when i went into safe mode the desktop didnt load (explorer.exe) i did all the steps still and removed the virus but when i logged in / in normal startup the desktop still didnt load..any ideas as to why this is happening??

  • Cyber

    Thanks for this process, it worked like a champ, I used this on my parents computer, it seems they get the flavor of the month vicious spyware every 3 or 4 months.

    Again, thanks for making my life easier with this article.

    Can anyone tell me the most likely way my parents are getting these things?

    • Nick R

      If they are on facebook, there are certain pages you can "like" that require viewing the final object on another website. For example (my sister got this virus this way), "This girl got kicked out of school for wearing this" required users to like the page, navigate to another page where a fake flash player update would happen to pop up and unless you are tech savvy, the likelihood is you will update resulting in a virus being downloaded without knowing it.

      Just make sure your parents don't download things without your permission. I know it sounds strange but they download so much crap without knowing it half the time^^
      Hope this helps:)

      • Cyber

        Thanks Nick. They do not use Facebook but as you said they often download crap without knowing.

        All I can do is warn them and try to fix their PC, they think I'm a computer genuis. This article makes us all look like one. =)

  • Jeff

    FANTASTIC!! Thanks for the help, it worked perfectly.

  • Linda

    Thank you so much! I was desperate before I found your instructions. This solution worked perfectly. You saved my life (and my work too :))!!!
    Regards from Bulgaria

  • Allison

    Fabulous! I tried getting rid of this bugger the same way I got rid of the AntiVir one, but it didn't work. This, however, worked great. Thanks so much. I'm gonna invest some money into Malware Bytes after this. This family of viruses seems to like me :(

  • Rob

    we pay for inernet security for situations just like this, seems like antivirus software is of no use, with so many computers infected you would think antivirus companies would have updated there applications. don't blame the hacker, norton and mcafee make millions and millions of dollars and they failed at protecting comuters against this. although i greatly appreciate sites that assist in the removal in virus' such as these I dont pay them. For whatever reason i pay norton for a service that has failed……

  • Gal

    Thank you!
    it works.

    Israel

  • Bea

    Thanks a ton. I was so worried for all my docs. from the school. I followed all the steps and it wored out well. But I am not sure if the rkill.com ran or not. It seems that nothing happend with that application. Anyway thanks again great tips.

  • Katie

    i was able to fix this fast thank you so much

  • BCal

    Worked GREAT!!!!!

  • StressedOutMum

    Thanks loads for all this, worked a treat on my sons netbook, problem is I am now doing it all again as it appears to have popped up, does the virus lay dorment or has he been/gone somewhere he shouldnt…….of course he denies any knowledge whatsoever of clicking on any links……but he frequents facebook, msn, youtube etc quite often?

  • Martyn

    Thank you Thank you Thank you. This worked a treat and my laptop is bug free.

  • http://www.facebook.com/Brittan.M.Rudy Brittan Rudolph

    Thank you, thank you, thank you! =)

  • Martin

    Thanks for the info….worked perfectly!!!!

  • Saynotoavast

    Having norton internet security did the trick the first time i got this virus. Just scan, remove the threat, then you can do a system restore.

    System restore also works if you can actually get it to open up. Did it on the 2nd time with the virus. On windows 7 64bit, click advanced recovery methods in "Restore this computer to an earlier time" , click Return your computer to factory settings, restart, and there'll be options to do a system restore when you open it up again.

    AVOID AVAST. Was extremely disappointed that it didnt detect or remove this virus. Miserable failure

  • C Yap

    This works. Thank you for sharing and posting!

  • spc

    First I had the "Security Tool" virus, got rid of that. Computer ran fine for a few days, then I turned it off. I didn't turn it back on for 48 hrs, and when I did, the "Security Suite" virus started. To remove it, I downloaded the three programs, followed the steps on this page, but when I rebooted in normal mode nothing shows up on my desktop except the mouse courser. I rebooted in safe mode and nothing there either. WTF? Any ideas?

    • spc

      update: while the malware is gone, explorer.exe isn't booting when I start my computer. I can boot it from the command prompt, but it doesn't start automatically. I've checked the registry keys and the shells point to explorer.exe. So I still have no idea why it has stopped loading.

  • Christ

    I was extremely hesitent to use this..but it worked amazing…THANK YOU!!!

  • FFS

    FFS, RUN IT IN SAFE MODE!

  • Danielle

    I tried the to press F8 but my computer only gave me the options to start windows normally or do a start up repair.. I pressed start normally.. only to get a loud beeping noise and black screen so I powered it off and did the StartUp repair.. Its been a few hours now and its still running.. I havent seen anything mentioned about it, if anyone has had this issue or knows a way to fix this please tell me asap..
    thanks

  • ykk

    in win7 i had to delete my profile after all of these steps

  • Tamara

    I got this virus a few days ago and did System Restore in Safe Mode to get rid of it. It seemed to work (no more pop ups) but my laptop is still having problems. It won't connect to the Internet at all, won't let me shut down or restart my computer, and my McAfee claims that I have no protection even though I have the subscription until December. Any suggestions? Thanks so much!

  • Terrie

    Thank you!

  • oldman

    it works like a sharm! Thanks for the podt

  • tracker

    Thank You so much! X 10000000000

    Got rid of that NASTY virus and my computer seems to be running normal. Appreciate it!

  • Guest

    THANK YOU!!!

    Worked exactly as you had laid it out. I appreciate your expertise. Very thankful.

  • Kumar

    Tank u so much, I love u man.

  • oopie

    My Dad got rid of this for me by System Restore, but I wanted to make sure it was 100% gone so I changed my internet options/connections/LAN thing. Was it wise to do that or do I not need to do it if the virus is gone now?

  • Joe

    worked fine…Thank you

  • Gared

    i just got this virus today….im gonna try it ….

  • gared

    i still have the virus :S

  • wwills

    So when I'm done do I put the LAN settings back to the way they were?

    • blah

      No

  • Nick

    Everything for the most part looks good and in correct placement, i got the same virus on my pc and a clients pc. mine was not so difficult to remove, but the clients was. It had somehow also disable both cd drives. I guess it has removed the drivers. any ideas? maybe microsoft fix it will catch it for me?

  • Unanymous

    Jamie,

    My computer just got virused today with that SecuritySuite virus. I started freaking out and I was so mad because I didn't want to be spending a bunch of money to fix the issue. Your instructions were so easy and it worked!!! Thank you Thank you Thank you.

  • consalo

    I was infected one hour ago and thanks to your article I have been able to remove this virus.

    Nick, I didn´t use a CD, instead I used a USBdrive and it worked.

    Thanks again!!!!!

  • Jon

    HERE IS A MUCH EASIER WAY TO GET RID OF THIS PROBLEM (that worked for me on windows vista)
    THIS WAY WORKS, AND IT'S EASY–NO NEED TO GO THROUGH ANY TROUBLE WITH OTHER ANTIMALWARE.
    It uses System Restore to restore your computer to an earlier pre-virus-infected condition.

    Beforehand, I did a scan and found about 7 files infected with the security-suite-virus. All but one is deleteable. "Wuauclt.exe" which is found in something like C:UsersOwnerAppDataRoamingMicrosoftNetworkwuauclt.exe" is the infected file that I could not delete. This was solved by simply dragging the file to the "quarantine" folder of my anti-virus software (which happens to be Trend Antivirus). However, I don't think taking this step really affects the solution to the problem which I've provided in a few simple steps below.

    1. Restart your computer.
    2. Right when you log on, hold CTRL + ALT + DELETE then select the "Task Manager" from the options. ( You need to restart your computer to do this because the malware blocks your ability to open task manager ) You need to do this immediately otherwise "Security Suite" will start operating and block your ability to open task manager.
    3. When Task Manager opens you can scroll down and find the application with "Security Suite" in it. End this task.
    4. After you do that, you should be able to use System Restore properly to restore your system to an earlier, pre-infected status. It won't change your files, just the system! (System Restore would have been blocked if you did not close the "Security Suite" program, which would be possible by restarting to get to the taskbar)

    That's it! Hope this helps you get rid of this virus!

  • MWalsh

    I used this method this morning and it worked perfectly. Thank you very much.

  • Edvin

    Lost of love to you poeple!
    Really though I was screwed there for a while. Thanks again and again!

  • Gavin Wilson

    Thanks very much for this advice. It worked for me. Took me about 90 minutes to sort out the problem. Very much appreciate your help. Gavin McBride Wilson. Watford, UK

  • shrikant

    awesome ..got it removed even on windows 7 using this procedure n softwares…thanks a lot…

  • Anthony

    This is the easiest solution for Security Suite

    Guys. I struggled with it a lot. Security suite does not infect any of the existing files. It is a separate application which runs and prevents other applications from running. It gives unnecessary pop ups making you believe that your system is infected with virus. Tried malware bytes and other clean up softwares. Security Suite appears as harmless to virus cleaner becuase it does not infect any files.

    Here is how to get rid of Security Suite.

    Open Windows explorer and got C:UsersYourNameAppDataLocal. If you are not able to open windows explorer, Go into safe mode and do it.
    Find the newest ‘Date modified’ folder(s). Mine were: zsdxcxedw. They looked suspicious and were modified at the same time the virus started. If the Security suite virus started at the same time these folders were created/modified, chances are that’s the virus software. Delete this file and reboot your computer. You are done now.

  • Not Given

    I will make this simple.

    I am a computer tech and this one got me. The people that put this out are good. No popups that I clicked on and no strange sites did I go. Believe your friends if they tell you they did nothing wrong. I clicked nothing I was just on a major site reading an article and wam I got hit. No active x alert, no box asking to allow the install just wam.

    As a computer tech this kind of junk makes my job no longer fun because I spend more time cleaning out computers than anything else. If a seasoned tech can get hit with this what is next.

    About ready to quit my jub because I am starting to hate removing this junk.

  • Not Given

    As to my previous post.

    I will not remove this from my machine. It is not worth the time. The machine that got hit will simply be rebuilt. As I have full backups of everything I can rebuild faster than remove this garbage.

    So my message here to everyone is please always do backups of important files before you need them.

  • Lech123

    Worked great many thanks!!!

  • Nicole

    Thank you so much! This worked the first time and saved my family time and money! A Godsend!

  • Lori Lyon

    I just got thhis virus yesterday and am trying to proceed with the removal.. However, I do not use Internet Explorer and do not have it on my computer. Can I skip this step? Opening up in safemode with networking I still get my firefox web browser and have been able to connect.

  • Lori Lyon

    I just got this virus yesterday and am trying to proceed with the removal.. However, I do not use Internet Explorer and do not have it on my computer. Can I skip this step? Opening up in safemode with networking I still get my firefox web browser and have been able to connect.

  • Emma

    I'm pressing f8 and nothings happening i tried pressing once then pressing fast then slower. i;m using xp any suggestions. This virus is a pain in the butt

  • Jeff Dillon

    Worked for my Windows Vista system. Thank you very much!

  • JAMES

    Thanks guys.. This really helped I was so worried last night that I have to spend too much time reinstalling all the software… YOU GUYS ARE THE BEST!!!!!

  • paulette

    anyone have a phone number for security suite? would really appreciate it.
    they got me and I would like to get them back.
    thanks!!

  • Derrill

    please sent me news letter

  • Rich Wayne

    Worked well – who can i thank ?

    • http://twitter.com/Jam1ePert Jamie Pert

      thank @jam1epert on Twitter