Remove System Security 2009/4.51 (Removal Info)

By Jz on Dec 24, 2008 | Reply

I thought System Security is part of Windows operating system. Those bastards make it so real.

By mark on Dec 25, 2008 | Reply

Never really installed System Security on my computer yet I saw the same error as you guys. What’s going on in this world? Financial crisis almost wiped out my 401k, then System Security crap is about to wipe out my computer. Screw whoever created this. Go to H***!!!

By Gene on Dec 25, 2008 | Reply

Like many of you have said, why don’t you try to fix it yourself instead of whining? You know it wouldn’t help. The hackers are living at large where no laws can govern them. They are laughing so loudly cuz they are getting your computers. Either live with it or make yourself unhappy. Merry Christmas!

By Macy on Dec 26, 2008 | Reply

I could not stop SystemSecurity.exe in task manager. What’s the chance of losing all my doucments & settings?

By Brett on Dec 27, 2008 | Reply

For some reason when i attempt to find the afforementioned files, it does not come up with results. Basically, those files don’t exist. Or at least according to Vista they don’t. Help please.

By unknown1 on Dec 28, 2008 | Reply

man this product f up my CPU and i tried to go on Google to fine a way to delete it but it said to download all these software thingys that u have to register and buy it…………. so i don’t know any more i need help before it gets worser.

By Jess on Dec 28, 2008 | Reply

Can You Tell me how to uninstall it on windows vista
as i have no idea what to do
and it just keeps popping up

By NobodyBeatstheWiz on Dec 29, 2008 | Reply

System Security is the ugliest virus I have ever seen in my life. So freaking annoying! I had to restore to manafacture’s CD. Damn it. I lost a lot of mp3’s and movies.

By zack on Dec 29, 2008 | Reply

dam that security thing srewed my new fast computer up. when i find then ill shove there eyes up their butts

By marta on Dec 30, 2008 | Reply

any help for Vista users??

By Dale McHenry on Dec 31, 2008 | Reply

I doesn’t work with my system

By Dale McHenry on Dec 31, 2008 | Reply

It’s not compatible

By Kris on Dec 31, 2008 | Reply

does ANYONE have any USEFULL info. on how to get this crap off my computer? if you dont know how to help others with this, then dont post of fucking comment!!!!!!!!! its for those who actually want to fix the problem!!!! dumb fucks

By Juan on Jan 1, 2009 | Reply

I’ve gone ctrl+alt+del and brought up the task manager pane but the file systemsecurity.exe is not there to start to attempt to get this virus off my computer. Has the newest version of this problem now come under a different file name?

By Kohhal on Jan 1, 2009 | Reply

I think I may have got rid of it, first kill the process, mine was called 207107xxx.exe, random number looks like. Then find the same number in regedit : HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\207107xxx and delete that.

I had realised it was a virus so had not accepted anything from the program, this seems to have halted it, for now…

By DavT on Jan 2, 2009 | Reply

I got rid of the “System Security” by ctrl+alt+del, brought up the task manager, then looking at the progams and then left clicking and opening them to see what program it open. I found the one with a random number, i think. Mine was listed as (930833453.exe). That opened to “System Security” program I then open that program grabbed all the files and deleted them. I then did a program search on the computer for “System Security” found 3 files on the hard drive and deleted them. make sure that you empty the recycle bin of all files (I didn’t do that the first time and it reinstalled)and then restart. After that it got rid of it on my computer. Hope this helps. If it does work for you pass it on.

By Kimberly on Jan 2, 2009 | Reply

that helps.. my number is like that too.. how do I get rid of the virus now that I found the file? HELP?

By DavT on Jan 2, 2009 | Reply

I just highlighted all the files and deleted them. they end up in the recycle bin. just empty the bin after you get all files, both from the task manager (ctrl+alt+del) and the hard drive search.

By cat on Jan 2, 2009 | Reply

hey people. I just did scan already remove this “system security” begin removal from windows defender. then go to check click “computer” to in “C:\Documents and Settings\All Users\Application Data” to deleted folder number “590191701″. you should get windows defender (If you do not have windows defender). I guess I got figure out help you out. I am a deaf person. I hope that you have to remove this stupid fake system security annoys!

By Eve on Jan 2, 2009 | Reply

i found a number like that but how do i open it i tried to click it and nothing opened. i can end the process but i haven’t figured out how to delete it completely. can someone help walk me through it?

By DavT on Jan 2, 2009 | Reply

Eve highlight it and then left click on it. you’ll get a prompt “open location” click on that it will open that programs location. then select and delete all the program files. Don’t forget to do a hard drive search for other files and empty the recyle bin. then restart. good luck

By Karen on Jan 3, 2009 | Reply

When I left click on it it does nothing, no options at all come up? Can anyone help me on this?

By Marc on Jan 3, 2009 | Reply

i have windows xp,
can sum1 help me thru getting rid of system security? please

By Matt on Jan 3, 2009 | Reply

Thank you all for your advice, just had this f*cking virus but thanks to your words of wisdom have deleted it, cheers guys!

By phyllon on Jan 3, 2009 | Reply

I may have got rid of it, first i did was found what the system security was really called by right clicking on the short-cut icon and going to properties. when your in the properties thing click on the “shortcut” tab and click on “find target” after that it should bring up a window with a few folders and stuff. in there is another sheild looking think that had a number as its name for example like mines 790385XXXX or something. (yours may differ.)

that’s what your going to be looking for so you go and kill the process by clicking Alt + Ctrl + Delete to bring up the task manager. before you delete anything you have to make sure you found the name of the Security thing which would be something like 790385XXXX.exe or something with that number you saw before. when do you have the right one, end process.

but your still not done yet. after all this you gotta go back and click delete the folders of the system security, (look in the first paragraph to get there.) when you do get back to the windows where the System Security is located, delete them to the trash. and delete them in your trash too. or else it’ll come back like what someone wrote up there.

your not done yet though. after this you go to Start > Run > type “regedit” and click OK. Then find the same number in key window by clicking on these folders. (dont delete anything else, you might ruin your computer.): HKEY_LOCAL_MACHINE > software > microsoft > windows > current version > run > 79038XXX and delete just that.

REMEMBER TO DELETE IT OFF IN YOUR TRASH TOO.
AFTER DOING ALL THIS RESTART YOUR COMPUTER AND SEE IF IT COMES BACK. IF IT DOES YOU PROBABLY MISSED SOMETHING, IF YOU DIDNT THEN IT DIDNT WORK.

we’ll that’s what i did so if it doesnt work, im sorry i couldnt help. but if it does work then congrats to you and just let us pray it doesnt come back.

By April on Jan 3, 2009 | Reply

Whew! The advice you gave Kohhal seemed to work. It looks like it’s gone…hope it stays gone! Thanks for the info.

By d on Jan 3, 2009 | Reply

Thanks I folloewd your advise and it worked. My random number atarted with a 7.

By stewart on Jan 5, 2009 | Reply

like magic! worked a treat. been trying elsewhere for last SIX hours. many many thanks

By maouro on Jan 5, 2009 | Reply

phyllon,thanks man!i got rid of system security but still pops up in my toolbar ‘you have a security problem’…i’ve got to find that too,but you were very helpful.i don’t know much from pc but those you said were easy.thank you again.hackers with viruses,i fuck your mothers!sorry people,but i was deeply upset with these things these days…so EVERYBODY listen PHYLLON even if pop ups are still there…system security is gone!

By Ann on Jan 5, 2009 | Reply

I’ve found the right name for systemsecurity on my computer and located it, but it won’t let me delete it! When I try to delete it, it says “access is denied, make sure disk is not full or write-protected and that file is not currently in use.” The program does not show up as actively running according to task manager. Any further ideas? Frustrating — I’ve found it but I can’t kill it!

By Debbie on Jan 5, 2009 | Reply

I was also tricked into this.Is there any way to get your money back? this really p—’s me off..

By iVampire on Jan 6, 2009 | Reply

I LOVE U ALL XD But Is There Anyway to stop tis guy from doing tis to cheat ppl money?

By Lesia on Jan 6, 2009 | Reply

I got rid of system security by following the steps but I am still getting infections in my cookies when I am on the internet. Did I miss something??? Please help!!
Thanks

By Lesia on Jan 6, 2009 | Reply

This worked..thank you!! However, I am still getting infections in cookies when I am on the internet. Any ideas on how to stop this?? Please help.

By Nico on Jan 7, 2009 | Reply

It didn’t worked a bit

By Amy on Jan 7, 2009 | Reply

Thanks this helped! It is completely gone from what I can see!!!! I sent them an email to let them know what bastards they are. I am also planning on sending a mass email to my friends to let them know what is going on. Also reporting them to the Better Business Bureau. Anything to stop them.

By Laurij99353 on Jan 7, 2009 | Reply

i have it too - found out that i couldn’t find those files even searching subfolders and hidden files - BUT on the desktop shortcut i did a right click and found it was in a folder with a series of numbers -then did a search for anything containing those numbers and a search by last ACCESS date (i just downloaded it today)- i hope this is helpful to someone - it worked for me

By mk ali on Jan 8, 2009 | Reply

thanks alot phyllon, but as maouro was saying, it still pops up in the toolbar near the time. will this still keep affecting my computer or what. By the way this has to be the ‘gayest’ virus i have ever heard of.

By hubbahubba on Jan 10, 2009 | Reply

Thanks phyllon and contributors….I followed directions (for once) and removed the vicious little bastard. What remains, thankfully, is a reminder of the pitfalls of the net…..and its power to help people solve problems. Thanks again.

By wackenstein on Jan 11, 2009 | Reply

Thanks Phyllon, got rid of it in just a couple of minutes.

By stupidsystem security on Jan 17, 2009 | Reply

stupid security yea they make it look so real i hate the stupid pop ups

By patrick quick on Jan 18, 2009 | Reply

I HAVE TRIED TO FOLLOW INSTRUCTIONS ON HOW TO GET RID OF SYSTEM SECURITY. BUT CAN’T GET RID OF IT.

By steveb on Jan 21, 2009 | Reply

i’ve deleted shortcut so cant right click it. wot now

By Lucylu23 on Jan 21, 2009 | Reply

wow thankyou soo much i finally got rid of it !!!! I tried everything but this was the only way thankyou soooo much!!

By Suzie on Jan 23, 2009 | Reply

Thank you guys so much. I found the number in application data just like you said. Malware couldn’t find it for me and I was getting desperate. Again, thank you.

By joanne on Jan 24, 2009 | Reply

i tried ctrl+alt+del, then windows task manager pops up then click the antivirus2009.exe thats what pops up on mine then highlights it! then click end process on bottom right side!

i hope that helps. It works on mine!!!

stupid scam antivirus lol

By han on Jan 24, 2009 | Reply

thankzs…..but i still have 5 percent of the virus….
, there’s still a pop up….
thank you man!!!!
your a genius!!!
you save my computer!!!

By phil on Jan 26, 2009 | Reply

very specifically how did you do it. in lamemans terms ive got it and its getting worse

By B.F. on Jan 26, 2009 | Reply

I had a little luck w/ regedit using the following key address to delete the 1 startup item to keep it from running. I haven’t been able to remove it yet, but it’s only a matter of time.

%UserProfile%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “1632575944″

NOTE: the quoted number will be random, so make absolutely sure which key you want to delete.
WARNING: using the regedit is very tricky and dangerous to your system, so make sure you know what you’re doing before doing it. It could crash your system.

By owen on Jan 26, 2009 | Reply

i think i got rid of some of it but i still have trouble logging in to things, google doesnt work and i get diverted to windowsclick site a lot. anyone know what to do?

By kwasi on Jan 29, 2009 | Reply

you are a saviour and a genius. its gone now. thanks a million

By alb on Feb 9, 2009 | Reply

Just by reading the blog here, there are a lot of pissed off individuals and I don’t blame them. Because I am one of them. I just got this bogus fake a** System Security the other day while viewing a site to order some flowers. Until this thing invaded my system. I totally freak because it said it detected various of virus and will mess up my system. I then click the run button and without notice, here comes all the pop ups. My antivirus detected two of the virus that invaded my system. Trojan Horse FakeAlert.FG. I then realize that this thing is all fake and just one of those programs for you to purchase it. I was pissed. I tried everything to remove it, but no joy. I then googled “uninstall system security” and came to this site. I was reading everyones entry into this blog. And I read “Phyllon’s” instructions. And there was my answer. I followed every step and it worked. Trust me his instructions really worked. My worries was over. I thank Phyllon for his knowledge and his expertise in sharing this vital information. If it wasn’t for him, I would be stuck with this piece of crap, pop ups appearing up the ying yang, saying my system has multiple errors and viruses. Who ever came up with this “System Security” crap ought to be shot, rip to pieces, and be fed to the beast within. People who do things like this, ain’t got no life. But, I am glad we have individuals like Phyllon who has the knowledge and power to break this sort of thing. Again, thank you Phyllon a job well done.

By Kim on Feb 11, 2009 | Reply

Phyllon, I am an English teacher so that will tell you I am not technologically literate. I cannot thank you enough for your computer expertise. I had asked my own students if they had heard of the System Security virus, and they all said you might as well buy another computer. I followed your instructions verbatim, and I am happy to say, my computer is clean! You have a lot of skill, and I will be forever grateful to you. I am also very thankful to the other contributors and to this site. Thank you,Kim

By Javier on Feb 13, 2009 | Reply

The way i stopped it was by going to start>>Run>> and then typing “msconfig” then clicking on the start-up tab and unchecking it from starting up and rebooting.

By jesse l. on Feb 14, 2009 | Reply

hey for everyone who has this fucking problem go to Phyllon’s advice on January 3… i followed it exactly like he said and it works, i now have no more problems with system fucking security… thanks phyllon

By jing on Feb 14, 2009 | Reply

thanks phyllon, for the advice, it worked.

By lear on Feb 15, 2009 | Reply

Phyllon is a computer god. All Hail Phyllon. I was hesitant to try this for fear I would ruin my own computer but it worked like a charm. I had been downloading and trying things from microsoft and I installed malware. They didn’t do a damn thing. Glad I lucked up on this site. Thanks again Phyllon.

By Trixie on Feb 17, 2009 | Reply

i promised myself i would help you guys out if i got rid of it. this persons instructions got rid of it for me

“By phyllon on Jan 3, 2009 | Reply

I may have got rid of it, first i did was found what the system security was really called by right clicking on the short-cut icon and going to properties. when your in the properties thing click on the “shortcut” tab and click on “find target” after that it should bring up a window with a few folders and stuff. in there is another sheild looking think that had a number as its name for example like mines 790385XXXX or something. (yours may differ.)

that’s what your going to be looking for so you go and kill the process by clicking Alt + Ctrl + Delete to bring up the task manager. before you delete anything you have to make sure you found the name of the Security thing which would be something like 790385XXXX.exe or something with that number you saw before. when do you have the right one, end process.

but your still not done yet. after all this you gotta go back and click delete the folders of the system security, (look in the first paragraph to get there.) when you do get back to the windows where the System Security is located, delete them to the trash. and delete them in your trash too. or else it’ll come back like what someone wrote up there.

your not done yet though. after this you go to Start > Run > type “regedit” and click OK. Then find the same number in key window by clicking on these folders. (dont delete anything else, you might ruin your computer.): HKEY_LOCAL_MACHINE > software > microsoft > windows > current version > run > 79038XXX and delete just that.

REMEMBER TO DELETE IT OFF IN YOUR TRASH TOO.
AFTER DOING ALL THIS RESTART YOUR COMPUTER AND SEE IF IT COMES BACK. IF IT DOES YOU PROBABLY MISSED SOMETHING, IF YOU DIDNT THEN IT DIDNT WORK.

we’ll that’s what i did so if it doesnt work, im sorry i couldnt help. but if it does work then congrats to you and just let us pray it doesnt come back. “

By Jerry on Feb 17, 2009 | Reply

Phyllon thank you so much. You probably won’t ever read this because you already deleted it, but yours and DavT on jan 2, 2009 have been the most helpful ones and I finally deleted this sucker after two hours of despair. I don’t know what I would have done without y’alls help because I didn’t understand the “model-esque” form at the top and took it too literal. Thanks again. Thank you

By Melissa on Feb 17, 2009 | Reply

Hello,

I am the latest vicitm of this f**ing system security thing.I have partly tried Phyllon’s suggestion but get stuck trying to access the ’short cut’ system (cant find this icon).However, I have managed to access the task manager and ‘end process’ on the number 9574346xxx.exe. I then go into the recycle bin and delete it but the thing keeps popping up…someone please help-I am so stressed with this thing

By Melissa on Feb 17, 2009 | Reply

can you help Phyllon, you’re instructions are the most but I seem to be missing something as this thing will not go away any ideas greatfully received!!

By terry on Feb 17, 2009 | Reply

Had a nasty case of system security blues got the answers that I needed THANKS!!!! I found my file listed in the scheduled task bar under systems file 1245349721.exe THANKS again!

By Jenn on Feb 17, 2009 | Reply

Phyllon,
I tried different malware and virus scans free from the net including the one on my computer. They didn’t work. After five hours of trying I found this blog site. Your instructions seems have worked. Thank you so much for taking the time to explain what to do.
Many Blessings to you,
Jenn

By Jenn on Feb 17, 2009 | Reply

For those of us that fell for the System Security ploy, Don’t waste your time downloading all these malware/virus/spyware programs trying to rid your computer of this menace. Try Phyllon’s directions. These directions removed the icon off my toolbar as well as the system folders.

Good Luck.

By Jenn on Feb 17, 2009 | Reply

The shortcut icon is on your desktop. Try also right clicking on the icon on the toolbar and go to properties. Follow Phyllon’s directions. Delete all the folders for System Security in Programs. Reboot your computer to see if the icon pops up on your desktop and try it again.

Good Luck.

By ann on Feb 18, 2009 | Reply

THANKS PHYLLON on Jan 3. Thank you so much for taking the time to give detailed step-by-step directions. I’m not a computer person at all and followed your directions exactly. Thay were perfect. If I can do it anybody can!

By ThE aNtI vIrUs on Feb 18, 2009 | Reply

If you have XP then i can help well it mite work for Vista but i had system security stuck on my comp. And what I did was go to the start menu, all programs, accessories, system tools, system restore. And from there you click the first one selected that says “restore computer to an earlier time” (before you go system security) then like it says select a bold date. then hit next and just follow it through. So at the end your comp. should go to shut down mode and it will restore then and restart and your comp should be fine! Well let me know if that helps any of you wahoo’s out there.

By ThE aNtI vIrUs on Feb 18, 2009 | Reply

And I honestly think that all of you that buy this stuff or download this stuff to remove system security you are just wasting our time.So please dont waste time or money downloading this stuff.

By Bob on Feb 18, 2009 | Reply

THANKS PHYLLON for your Jan 3 solution & step-by-step instructions . It worked !!!!!
Cannot thank you enough, I was going out of my mind trying to get rid of this insidious trojan program . Anyone should be able to follow your instructions.

By Frank Sitchler on Feb 19, 2009 | Reply

Thank you, Phyllon. It worked. Frank in Denver

By Frank Sitchler on Feb 19, 2009 | Reply

Thank you Phyllon. It worked. Frank

By cire555 on Feb 19, 2009 | Reply

to those of you who get stuck in the step by step instructions at that’s what your going to be looking for so you go and kill the process by clicking Alt + Ctrl + Delete to bring up the task manager. before you delete anything you have to make sure you found the name of the Security thing which would be something like 790385XXXX.exe or something with that number you saw before. when do you have the right one, end process.

but your still not done yet. after all this you gotta go back and click delete the folders of the system security, (look in the first paragraph to get there.) when you do get back to the windows where the System Security is located, delete them to the trash. and delete them in your trash too. or else it’ll come back like what someone wrote up there

before you press ctrl+alt+delete make shure you click the danm things icon to make a pop up apear then when you press ctrl+alt+delete it will show up. so you can end task it and follow the instructions from their

By melissa on Feb 20, 2009 | Reply

In order to get rid of this THING you might want to try system restore using F8 in safe mode.

Hello! I have managed to get rid of that horrible virus, my laptop left click and right click are busted so couldn’t do it phyllon’s way. Anway I found another alternative and it worked!!!! I basically rebooted my system using the F8 and then restored the system in safe mode-not problem since then. I have provided instructions, some of you may know this procedure, but for others like me I needed instructions so here they are. I hope it helps someone.

1. restart you’re computer (making sure you are logged on as administrator)
2. when the computer starts loading again start lightly tapping F8, especially when you hear the ‘beep’ mode.
3. this should take you to a screen with options, choose the safe mode option
4. then go to start
5. all programmes
6. accessories
7. system tools
8. on the welcome screen click on restore my computer to a earlier time (youmay need to carry out this procedure more than once if it doesn’t work the first time; making sure you pick a different date each time, the further the date away from when the infection started the more chance of success).
9. click next
10. make sure you have picked a date and keep clicking next until the computer starts to restore to an earlier time.
11. you know it has worked when you get the message of ‘restoration complete’
12. click ok
13. should now be virus free.

I researched this all on this great website http://www.microsoft.com/windowsxp/usinghelpandsupport (or tap in windows XP system restore you know you have the right page when you see a blond woman named on the first page. It’s a good site and tells you how to restore with different pc’s.

By Ivey on Feb 21, 2009 | Reply

For those of you who may start at the bottom…take the advice from phyllon, date Jan 3, 2009. After trying several Anti-malware programs this “manual” way of removing it really works.

By Bob on Feb 23, 2009 | Reply

Phyllon Thanks a ton!!!! i got rid of this irritating stuff…

By nj on Feb 23, 2009 | Reply

thank you so much for the step by step instructions to remove this garbage.after trying for 3 days with no luck(from different web sites offering help at a price).you saved the day .I wasn’t going to give up.I couldn’t get it to stop popping back up ,but after a few times I finally beat it.you are a life saver.I have learned a lesson

By James on Feb 26, 2009 | Reply

For those of you out there, Melissa’s approach using system restore is the best and easy option.
I got rid of that Malware at once without going into many steps.

By Drea on Feb 26, 2009 | Reply

This worked for me! Thanks!!

By kenric on Feb 27, 2009 | Reply

This Trojan is extremely difficult to get rid of

By kenric on Feb 27, 2009 | Reply

People like these should go to jail

By Izza on Feb 28, 2009 | Reply

A huuuuuuge thanks to melissa and phyllon for your ways to combat this shit!

I finally managed to remove it after 6 hours of trying!

thnx guys!

By menarik on Mar 1, 2009 | Reply

Hi Davt thank you so much, with your step
I can kill that stupid system scurity

By jb.3000 on Mar 5, 2009 | Reply

Did anyone get there money back or everyone just get ripped off??

By Roger on Mar 5, 2009 | Reply

I have System Security and none of the spyware programs work. I tried the manual process but the file systemsecurity.exe does not exist in task manager. And I cant find in the program files. Any suggestions?

By Maya on Mar 7, 2009 | Reply

If you have XP then I can help well it mite work for vista but I had system security struck on my comp. and what I did was go to the start menu,all programs,accessories,system tools,system restore.From there you click the first one selected that says “restore computer to an earlier time”(before you got system security struck on your comp.)then like it says select a bold date,then hit next and follow it through.So at the end your comp. should go to shut down mode and it will restore and then restart and your comp. should be fine!System security stops running.Then you can delete all the left over scraps of system security by going to start menu ,search.A speech bubble will pop up asking you “What you want to search for?”click “All Files And Folders” type system security in the search box,and select “Local hard drives” click search.Once the files are found select them all and finally delete them.Please let me know if this way help you guys out there.

By Jason on Mar 12, 2009 | Reply

hay mellisa and phyllon thxs!

By hajar on Mar 17, 2009 | Reply

I’ll was cheat by this security system..I though it was real n I buy it but suddenly it lost by himself in my computer. When I see my credit card list it already charge me.

By Jeannie on Mar 21, 2009 | Reply

I hope I finally got rid of this system security. Had problem trying to find it until I went to Control Panel - folders Options and clicked show hidden files and folders. When I clicked on the number it automatically changed to xxxx.xxxx so I opened the file and deleted 3 more things in that folder but still had problem putting it in recycle bin and so I rebooted the computer and finally was able to put in recycle and emptied it.
I really thank the guys who mentioned about the numbers, otherwise it would have took few days to look for it!

By Jeremiah on Mar 25, 2009 | Reply

I just wanted to add my kudos to phyllon. I was successfull in following your instructions. The random number advice helped alot. I had deleted the shortcut icon off of my desktop before following your advice but it came back when i rebooted so I could right click on it to find the virus numerical name. I purchased Stopzilla to get rid of the system security junk. It detected it but could not remove it.maybe it will prevent future infections …. I can only hope. Anyway, Thank God for phyllon and the decent user community for all of their help. We need to band together to stop these infiltraters!

By Misty on Mar 31, 2009 | Reply

Man, this is gonna be cliched, but thanks Phyllon, I had no idea how to get rid of it. Thankfully I got lucky today and this was the first site I clicked onto get rid of the stupid thing. I already have an anti-virus that gets rid of things, and when I couldn’t uninstall the program I got confused, which is the reason I looked it up in the first place. Fuckers should rot in hell for the frustrations they cause, especially if they ruined my two-month old laptop. So once again, thank you Phyllon!

By Koehnsfitness on Apr 1, 2009 | Reply

Latest Victam have not tried to remove just got it last night deleted all the shortcuts and get the pop ups. Looks like there is a lot of good advice on here will be attempting to try and will let you know how it goes thank you for the advice.

By mygod on Apr 1, 2009 | Reply

I can’t delete those files. System Security 2009 drives me crazy. I don’t know what to do anymore. Maybe I should just junk the old piece of sh*t and buy a new computer.

By len on Apr 2, 2009 | Reply

thanks phyllon
had a hard time getting rid of this dam pop up but ithink i finally got rid of it.The first thing i did was search for system security file and found none.Then i went to task manager by clicking Alt+Ctrl+Delete and clicked on processes and found all numbers something like 73897xxx.exe . Then i went to search and searched for the numbers 73897xxx and came up with 6 files with that number and one actually had the stripped sheild next to it so i knew that this number was the right file.Itried to delete but it would not let me so i went back in task manager went to processes and clicked on the number and hit end process.Then went back and searched for number in files on C hard drive and all 6 files came back.Right clicked on files and deleted them one at a time.Then went to run and typed in regedit and clicked on HKEY_LOCAL_MACHINE then clicked on software then clicked on microsoft then clicked on windows then cliced on currentversion then clicked on run found same numbers 73897xxx and deleted just that number.Then made sure went to recycle bin and deleted the number files from there and restarted my computer and everything seems to be good!!!

By Willem on Apr 3, 2009 | Reply

Holy moly! Thank you it worked Phyllon. Thank you a billion times. Finally that ball soccing virus is destroyd

Willem

From holland

By fsbr on Apr 3, 2009 | Reply

Thank you. Thank you. Thank you. After Googling “Remove System Security” and finding no help at all, except for all the pay sights,
I believe I have been able to remove this virus with the instructions you gave. I even have McAfee and they wanted $89.99 to remove this virus, even though I’ve already paid for their security and service. Thank you once again for helping me remove System Security.

By Yvon on Apr 4, 2009 | Reply

Many many thanks to posting by Melissa Feb 20/2009. I follow all the directive by Melissa and to my great surprise I think I am free of this lousy SYSTEM SECURITY 2009. Their logo on my task bar is gone, their icon on my opening page is gone and when I check ALL MY PROGRAM they are not there anymore as they were previously.
Hope it is gone forever.
Melissa you save my life and my money.

By Yvon on Apr 4, 2009 | Reply

Thank you so much Maya, after following step by step the posting of Melissa feb 20/09 and following step by step your posting on march 07/09 I can say I am free of that horrible SYSTEM SECURITY hopefully forever. Everything was done in less then half an hour and on my first try.
Thanks again to Melissa and Maya

By SAM ROSTEIN on Apr 5, 2009 | Reply

PHYLLON ARE THE MAN!! I PURCHASED NORTON 360 JUST IN CASE SOMETHING LIKE THIS HAPPENS AGAIN.

By Cody on Apr 6, 2009 | Reply

Yep that did work, however my number was listed different, so I’m thinking every computer has a different number when you delete it or find it in the task bar.It was the only thing in the task area that had a number, once I stopped the process it disappeared.Thaks!!

By ron on Apr 7, 2009 | Reply

Yea! go to your bank or where ever you go and have them close out your debit account if you used that and get a new one. But first, contest the charges and demand that the money be put back in your account. I did this and my institution took care of this. Now i’v the 49.95 charge reversed. Fuck these bastards right back.

By Jay on Apr 8, 2009 | Reply

I got rid of system security 2009 by removeing the system security 2009 registry values. It is discribed near the top of page. Not knowing much about computers it’s a risky fix. Lucky for me I chose the right file to delete.

After doing so, I did a restart on my computer and Presto! It was gone. You only need to delete the one file from the registry. Anything else, will probably mess something up. That’s what they say. I don’t want to find out. I am just glad it’s gone.

By Marige on Apr 9, 2009 | Reply

Well, I think there is a new strain of this– and I have it.

First, none of the processes or files listed above exist on my computer. And none of the removers have touched it– most bomb out, making me think this is preventing them from running.

I just found the Spyware Protect 2009 install screen on my computer this morning.

Any help, please? I work on my computer and cannot afford to not use it…

By damien on Apr 9, 2009 | Reply

thank you! ok going to task manager and stopping the process from there seems to work. then proceeding by deleating the upcoming 3 files. recyle bin will get you in the ass. dont forget to empty it or your system friend will reinstall himself. thanks everybody!

By Julie on Apr 11, 2009 | Reply

Thanks Phyllon….you’re a rock star.

By Julie on Apr 11, 2009 | Reply

BTW ….the file number on my computer was 45735203

By None on Apr 13, 2009 | Reply

Phyllon (Jan 3 2009) has the answer.
Thanks man.
Saving your directions for the next time it pops up, as it surely will.
FYI: TO HELL WITH NORTON AND THEIR PAY ME FOR OUR HELP. This thing has been around for a long time under different iterations and they should have had it stopped by now.

By Drenda Mills on Apr 23, 2009 | Reply

I have windows xp I want to get rid of this annoying piece of crap (system security) How do I get rid of it?

By Neelima on Apr 28, 2009 | Reply

I fixed my computer by doing exactly what Phyllon has suggested.It worked for me.THANKS TO PHYLLON .You saved my day. I was suprised to see the spyware. it’s report which was shocking made me think. I tried all kinds of tricks I don’t have anyone to approach so i logged on and downloaded some software which failed to cease the problem.I recommend everyone with this problem to first try PYLLONS METHOD and save thier time ,money and enery.Once again thanks to Phllon .love you
neelima

By Rhonda on May 8, 2009 | Reply

Phyllon,can you send me clearer directions on how to remove this? Thank you so much!

By Rhonda on May 8, 2009 | Reply

My PC wont even allow me to pull up task manager! Please someone help,I dont wish harm to anyone,but I pray that God stops whomever created this in their tracks soon.

By Rhonda on May 8, 2009 | Reply

Maya,if I go to system restore like you advised,doesnt that remove all of my good data too? Doesnt it basically restore the computer back to when it was new,with no photos,music,etc.? Thanx

By Doris on May 8, 2009 | Reply

HELP ME
I have tried Phyllon AND Melissa’s suggestions. First and foremost, this thing won’t even let me access my task manager or regedit!! I can’t delete the folder with the icon either. It will let me delete the subfolders and then those from my recycle bin but when I try to delete the one with the icon, or try to delete using select all, it doesn’t work and adds more subfolders!! What on earth do I do now??

By Doris on May 8, 2009 | Reply

I have also tried system restore. I get so far and then it won’t let me go any farther.
????!!!!

By sara on May 9, 2009 | Reply

same thing is happening to me as doris! i barely got the damn thing yesterday. ive tried removing it but it wont let me got into the add/remove programs, task manager, system restore, properties…basically it wont let me go into anything…even into some program i had installed to remove virus…please if anyone knows how to delete this let me know…

By Littleangel03266 on May 9, 2009 | Reply

Yea i know what you mean it got me too

By damnbug on May 10, 2009 | Reply

this bitch highjacked my task manager and I can’t activate system restore from anyplace: not from system tools & not from control panel

By yabs on May 12, 2009 | Reply

managed to work around the closing of all .exe files and the blocking of safemode caused by this stupid self-installer… i set it so it could not run in my current system. then manually cleaned the files without downloading anything that would cost me any cash.

By Lore on May 12, 2009 | Reply

well got me yesterday denies me access to task manager, the internet add/remove programs etc etc. I went in through safe mode as able to remove through add/remove and ran my adware and anti virus. adware found 33 items and mcafee found nothing after 3 hours. re-booted still has control of my system.
I will try the roll back when I get back home in afew days. If that doesn’t work, is my only option wiping the hard drive or getting a new HD? i still have my install kit for xp.
Any help is appreciated.
Thank you,

By Lore on May 13, 2009 | Reply

hAVEN’T BEEN home to try this but an idea i was given was to use a thumbnail and off a different computer DL the removal tool or an adware program that works and run from the thumbnail, i will prolly try it in safe mode first. IF that doesn’t work i will try a roll back, if that doesn’t work i will wipe the HD or buy a new one.

By Saad on May 13, 2009 | Reply

if ur task manager is not working follow javier on feb 13 n uncheck three unknown files with numbers
mine were 19951564
69971559
99961556
this wont remove it but it will stop it after this follow PHYLLON on jan 3rd to remove system security

By Lore on May 13, 2009 | Reply

thanks saad, i havewritten both down so when i get home friday i will try it.
I think i deleted the shortcut icon so not sure i will be able to find it in regedit.
but i will look. thanks to these posting I have at least some hope to not have to wipe my HD or buy a new.
thanks to all.

By Christine on May 13, 2009 | Reply

Thank God you guys were on here with these saves! Hopefully I have a chance to get rid of this awful thing. thanks.

By Tad on May 15, 2009 | Reply

I searched the C drive for “Sytem Security” and found two files. By following Mya’s directions I think I should delete them, but the date they were modified is over 2 years ago. The exact phrase of the files is System.Security.dll. I don’t want to delete somthing I shouldn’t but I’m not sure if this problem will happen again if I leave them. (Everything seems to have been repaired so far) Any suggestions?

By Tad on May 15, 2009 | Reply

The way I repaired my system was by following Melissa’s directions and going into safe mode to do a system restore. I only went back to a month ago. I’m not a computer guy so can somebody explain what happens now that I’ve only gone “back in time” and not actually deleted the System Security application? Thanks.

By Celeste on May 15, 2009 | Reply

this system security thing is blocking me out of everything that can basically delete it. it won’t even let me get into my task manager. does anyone know of any way i can get rid of this?? please PLEASE PLEASE!!

By Ian on May 16, 2009 | Reply

I feel for every1 who has this problem.there are so many sites that say the same removal instuctions but as many of you also say this is no help.This virus wont let me access what i need to delete it.The same f*****g message THIS APPLICATION CANNOT BE ACCESSED INFECTED i mean what am i to do i feel like breaking my pc and i am normally a nice guy.I assume you can guess i need HELP any sugestions?Thanks for reading.

By Doug on May 16, 2009 | Reply

Phyllon’s notes from Jan 3 worked just right for me. I found I had two infections of the System Security - random numbers starting with 1 and 9. I also had trouble getting Task Manager to open with the virus active - found that restarting my PC and selecting “continue unprotected” from the virus questions would unfreeze it.

By rose on May 16, 2009 | Reply

it just downloaded by itself =[ it won’t let me even open task manager or download anything.
i’ve tried countless number of times to download an anti-software program and when it is about to go through the set up it closes on me because of the security thing. what do i doo =(

By Allan on May 16, 2009 | Reply

I’ve been trying to follow all of these instructions but the problem is that my Task Manager won’t start, I can’t download any program to remove anything, and when I start-> Run something, nothing opens. Is there any way to remove this virus without going into your task manager? Or does anyone know how to make the task manager start again? It would be GREATLY appreciated .. thanks.

By Ben on May 17, 2009 | Reply

Ok, don’t know how much this will help, I think I might have got lucky. This seems to be a new variant that only came into existence within the last few days. Phyllon’s method didn’t work for me. I solved it completely differently from anything I’ve read on the net in the last few hours, so I thought I should put it out there.

Had the same problem as Allan. System security was killing any program I tried to open: notepad, msconfig, cmd, taskmgr… anything. Meant no antivirus tool could start, let alone attempt to remove it.

I had 2 copies of system security in c:\documents and settings\all users\application data\(random 8 digit no.).
For some reason I could CUT one of these to the desktop. When I restarted and before system security had restarted itself, I was able to delete everything. This relied on my computer being a slow piece of… technology.

If you can’t cut it, making a shortcut to the folder it is in might help. When you restart, hit the shortcut and delete the number folder before it can start. Once I deleted it I followed the standard advice above to remove the last remenants.

Best of luck guys… hope this helps with this new evil son of a…

By Gary on May 18, 2009 | Reply

My computer won’t let me even do any of these

By John on May 18, 2009 | Reply

Yeah, just got hit by this as well. I don’t think I clicked much on it, and realized pretty much instantly that it was a Trojan. However, I’m concerned that it could have left behind trojan executable files on my system. I mean, it was somehow able to read my drive off the web without me ever really interacting with it. WTF? I mean, if it can read stuff from my HD, it presumably can write to it as well, so, could it have created some trojans on my system? Is there any simple way to find out?

Thanks for any help,

- John

By Rei on May 18, 2009 | Reply

Thank you for your help! It was so bothersome until I found this page. I had my 12 year old niece help remove it with your instructions I cant thank you enough

By Hisham on May 18, 2009 | Reply

To get control of the task manager and other anti-virus software you need to disable System Security from running when you start windows. Javier on February 13 was correct,
turn on msconfig
in the start-up menu disable anything that looks fishy. (Uncheck the boxes) You can also try to find the system security start-up process by its location. Mine was located in C:\Windows\SecurityLayer.exe
Once I unchecked this box I was able to start windows and access the task manager and update virus software. I am now running updated virus software (AVG). I hope everything will work… what a nasty virus.

By Rhamax on May 19, 2009 | Reply

For those of you having problems with loading the task manager:

Restart your computer, when it begins to boot up hit F8 (or whatever brings you to the safe mode screen)

Once your running safe mode go to run > msconfig and hit ok, once in the config screen look for the tab “Start up” Find the box(s) with the system security numbers and check them OFF. Hit apply and restart your computer and go in normally.

This should get rid of not being able to enter your task manager/executables problem. Then follow the advice given on Feb 3rd. Hope this helps.

By Scruckus on May 19, 2009 | Reply

I have become a god in the office thanks to the helpful advice of RHAMAX and PHYLLON. thankyou thankyou!

By Eric on May 19, 2009 | Reply

Thanks for the tips all. That sucker would not let me do anything to get rid of it at first I had to give it credit for that. What I did was found where it was hiding(Documents and Settings%\All Users\Application Data003089370308937.exe\) and dragged it to my desktop. I restarted and QUICKLY deleted it from the desktop and emptied my trash. I restarted again and I was able to open my anti-virus but since I was on the offensive now I tried a system restore and IT WORKED!!!!!! no more system security crap….

By bunkbink on May 19, 2009 | Reply

XP: I was unable to get to the task manager (ctrl+alt+del), “regedit”, and “msconfig”.

My solution:
1)Go to C:\Documents and Settings\All Users\Application Data and found file folder that had 7 digit number. Opened it and deleted all files except the shield looking icon (exe).
2)Cut and pasted System Security - the shield looking icon (exe) to my desktop.
3)I restarted and QUICKLY deleted it from the desktop and emptied my trash.
4)Went to Control Panel > Add or Remove Programs> found System Security 2009 and clicked remove it…I did receive error saying it had already been deleted but clicked YES when asked to remove it from Control Panel.
5)I went to START> RUN> typed in “msconfig”, hit ok, then went to Start Up Tab. Found the seven digit file and unchecked the box to the left…REBOOT

It looks as this has worked I was only able to get rid of it using partial instructions from those listed above…Thanks to ALL!

By bunkbink on May 19, 2009 | Reply

In order to VIEW the C:\Documents and Settings\All Users\Application Data:

1)Right Click on the My computer icon> explore
2)Click on the TOOLS tab> Go to Folder Options
3)Click on the VIEW tab> under Hidden files and folders click “Hidden files and folders” – you can now VIEW the Applications Data folder….

By puddleduck on May 20, 2009 | Reply

Phyllon got me halfway there! Once I followed all the directions, I decided to do a search in regedit for the number that was assigned to me – 91936026 – guess what I found - another registry with a different number altogether but in the same folder! This one was 11926034. I found both under the following registry string:

HKEY_USERS\S-1-5-21-S-1-5-21-2606161271-3649565817-1280980002-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell

Once I found the new number, I did a c: drive search, found the folder with the new number and opened the folder. Inside, I found a file with the exact same icon (red shield with white x in the middle) and realized that it was definitely the same spyware. So, I conducted all the necessary deletes (regedit, hard drive, & recycle bin). Make sure that you do an “Edit\Find” from the menu for the number. That way, you know you get what you can.

Don’t be fooled into thinking you got it all the first time! These a**h**** are nefarious!

By puddleduck on May 20, 2009 | Reply

oh - make sure you are doing an advanced c: search that shows all hidden files!

By puddleduck on May 20, 2009 | Reply

Jay - don’t be so sure that it’s all gone! Check out my other comment today.

By puddleduck on May 20, 2009 | Reply

check out my comment on May 20th - you may have missed another file. It seems to download more than 1.

By Bigbock66 on May 20, 2009 | Reply

I had this nasty system security 2009 on my pc, that just popped up out of nowhere on 5/18. I tried several things, it wouldn’t let me open any programs, including my device manager, or any spyware, but allowed me to get on the internet. All of my Icons were missing from the lower right, except for this new one for SS 2009. What I did to fix mine was restart in safe mode (F8 several times)with networking, I then went to start,all programs,accessories,sytem tools and sytem restore. I went back to Friday 5/15, it so far,everything seems to be back to normal. I have had several local friends that have been hit with this, and I only had one out of 4 of my computers hit with this thing.

By luckyguy? on May 20, 2009 | Reply

I got hit by that nasty thing yesterday. I tried to clean it by spyware doctor but my computer still got infected. This morning, I used restore system at an earlier time my computer is back to normal. I hope my computer is cleaned now.

By Liz on May 20, 2009 | Reply

can you guys please help me out?
I’m on my guest account, the only one that works. My other two accounts are infected. It won’t let me do anything! I can’t go on the internet or do any system restores or delete any programs let alone open any.
I tried going on Safe Mode with Networking and my internet won’t work. Please Please Please help me out you guys!!!

By Amanda on May 20, 2009 | Reply

I bought a used gateway laptop without any of the disks or anything and I can’t get the automatic updates to turn on. I’ve went to my services and tried starting it and i get a message that says it can’t be started because its disabled or has no enabled devices associated with it. Can someone please tell me how to fix this.

By KA on May 20, 2009 | Reply

Thanks Melissa
Your solution did the trick for me
I hope not to get this crap again
Anyone use this solution and find more issues?

By Carlos on May 22, 2009 | Reply

Thanks so much Bigbock66. It seems to have worked!!! I was freakin’ out!!!

By Cherissa on May 22, 2009 | Reply

I have this terrible virus on my machine but it closes everything that I try to open, including task manager..I cant stop it from there, cant get it to start in safe mode, but I guess I am sort of lucky because the virus its self needs intrnet explorer to do its thing so I am able to use it as well. I have searched for the files and never find anything that has a name of “system security….”. not even in the registry…Any new ideas from anyone would be greatly appreciated..
Thank you

By Dennis on May 23, 2009 | Reply

I’ve been trying to follow all of these instructions but the problem is that my Task Manager won’t start, I can’t download any program to remove anything, and when I start-> Run something, nothing opens. Is there any way to remove this virus without going into your task manager? Or does anyone know how to make the task manager start again? It would be GREATLY appreciated .. thanks.

By charles on May 24, 2009 | Reply

wow..great fix!! i was unable to use the other solution because i could not get into my task manager. thanx for your research. you are the best!!

By Scott on May 24, 2009 | Reply

I had System Security version 4.51 and had to finally invest some $ to Mcafee to remove it..I tried all the recomendations as listed thru comments but this new version wouldnt let me access my comp as adim. and over rode Mcafee. Thank You Mcafee and GL to all that get this frickin worm..FU SS

By justin on May 25, 2009 | Reply

ok i finally got rid of system security 2009 v5.41, very tuff virus 2 get rid of but i managed… i couldnt push Ctrl+alt+delete 2 end its process cuz it disabled the task manager, the add remove programs, the insternet,turned my comp back on after i turned it off, safe mode, opened porn popups, downloaded trojans, disabled my McAfee, and system restore… I called McAfee to see what they could do any they wanted 80 dollars to speak 2 a technician even tho i pay for their protection… finnaly got the program 2 close so i could be able to use add remove programs and delete it… inorder 2 do so i push Ctrl+alt+delete+click+enter cuz window would pop up for .5 sec and i could see the top thing on list was random numbers, perfect timing is key took me alot of tries over and over but eventually got it 2 close… then i went 2 add remove programs and deleted it, then i got my McAfee running and it got rid of the 20 other trojans/viruses that system security downloaded. the virus was from the UK with just a lil search online i found common IP adress that ppl got the virus from, i really dont see why the government doesnt do shit about this, so many pll have had 2 reformat their comps cuz of this loser… i think i got it from yahoo mail when i was checking it but i never ever clicked on a link/left yahoo.com… from what i hear system security gets on your comp from a simple trojan embedded in any compromised website and when u visit it the trojan gets into your computer then remotely downloads the system security… well hope i have helped someone else get rid of this virus and i hope god doesnt have mercy for the POS that makes these thing. (death penalty would be nice…)

By Greg on May 26, 2009 | Reply

Please help!!!!! I did a system restore to before my issues and it seemed to wipe out the System Security 2009. Now my internet explorer will not stay up. Soon as I click on it it pops back down. Everything else on it is fine now though.

By Randy on May 26, 2009 | Reply

HELP! I can’t follow any of the directions for removing this thing because I can’t do anything! Justin (above) said cntl+alt+del+click+enter…what’s “click”? Like others I can’t execute anything. I can’t get to SYSTEM RESTORE, TASK MASTER, etc. I need ideas!!!

By sandra on May 27, 2009 | Reply

This one was only advice that it did work for me. Thank you Maya so much!!! I spend like 4 hours trying to do any of advices other people gave. But, yours did work for me. All the best

By Randal on May 28, 2009 | Reply

Fist of first - go to microsoft.com and download the malicious software removal tool. Run it to get rid of the Trojan installer that downloaded the piece of $%$# in the first place!

This was rather nasty. The version that popped up on the kid’s PC did not respond to service stopping (it pulled the window closed). It also, killed restore so you could not even back up to before it triggered. Going to command prompt to run system.cpl and services.msc also failed.

What worked was simple.
reboot in safe mode (F8 F8 F8 F8 F8 F8 …. choose boot in safe mode. From there run regedit from the run box.

look for HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run (suspicious program name - probably 2 or 3 of them)

in my case they WERE NOT systemsecurity2009 or as seen above, they were changed to a new numeric file name - 19588434 and 99598426. So in my case two entries needed deleting

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run 19588434
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run 99598426

The data pointed to \Documents and Settings\All Users\Application Data\19588434 and \Documents and Settings\All Users\Application Data\99598426

Look there and there was the freekin executable.

If you can’t hack the registry yourself, boot is safe mode and look for the files as suspicious under c:\Documents and Settings\All Users\Application Data\(suspicious numeric file name). Maybe you can delete it. The registry can’t run it if it isn’t there. Restart (you may get the “can’t find” error message at start-up). Then go to microsoft.com and look for their online registry cleaner. maybe it will clean up the registry for you.

Good luck.
(btw: win xp home ed. sp3)

By Randal on May 29, 2009 | Reply

UPDATE

the little bugger came back - reinstalled itself (all 3 file in HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

I found HKEY_LOCAL_MACHINE\software\19588434 defining pc1958843ins which in turn seems linked to 1958843.EXE-179B69AC.pf (a prefetch) located c:\windows\prefetch

still looking for the root Trojan.

By Randal on May 29, 2009 | Reply

The Trojan randomly generates pairs of file with numeric names and associated directories as told above. It also creates random prefetch executables as well.
It will even turn off regedit from the current user.

Where I believe I found the original Trojan writing to HKEY_LOCAL_MACHINE is in HKEY_CURRENT_USER - so look for a numeric file being run under HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run 11176509 (your file name will vary)

By Randal on May 29, 2009 | Reply

Please forgive me - the last line is in CURRENT_USER (getting tired).

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run 11176509 (your file name will vary)

By erol metin on Jun 1, 2009 | Reply

bitte sofort per telefon melden 0212 2308105 wenn nicht wird anwalt eingeschaltet habe kein intzresse an euer programm .blockirt meinen pc komplet .habe dadurch verdinst ausfall habe denn dreck nich installirt hat sich selbst eingerichtet das ist ilegal

By john on Jun 2, 2009 | Reply

i restarted my cpu and it disappeared. (the icon on the bottom and the weird alert)
could it still be on my computer?

By TheAfterPipe on Jun 3, 2009 | Reply

FOR EVERYONE WHO CANNOT ACCESS THEIR TASK MANAGER OR ANY OTHER PROGRAM TO DELETE THE FILES:

Please boot in Safe Mode by pressing F8 when your computer boots up, then follow all the instructions given so graciously by Phyllon.

Several days ago I was listening to some music when all of a sudden my background went black with a giant warning on the screen.

I was like wth? and tried to delete the process but alas System Security had already hijacked my task manager and the rest of the computer telling me I couldn’t run anything so I couldn’t follow Phyllon’s guide. It works once you reboot into safe mode because safe mode only uses the basic essential processes.

By JoGI on Jun 3, 2009 | Reply

Thank you for sharing your knowledge to get rid this very malicious ware/virus. I started mine by booting to safe mode with command prompt, access regedit & followed your third step (removing system security registry values).Thought it didn’t show the systemsecurity.exe into the RUN folder but I’ve traced it in form of a number as 19860934.exe.

By flubed on Jun 3, 2009 | Reply

Maybe virus updated, I am running Xp ran across System Security tody. Hints at top don’t work now. Apparently I no administator anymore. Will not allow Tak Mgr. due to Admin. Priv. nor Regedit. No new accounts, not sure where Adminisrator logon is now??

By flubed on Jun 3, 2009 | Reply

Spill check not working, LOOK before submit!

By KGP on Jun 3, 2009 | Reply

Here is my ‘hand is quicker then the application’ hybrid approach. First, find where the application and associated files hide (per phyllon 3 Jan 09) I found the target at C:\Documents and Settings\All Users\Applications Data\18168434. I couldn’t access Task Manager, couldn’t run regedit, couldn’t run msconfig, couldn’t safeboot, couldn’t access Add/Remove Programs, and couldn’t just delete the files in the target folder. I deleted the System Security application from the Start Menu: All Programs - I think this was key, all I remember is I deleted an icon that actually said System Security from some Window I was searching through and it no longer appeared on the Start Menu. Then I rebooted the computer and immediately upon being able to control the cursor, I opened the file C:\Documents and Settings\All Users\Applications Data\18168434 and quickly deleted the contents, then emptied the trash and went back to delete the empty folder itself and emptied the trash again. I have no more pop-ups and no apparent presence of System Security. One note, if you are lucky enough to have the shortcut on your desktop and are able to find the files, you can see when the virus was last modified, which will inform you as to the time to restore your computer if you are able to access that path. I can’t believe this has been around since Dec 2008 - my file date was 2 June.

By happygonian on Jun 3, 2009 | Reply

Thanks a million bunkbink - this allowed me to get into Task Manager, System Restore etc. when before, the virus prevented even accessing those tools. You’re a genius.

By tim w on Jun 3, 2009 | Reply

this piece of crap must have morphed into a nastier piece of crap
it killed my msconfig, internet access, task manager, and most of all of my programs…

I used the info posted By Randal on May 28

safe mode
reg edit

hopefully its gone for good

By pnorman28 on Jun 4, 2009 | Reply

<<>>>
Hey guys, In my case I had Norton AntiVirus Installed which did not protect my computer from getting this virus ironically, but did help me get rid of it. So if you have this installed on your computer it may give you an edge.
<<>>

So I wasn’t able to access anything to remove the virus. Not Control Panel, Task Manager, and RUN did nothing etiher. But I found it hiding in the C:\Documents and Settings\All Users\Applications Data\15003422 like everyone above.

What I did was Used the Quarantine feature in the Norton Antivirus on all the files in the folder because it was not allowing me to delete them to the Recycle Bin. After they were Quaratined I had no more pop-ups or fake alerts. One file couldn’t be Quarantined so I Quarantined the rest and removed them and after doing that i was able to delete to the Recycle Bin, and then empty the Bin.

Gave it a Restart and i was good to go!

Good Luck and God Bless!

By ilyasah on Jun 6, 2009 | Reply

um i cant do anything on my computer i cant go to my task manager or open up stuff nor can i do add or remove programs cus its controlling my computer

By Manson2009 on Jun 7, 2009 | Reply

I think it is about time some heads in the spyware industry roll. Sine the government will not protect us from this crap, we have to take it in our hands. Look for a few bodies in the streets near where these guys do business!!!

By bam09 on Jun 7, 2009 | Reply

hay davt how did you open task manager when i do it it doesnt come up with control alt deleate

By gingi on Jun 7, 2009 | Reply

can plz someone help me im only a little kid and i dont understand what to do plz someone help me

By ShkStr on Jun 9, 2009 | Reply

You ROCK KGP, I don’t know about the start menu, but the way I did it was to look in the same folder as far as application data, the systemsecurity file was in a folder with a different long number for a name. I then moved the entire folder to my desktop for easy access and rebooted my computer. Then I opened the folder as soon as I saw it, deleted it, emptied my recycle bin and everything was back to normal!

By sasho on Jun 10, 2009 | Reply

Here’s how I removed it without any software:

1. Enter windows trough Safe Mode
2. Go to control panel -> add/remove programs and delete the program “SystemSecurity2009″ from your computer.

3. See if there’s a folder called something like “SystemSecurity2009″ in your “program files folder”. If there is - delete it

4. On your desktop there should be a shortcut for “SystemSecurity2009″ - right click on it and choose “properties”

5. In the “Target:” field there should be a path to the executable file. See what the path is and go to the folder where the executable is. Mine was in “c:\documents and settings\all users\ application data\90981866\” Before I could see it I had to enable “show hidden files” in “Tools->Folder Options..->View->show hidden files and folders.”. So I went in “application data” and saw that there really was a folder named 90981866. I deleted it immediately. http://img44.imageshack.us/img44/5199/spyware1.jpg

6. If there are another folders in the “application data” folder wich name consists only of digits, go in that folder and see if there is an executable file. Right click on it and choose “properties” and go to the “Version” tab. You should see a list in which there is “Company”. Click on it and see what it says. If it says something like “AV System Sec.” delete this folder too ! http://img149.imageshack.us/img149/9846/spyware2.jpg

7. Repeat step 4 for all folders which names consist only of digits or any other suspicious folder.

8. go to start->run and type “regedit”
9. Delete these registry values if they are present in your registry:

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 shortcutpath
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 uninstallstring

10. Restart Windows

Hope that helps somebody

By Chezne on Jun 10, 2009 | Reply

nastier version of it is around.

Safe Mode will take care of it locking out your executables. from that point, use your malware remover of choice or manually scour. My boss freaked out when this thing changed his background and locked everything up!

By mike coates on Jun 10, 2009 | Reply

can someone please help me. this system secuirty virus will not let me do anything I cant open task manger, delete files acess internet install or run programs from cd acess system restore or format my hard drive in windows. Ive tryed starting in safe mode the safe mode screen comes up but the arrow keys on my keyboard stop working so i carnt select safe mode please help.

By dexter_the_dick on Jun 11, 2009 | Reply

yer hi i just did that excatly that i even typed it correctly and yet its still on my system damn…my real problem is i just cant get off this web page..damn i wish i knew a way out, oh well ill try again. thanks guys your a real pal.

By tammy on Jun 11, 2009 | Reply

System security showed up on our pc yesterday, i immediately restarted the computer and made sure that my security suite was on, because it had turned it off, i denied access for system sec to connect to the internet. since doing so i have had no problems except how do i remove it? i have done 2 spyware scans 1 with windows defender and 1 with the verizon security suite and neither one has noticed any spyware or virus on our pc. should i allow access to the internet and then do another scan or should i just purchace a malware remover? any help will be greatly appreciated!

By Loree on Jun 11, 2009 | Reply

What do I do if I can’t get ctrl+alt+delete to open? It shows down at the bottom of the screen that is is trying and then it is closed and nothing shows up on my screen?

By Dave on Jun 12, 2009 | Reply

i cant get the task manager to open and end the process can anyone help me pls?

By Lee on Jun 12, 2009 | Reply

i also cannot get task manager to open and all programs except internet explorerare being blocked can any one help ??

By Lee on Jun 12, 2009 | Reply

It also wont let me open CMD

By John on Jun 12, 2009 | Reply

Finally got rid of it! Thanks Rhamax to your advice, I went into safe mode as suggested, then run - msconfig. Then clicked off number sequence (ex. 1122333333) it stopped it at start up and then I was able to do system restore to a week earlier in reqular start up.

By steve on Jun 12, 2009 | Reply

Thank God for all you who posted suggestions to this site!! I was able to remove the virus by using sasho’s instructions. It was critical that I booted up in Safe mode to begin the process. So thanks agian Sasho for the help!!

By Lizzy on Jun 12, 2009 | Reply

Hey dumb fucks could u get this muthafuckin security thing off my computer. i cant do shit on it. and im getting really pissed off.

By stitch on Jun 12, 2009 | Reply

I think there’s a new version of system security out there cause none of the previous method posted earlier worked for me. There were no security system in my program file or when i searched. Checked regedit and nothing was there.

I went to task manager and ended process with number because it didnt look like it belonged. Once i did this, the system security stopped attacking my comp. I figured these were the files i needed to get rid of. I forgot what there were but it was about 6 numbers. Write these down, you will need it later. I think one started with a 1 and one started with a 9.

From here, I booted to safe mode. Now here are the steps to get rid of it:

1. open my computer and then go to tools –> folder options –> view tab –> show hidden files –> apply

2. Go to your main drive —> document and settings —> administrator —> application data

From here you should see folders with the number you wrote down earlier or ones smilar to it. you want to do delete all these folders.

3. go to start—> run –> type in reg edit

hkey-local-machine/software

there should be a folder with the number you wrote down earlier… delete the folder

if it’s not there.. check through the microsoft–>current version–>system

it should be in there somewhere, i dont remember where it was. From here just reboot and it should be gone. Hope this helps.

By Heather on Jun 12, 2009 | Reply

I finally got rid of it! The instructions about stoping it in task manager and doing the file search didn’t work.

I went to safe mode using F8 at start up, then went into the run>msconfg to disable all of the start up files. I ran my security software while in safe mode and it deleted all of the registry files, etc but it missed that hidden file.

Then, I rebooted in regular mode, went into “c:\documents and settings\all users\” and then into “Tools->Folder Options..->View->show hidden files and folders” and it then showed the “application data” folder. I selected it and then did a shift+delete to permanently delete the folder and anything in there. Rebooted the machine and everything is working fine now but I’m running a virus scan again just to be sure.

Thank you SASHO!!!! :oD

By Kevin on Jun 12, 2009 | Reply

system security 4.51 will not allow me to download anything or run any programs to try and eliminate it. Does anyone have suggestions on how to get rid of this. It also will not allow me to use the control panel and try to stop it.

By Gg on Jun 13, 2009 | Reply

I think there is a new version too. This is the second time i have this crappy frustrated problem. It stopped all my program. Last time I’ll be able to kill the process in task manager but not this time. What I do is:

1. go to safe mode
2. then C:\documents and setting\all users\application data (makesure turn on all the hidden files first)
3.search for the file normally all the number. Eg 15445784 or 95455776 (for me).
4. delete all the file.
5. then run search file again to make sure delete all the exe. too
6. restart to normal mode and run the antivirus.

This is what I do to remove it. so far there is no problem. I hope it wont come back again.

I hope this info will help you guys. good luck.

By John on Jun 13, 2009 | Reply

Hey Kevin: Can u please my previous email from earlier if u are having trouble?

By Ben on Jun 14, 2009 | Reply

Thank you sooooooooooooooo much Gg. I have literally been up for 30 straight hours trying to fix this and, because of you, i was finally succesful, thankyou.

By Piguy on Jun 14, 2009 | Reply

Many thanks to the community for solving this trojan. Gg your help was invaluable. Regards

By RONNNIE on Jun 14, 2009 | Reply

THANKS MATT!!!!!i GOT RID OF IT YAY!!!!! HERES HOW.
START IN SAFE MODE. (F8 WHEN STARTING COMPUTER) GO TO START (BOTTOM LEFT) PROGRAMS, MAINTENCE, HELP AND SUPPORT, AND RESTORE YOUR COMPUTER TO A EARLYER DATE!!!!! AT 3 OR MORE DAYS, DEPENDING ON HOW LONG YOUVE HAD THE DAM VIRUS. THEN RESTORE IT , IT WILL TAKE YOUR PC BACK TO THE WAY IT WAS JUST BRFORE YOU GOT THE VIRUS. AND YOU WILL KEEP ALL YOUR PICS AND DOCUMENTS EVERYTHING IS GREAT, YAY! I WAS SCARED, BUT I KILLED IT. F*CK THE SYSTEM SECURITY!!!!

By Pat on Jun 14, 2009 | Reply

how can I access task manager if this virus is not letting me run ANYTHING?

By carl on Jun 15, 2009 | Reply

The “application data” folder holds important files which are being used by some useful applications like AutoCAD. It’s not recommended to delete the entire folder. A registry cleaner or Uninstaller maneuvered in safe mode should do the trick. Treat System Restore as your last option and I think those remnants in the “Application Data” folder are harmless.

By Nea on Jun 15, 2009 | Reply

oh my computer is infested by this virus i don’t know what to do i’t worry me … Oh please help me anyone … ?? please

By Ron on Jun 15, 2009 | Reply

Boot into safe mode and then you can do what phyllon (Jan 3) says to do. To get into safe mode, reboot and press F8 several times while it is booting. Hope this helps

By JC on Jun 15, 2009 | Reply

I used SpyHunter suite and it work. I was able to remove System Security.

By logan on Jun 15, 2009 | Reply

Hey, Ive done like everything but its taken over my computer I cant open my task manager it blocks a lot of my internet pages it wont let me open links it wont let me open my main secuirty it wont let me system restore wont let me search my files for it so what do i Do should I just take it to frys or what I dont know wht else to do can someone please tell me if this is happening to them and how to fix it through the problems i have please!!! You can email me at logan.duckett@yahoo.com please hellllllpp!!

By Razzell2 on Jun 17, 2009 | Reply

There is only 1 way to stop this insidous bastard from infecting your computer, and I know this will come too late for many of you.
But please use this information the next time that pop up box shows itself on your computer.

Hit ALT, then F4.

This is the function that closes all open windows on your screen.
It will safely close the pop up window that tells you your infected, and then offers the option of clicking “yes”, “no”, or “X’ing” out the box.
ALL of these things activate this virus.

So the next time it pops up on your computer, and it will believe me..(its freaking everywhere), HIT ALT + F4.

(If you have multiple tabs open, and the box that asks if you want to close all tabs, pops up, it is safe to click yes. close all tabs.)

Continue to hit ALT F4, untill all of your windows are closed.
Clean temporary files
Run disk cleanup
Delete cookies
Run CCleaner, if you have it. (if not, you should)
Run your virus program to remove all data miners.

Shut down your computer, leave it off for 10 minutes.

You will safely be able to restart your computer.

This is the only way to keep it from activating.

I sincerely hope this helps someone. It has saved me, and my daughters computers, several times.
Of course, we lost two hard drives on two seperate computers before we found this simple blockage of the system security virus.

razz

By jhon on Jun 17, 2009 | Reply

Good Evening to all, some type of unwanted security system has attached itself to my PC. I think I clicked on it thinking it was a Norton alert. Its called “System Security Version 4.51″ it has a shield with bars as its icon. It keeps flashing pop-ups telling me there are (37) security risks that need immediate attention even after running a full system scan with Norton. It has an IP address for the uninstall but the Norton program won’t let me save it. Is there a way to uninstall this program? Please Help!!

By Garry on Jun 18, 2009 | Reply

Hi Guys
What a mongrel………..

It took lots of goes to beat it to its startup so it was bit by bit at each startup before it took control and disabled everything.

Run > msconfig > startup > disable all processes
then Apply & try to reboot

You may only get Run >msconfig on the first go. If so hit the “Windows key” + R on your next go and it will go to MSconfig automatically (thereby saving you a few more seconds this go) We had the “mongrel” pop up during this process but managed to get to where we wanted.
What you do need to see is the “You have to restart the computer before changes take effect” before you shut down to know that you got into msconfig correctly (click restart).

We were also able to quickly get into Task manager & kill “system security” process. ( for those brief seconds to get our recommended malware software installed.

It is a challenge

By John on Jun 18, 2009 | Reply

THE QUICK SOLUTION!!

This virus WILL cause the inabilty to run your anti spyware, regedit and pretty much anything that is an executable. You can’t even run task manager.

However…this virus isn’t as bad you think and has it’s loop hole…here it is…

You can’t deleted the files from c:\documents and settings\all users5643921…BUT…

The quick and easy think do is rename all the files in the 05643921 folder. I won’t allow you to deleted it, but will allow you to rename it.

Once renamed, remove your network cable or disable your wireless connection and reboot your machine.

Now…because the reg entries can’t locate the systems files, it can’t launch on start up.

This enables you to run whatever you want and also delete the systems files in the all users folder that were not able to do before.

After that, run your anti spyware tool or the automatic remover to clear the loose endsup

Last…reconnect to your network, broadband point and you’re back in action.

Hope this helps

By mike on Jun 18, 2009 | Reply

READ VISTAS USERS********

go to Start > Run > type “regedit” and click OK. HKEY_LOCAL_MACHINE > software > microsoft > windows > current version > run > (NOW LOOK FOR A SET OF NUMBERS ONLY SOMETHING LIKE “79038XXX” OR WHATEVER and RIGHT CLICK THEM AND delete just that., THE RESTART YOUR PC AND YOU GOT RID OF THAT CRAP!

MIKE

By Carlos on Jun 19, 2009 | Reply

I couldn’t access task mgr or start my computer in safe mode either. A good way around this was to press ctr alt del as soon as my desktop appeared. Then wait until the system security program appeared on the applications screen (not the processes screen) and at that exact moment I ended the program. After that I was able to follow Phyllon’s advice. Hope this helps.

By David C. on Jun 19, 2009 | Reply

Hi everyone!

I didn’t have time to read each and every post so someone may have already covered this - but DaveT and phyllon have the answers -

BUT -

If you’re like me, your computer was too slow to bring up the Task Manager while the malware is running -

SO -

Try starting up in safe mode. It’s easy to do -

When you first power up your computer, just start hitting the F8 key until you see a menu with the first selection as Safe Mode - select that and, once you get to the desktop, you can follow phyllon’s steps without a problem.

(remember to empty your trash before restarting!)

Hope this helps!

/David C.

By billy on Jun 19, 2009 | Reply

can’t be removed or
renamed …;-(

By Joe on Jun 19, 2009 | Reply

Gene,

You are an idiot. Obviously you have never had System Security 4.51 thats why you are telling people to stop whining. People come here to ask for help not to hear your smart ass comments.

Joe

By jon on Jun 20, 2009 | Reply

THANK YOU SOOO MUCH!!

By josh on Jun 21, 2009 | Reply

what the hell is this system security fuckry about man im tired of the same old bullshit sheild keeps poping up and telling me my computers is infected wit some shit please help cause if i catch da motherfucker who created this hes gonna be in a world of hurt

By Billy on Jun 21, 2009 | Reply

did all of these …
none helped …
what did was in safe mode
( f8 ) highlight and click
on Restore This Machine To a Time
When It Worked …or something
like that ….then use ccleaner
and wish 4 the best

good luck

By Keith on Jun 22, 2009 | Reply

Hey Ronnie Thanks! Even a dummy like me could fix it! Sorry bastards that did this don’t out number the good people here! Just push F-8 save mode and recover before you got the damn thing!!!!!!!!!!

Keith

By mike on Jun 22, 2009 | Reply

i cant get 2 task manager the security says its infected so i cant even go on it

By Jim on Jun 23, 2009 | Reply

C:\Documents and settings\All Users\Application
Data12752344\12752344.exe

This is the file I had to find and delete to finally be rid of this pest. Thanks for all the suggestions.

By Steve on Jun 23, 2009 | Reply

Hi

I just removed this from a freinds computer. So
1. Restart the computer and press F8 to get into safe mode. this may take a while so be patient.
2. Once in safe mode go to start, then “run” and type in msconfig.
3. Click the startup tab.
4. Look at all the things that start up aumtomatically on your computer.
5. Un check all thoses that you dont need to start.
6 Typically most of this “piece of shit work” are in capitals but if you dont know what to uncheck write them down and put them on this post.

By chris on Jun 23, 2009 | Reply

Hello all. I too did not read every post here, but going into safe mode is the first step and then following advise listed here is good. I have Trend Micro and I called them up and they remotely removed it for a fee of $65.00. Maybe too much $$ for some but for me well worth my time! Good Luck!

By Robert on Jun 23, 2009 | Reply

I got ‘r gone fast. I put the computer in safe mode with comand entry option. I entered %systemroot%\system32\restore\rstrui.exe (I found this code on Microsoft web site) and did a system restore. It was very slow but it worked - virus is GONE>

By Bob Lai on Jun 23, 2009 | Reply

This SOB sux…I want to kill the creator of it.

By sha on Jun 24, 2009 | Reply

hi my friends computer has this virus too. have tried to remove using avast and system restore plus pc doctor in safe mode all of it..it says its gone but when we try to go back into ordinary mode which is not a problem. then try to connect to the net..it won’t connect. looking at her internet connections it says its firewalled any help please..she has also lost all her photos.

By Robert Steiner on Jun 24, 2009 | Reply

Where do I buy a software CD that will remove System Security 4.51 from my computer???

By Jose on Jun 25, 2009 | Reply

check the information provided by Phyllon here at the top of the page on January 03.

By Tracey on Jun 25, 2009 | Reply

I am too trying to remove this System Security virus. I have attempted many of the ways everyone has suggested to no avail. I am currently trying to remove items in the start up tab in safe mode, per Steve’s post on June 23. I am not sure what to remove. I have a few listed in all caps (ARPWRMSG, RTHDCPL, ALCMTR) also numbers (14064684 and 94074676) Any way to figure out which one may be the one I need to remove? Help thanks

By shiela on Jun 26, 2009 | Reply

can anyone help me?
i can’t open my task manager because it’s ‘infected’ or blocked or whatever by this annoying virus ..
someone please help me figure this out,

By shiela on Jun 26, 2009 | Reply

okay, nevermind ..
i finally did it.
thanks to steve on jun23
it worked!!
weew ..that’s a relief

By Nathaniel on Jun 26, 2009 | Reply

My CTRL + ALT + DEL is being blocked, I believe my F8 button has been shut off as I cannot get into Safe Mode, and msconfig is blocked. This virus is more annoying than I almost care to deal with at this point. Apart from doing a system restore, are there any options available to me?

By Jose on Jun 26, 2009 | Reply

If you are able to get rid of the virus, please others know and give credit to the person(s) who helped you. Thus, future visitors will be able to succesfully remove the virus in their computers.

You are welcome

By Jose on Jun 26, 2009 | Reply

Sometimes the virus takes over almost inmediately an does not let you use alt+ctl+dlt to get to the taskmanager.
Do this:
sign into your computer and as soon as the desktop opens:
go to Start,run and in the run window type:taskmgr then press ok. YOU HAVE TO DO IT FAST. MOVE FASTER THAN THE VIRUS.
It took me about 7 tries , but I was able to stop System Security 2009 process from working in my computer.
Then follow the instructions given by Phyllon on Jan.,03,or Steve on June 23.
If I was able to do it, you can do it too.
Jose

By Jose on Jun 26, 2009 | Reply

John,

could you please explain how can one do these steps that you mentioned ON THE QUICK SOLUTION!!

“You can’t deleted the files from c:\documents and settings\all users5643921…BUT…
The quick and easy think do is rename all the files in the 05643921 folder. I won’t allow you to deleted it, but will allow you to rename it.

By Tracey on Jun 26, 2009 | Reply

To John and Steve (June 23 posts)
Thanks for your info I have successfully removed the system security virus.

By Mike on Jun 27, 2009 | Reply

Thank you to everyone for the tips, especially Steve’s post on 6/23. I was able to get into safe mode, open task manager, run “msconfig”, and disable many strange looking executable files from auto-starting (Per Steve’s instructions). I didn’t know what 90% of the files meant so I Googled each from a different computer and it was easy to identify the bad ones. These 3 were the big culprits:

sysgaurd.exe
fmnupd32.exe
zqosys32.exe

Even after I disabled the last two they would still find a way to start up so I deleted them from the root file (In start menu).

Thank you again to everyone for all the help - I didn’t even know where to start.

By Robert Steiner on Jun 27, 2009 | Reply

I followed Jose’s instructions June 26. Start, run , type in taskmgr and click ok repeatedly 15 to 25 times. Each time nothing happened. I then restarted computer and a screen shot came up briefly saying to continue or terminate. I clicked continue and System Security 4.51 was gone. It happened that fast and am back to normal

By Guy on Jun 30, 2009 | Reply

Thank you for your post on 5/17/09! We got this virus and your solution was the only thing that worked. Thanks for taking the time to document this for all to take advantage of!

By Craig Newfield on Jul 1, 2009 | Reply

This thing SUCKS. It won’t let me run any programs, or intall new anti-malware, or goto “Add/Remove Programs”, Control/Alt/Del is disabled. etc. etc. BUT, while Windows has just started (just as the icons started to appear on the desktop) I hit Control/Alt/Del, and went to Processes, sorted by name and stopped the process that is named by random numbers. I didn’t see any process named sysguard as indicated above. But the virus did not start up and I was able to install malware and I hope that killed it.

By ATweed on Jul 1, 2009 | Reply

I had this thing for a few days and like many of you, it would hardly let me open anything. However, whenever i restarted the computer I had approximately a 60 second window of opportunity to try and run something, but it would shut down malaware or any other anti-virus program before it could fully function. However, the method that worked for me was to do a system restore of the computer to before I received the virus. The way you do this in case you dont know is: click on start and all programs, go up to accessories, then down to system tools. After that find system restore and try to run it back to a date before you got the virus. I didn’t do it fast enough the first time, but the second time it worked and restored my computer’s settings to a previous date. After that, run any antivirus software you have just to be sure. Hope that may work for someone.

By sigve on Jul 1, 2009 | Reply

THANKS A LOT !! i had to restore it 2 days back, lost some rare mp3 and flac files, but it was either that or NOTHING, hehe, even ctrl-alt-delete didnt work… couldnt do shit

By Mina on Jul 2, 2009 | Reply

Help- just got this on the computer, and it has totally locked me out of mouse and keyboard control, even in safe mode- is there anyway to get rid of this purely from Dos? I can’t run any form of windows, as I have absolutley no control- keyboard and mouse will not work. HELP!

By Frederick on Jul 3, 2009 | Reply

Ohh piss on this crap I just had installed xp home on this eee too. took me some time to get the setup disk for windows sent to me from the house. And As soon as I connect to the internet this crap. O hell with it I am putting eeebuntu back on my eee. I cant even get this program off so I am doing the easy thing FREE-O.S.+very few viruses= LINUX

By Bill on Jul 3, 2009 | Reply

ALL - easiest way to do this!

Go to your C:\Documents and Settings\All Users\Application Data folder and find the subfolder labeled with an 8 digit number. Then just change the folder name. When you restart your computer, the virus is still there but it can’t find the file to boot up.

Then run any cleaner.