Free malware removal tool to remove Active Security

Active Security is another rogue Antispyware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are more malwares on your system. It’s true indeed, there is really a malware in your system but I think the only malware on your system is Active Security. It invites you to purchase a license to remove malware, do not, it's a scam, you need a license for a malware? This so-called Antivirus tries to scam you.

To remove Active Security

• Download this free removal tool for Active Security
• Extract it
• Launch
• Click on the delete button

Active Security will be removed from your system in 10s. Restart your computer when it’s finished.

Processes :

• asecurity.exe

Files :

• %CommonDesktopDir%\Active Security Support.lnk
• %CommonDesktopDir%\Active Security.lnk
• %CommonPrograms%\Active Security\Active Security Support.lnk
• %CommonPrograms%\Active Security\Active Security.lnk
• %CommonPrograms%\Active Security\Uninstall Active Security.lnk
• %Temp%\uac1052.tmp
• %ProgramFiles%\Active Security\uninstall.exe
• %Temp%\uac118a.tmp
• %ProgramFiles%\Active Security\asecurity.exe
• %Temp%\uace143.tmp
• %ProgramFiles%\Active Security\core.cga
• %Temp%\uacebb.tmp
• %ProgramFiles%\Active Security\coreext.dll
• %ProgramFiles%\Active Security\help.ico

Registry

Registry keys created

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SimpleShlExt
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}\InprocServer32
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\SimpleShlExt
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Active Security
• HKEY_LOCAL_MACHINE\SOFTWARE\Active Security

Registry values created

• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SimpleShlExt
  
  • (Default) = "{5E2121EE-0300-11D4-8D3B-444553540000}"
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}\InprocServer32
  
  • (Default) = "%ProgramFiles%\Active Security\CoreExt.dll"
  • ThreadingModel = "Apartment"
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
  
  • (Default) = "SimpleShlExt Class"
• HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\SimpleShlExt
  
  • (Default) = "{5E2121EE-0300-11D4-8D3B-444553540000}"
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
  
  • {5E2121EE-0300-11D4-8D3B-444553540000} = "Active Security extension"
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Active Security
  
  • DisplayIcon = "%ProgramFiles%\Active Security\asecurity.exe"
  • DisplayName = "Active Security"
  • DisplayVersion = "1.0"
  • Publisher = "Active Security Software"
  • UninstallString = "%ProgramFiles%\Active Security\Uninstall.exe"
  • URLInfoAbout = "http://support.activesecuritys.org"
• HKEY_LOCAL_MACHINE\SOFTWARE\Active Security
  
  • Settings_0 = 0x00000000