Remove System Security 2009 (Removal Info)

By Jz on Dec 24, 2008 | Reply

I thought System Security is part of Windows operating system. Those bastards make it so real.

By mark on Dec 25, 2008 | Reply

Never really installed System Security on my computer yet I saw the same error as you guys. What’s going on in this world? Financial crisis almost wiped out my 401k, then System Security crap is about to wipe out my computer. Screw whoever created this. Go to H***!!!

By Gene on Dec 25, 2008 | Reply

Like many of you have said, why don’t you try to fix it yourself instead of whining? You know it wouldn’t help. The hackers are living at large where no laws can govern them. They are laughing so loudly cuz they are getting your computers. Either live with it or make yourself unhappy. Merry Christmas!

By Macy on Dec 26, 2008 | Reply

I could not stop SystemSecurity.exe in task manager. What’s the chance of losing all my doucments & settings?

By Brett on Dec 27, 2008 | Reply

For some reason when i attempt to find the afforementioned files, it does not come up with results. Basically, those files don’t exist. Or at least according to Vista they don’t. Help please.

By unknown1 on Dec 28, 2008 | Reply

man this product f up my CPU and i tried to go on Google to fine a way to delete it but it said to download all these software thingys that u have to register and buy it…………. so i don’t know any more i need help before it gets worser.

By Jess on Dec 28, 2008 | Reply

Can You Tell me how to uninstall it on windows vista
as i have no idea what to do
and it just keeps popping up

By NobodyBeatstheWiz on Dec 29, 2008 | Reply

System Security is the ugliest virus I have ever seen in my life. So freaking annoying! I had to restore to manafacture’s CD. Damn it. I lost a lot of mp3’s and movies.

By zack on Dec 29, 2008 | Reply

dam that security thing srewed my new fast computer up. when i find then ill shove there eyes up their butts

By marta on Dec 30, 2008 | Reply

any help for Vista users??

By Dale McHenry on Dec 31, 2008 | Reply

I doesn’t work with my system

By Dale McHenry on Dec 31, 2008 | Reply

It’s not compatible

By Kris on Dec 31, 2008 | Reply

does ANYONE have any USEFULL info. on how to get this crap off my computer? if you dont know how to help others with this, then dont post of fucking comment!!!!!!!!! its for those who actually want to fix the problem!!!! dumb fucks

By Juan on Jan 1, 2009 | Reply

I’ve gone ctrl+alt+del and brought up the task manager pane but the file systemsecurity.exe is not there to start to attempt to get this virus off my computer. Has the newest version of this problem now come under a different file name?

By Kohhal on Jan 1, 2009 | Reply

I think I may have got rid of it, first kill the process, mine was called 207107xxx.exe, random number looks like. Then find the same number in regedit : HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\207107xxx and delete that.

I had realised it was a virus so had not accepted anything from the program, this seems to have halted it, for now…

By DavT on Jan 2, 2009 | Reply

I got rid of the “System Security” by ctrl+alt+del, brought up the task manager, then looking at the progams and then left clicking and opening them to see what program it open. I found the one with a random number, i think. Mine was listed as (930833453.exe). That opened to “System Security” program I then open that program grabbed all the files and deleted them. I then did a program search on the computer for “System Security” found 3 files on the hard drive and deleted them. make sure that you empty the recycle bin of all files (I didn’t do that the first time and it reinstalled)and then restart. After that it got rid of it on my computer. Hope this helps. If it does work for you pass it on.

By Kimberly on Jan 2, 2009 | Reply

that helps.. my number is like that too.. how do I get rid of the virus now that I found the file? HELP?

By DavT on Jan 2, 2009 | Reply

I just highlighted all the files and deleted them. they end up in the recycle bin. just empty the bin after you get all files, both from the task manager (ctrl+alt+del) and the hard drive search.

By cat on Jan 2, 2009 | Reply

hey people. I just did scan already remove this “system security” begin removal from windows defender. then go to check click “computer” to in “C:\Documents and Settings\All Users\Application Data” to deleted folder number “590191701″. you should get windows defender (If you do not have windows defender). I guess I got figure out help you out. I am a deaf person. I hope that you have to remove this stupid fake system security annoys!

By Eve on Jan 2, 2009 | Reply

i found a number like that but how do i open it i tried to click it and nothing opened. i can end the process but i haven’t figured out how to delete it completely. can someone help walk me through it?

By DavT on Jan 2, 2009 | Reply

Eve highlight it and then left click on it. you’ll get a prompt “open location” click on that it will open that programs location. then select and delete all the program files. Don’t forget to do a hard drive search for other files and empty the recyle bin. then restart. good luck

By Karen on Jan 3, 2009 | Reply

When I left click on it it does nothing, no options at all come up? Can anyone help me on this?

By Marc on Jan 3, 2009 | Reply

i have windows xp,
can sum1 help me thru getting rid of system security? please

By Matt on Jan 3, 2009 | Reply

Thank you all for your advice, just had this f*cking virus but thanks to your words of wisdom have deleted it, cheers guys!

By phyllon on Jan 3, 2009 | Reply

I may have got rid of it, first i did was found what the system security was really called by right clicking on the short-cut icon and going to properties. when your in the properties thing click on the “shortcut” tab and click on “find target” after that it should bring up a window with a few folders and stuff. in there is another sheild looking think that had a number as its name for example like mines 790385XXXX or something. (yours may differ.)

that’s what your going to be looking for so you go and kill the process by clicking Alt + Ctrl + Delete to bring up the task manager. before you delete anything you have to make sure you found the name of the Security thing which would be something like 790385XXXX.exe or something with that number you saw before. when do you have the right one, end process.

but your still not done yet. after all this you gotta go back and click delete the folders of the system security, (look in the first paragraph to get there.) when you do get back to the windows where the System Security is located, delete them to the trash. and delete them in your trash too. or else it’ll come back like what someone wrote up there.

your not done yet though. after this you go to Start > Run > type “regedit” and click OK. Then find the same number in key window by clicking on these folders. (dont delete anything else, you might ruin your computer.): HKEY_LOCAL_MACHINE > software > microsoft > windows > current version > run > 79038XXX and delete just that.

REMEMBER TO DELETE IT OFF IN YOUR TRASH TOO.
AFTER DOING ALL THIS RESTART YOUR COMPUTER AND SEE IF IT COMES BACK. IF IT DOES YOU PROBABLY MISSED SOMETHING, IF YOU DIDNT THEN IT DIDNT WORK.

we’ll that’s what i did so if it doesnt work, im sorry i couldnt help. but if it does work then congrats to you and just let us pray it doesnt come back.

By April on Jan 3, 2009 | Reply

Whew! The advice you gave Kohhal seemed to work. It looks like it’s gone…hope it stays gone! Thanks for the info.

By d on Jan 3, 2009 | Reply

Thanks I folloewd your advise and it worked. My random number atarted with a 7.

By stewart on Jan 5, 2009 | Reply

like magic! worked a treat. been trying elsewhere for last SIX hours. many many thanks

By maouro on Jan 5, 2009 | Reply

phyllon,thanks man!i got rid of system security but still pops up in my toolbar ‘you have a security problem’…i’ve got to find that too,but you were very helpful.i don’t know much from pc but those you said were easy.thank you again.hackers with viruses,i fuck your mothers!sorry people,but i was deeply upset with these things these days…so EVERYBODY listen PHYLLON even if pop ups are still there…system security is gone!

By Ann on Jan 5, 2009 | Reply

I’ve found the right name for systemsecurity on my computer and located it, but it won’t let me delete it! When I try to delete it, it says “access is denied, make sure disk is not full or write-protected and that file is not currently in use.” The program does not show up as actively running according to task manager. Any further ideas? Frustrating — I’ve found it but I can’t kill it!

By Debbie on Jan 5, 2009 | Reply

I was also tricked into this.Is there any way to get your money back? this really p—’s me off..

By iVampire on Jan 6, 2009 | Reply

I LOVE U ALL XD But Is There Anyway to stop tis guy from doing tis to cheat ppl money?

By Lesia on Jan 6, 2009 | Reply

I got rid of system security by following the steps but I am still getting infections in my cookies when I am on the internet. Did I miss something??? Please help!!
Thanks

By Lesia on Jan 6, 2009 | Reply

This worked..thank you!! However, I am still getting infections in cookies when I am on the internet. Any ideas on how to stop this?? Please help.

By Nico on Jan 7, 2009 | Reply

It didn’t worked a bit

By Amy on Jan 7, 2009 | Reply

Thanks this helped! It is completely gone from what I can see!!!! I sent them an email to let them know what bastards they are. I am also planning on sending a mass email to my friends to let them know what is going on. Also reporting them to the Better Business Bureau. Anything to stop them.

By Laurij99353 on Jan 7, 2009 | Reply

i have it too – found out that i couldn’t find those files even searching subfolders and hidden files – BUT on the desktop shortcut i did a right click and found it was in a folder with a series of numbers -then did a search for anything containing those numbers and a search by last ACCESS date (i just downloaded it today)- i hope this is helpful to someone – it worked for me

By mk ali on Jan 8, 2009 | Reply

thanks alot phyllon, but as maouro was saying, it still pops up in the toolbar near the time. will this still keep affecting my computer or what. By the way this has to be the ‘gayest’ virus i have ever heard of.

By hubbahubba on Jan 10, 2009 | Reply

Thanks phyllon and contributors….I followed directions (for once) and removed the vicious little bastard. What remains, thankfully, is a reminder of the pitfalls of the net…..and its power to help people solve problems. Thanks again.

By wackenstein on Jan 11, 2009 | Reply

Thanks Phyllon, got rid of it in just a couple of minutes.

By stupidsystem security on Jan 17, 2009 | Reply

stupid security yea they make it look so real i hate the stupid pop ups

By patrick quick on Jan 18, 2009 | Reply

I HAVE TRIED TO FOLLOW INSTRUCTIONS ON HOW TO GET RID OF SYSTEM SECURITY. BUT CAN’T GET RID OF IT.

By steveb on Jan 21, 2009 | Reply

i’ve deleted shortcut so cant right click it. wot now

By Lucylu23 on Jan 21, 2009 | Reply

wow thankyou soo much i finally got rid of it !!!! I tried everything but this was the only way thankyou soooo much!!

By Suzie on Jan 23, 2009 | Reply

Thank you guys so much. I found the number in application data just like you said. Malware couldn’t find it for me and I was getting desperate. Again, thank you.

By joanne on Jan 24, 2009 | Reply

i tried ctrl+alt+del, then windows task manager pops up then click the antivirus2009.exe thats what pops up on mine then highlights it! then click end process on bottom right side!

i hope that helps. It works on mine!!!

stupid scam antivirus lol

By han on Jan 24, 2009 | Reply

thankzs…..but i still have 5 percent of the virus….
, there’s still a pop up….
thank you man!!!!
your a genius!!!
you save my computer!!!

By phil on Jan 26, 2009 | Reply

very specifically how did you do it. in lamemans terms ive got it and its getting worse

By B.F. on Jan 26, 2009 | Reply

I had a little luck w/ regedit using the following key address to delete the 1 startup item to keep it from running. I haven’t been able to remove it yet, but it’s only a matter of time.

%UserProfile%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “1632575944″

NOTE: the quoted number will be random, so make absolutely sure which key you want to delete.
WARNING: using the regedit is very tricky and dangerous to your system, so make sure you know what you’re doing before doing it. It could crash your system.

By owen on Jan 26, 2009 | Reply

i think i got rid of some of it but i still have trouble logging in to things, google doesnt work and i get diverted to windowsclick site a lot. anyone know what to do?

By kwasi on Jan 29, 2009 | Reply

you are a saviour and a genius. its gone now. thanks a million

By alb on Feb 9, 2009 | Reply

Just by reading the blog here, there are a lot of pissed off individuals and I don’t blame them. Because I am one of them. I just got this bogus fake a** System Security the other day while viewing a site to order some flowers. Until this thing invaded my system. I totally freak because it said it detected various of virus and will mess up my system. I then click the run button and without notice, here comes all the pop ups. My antivirus detected two of the virus that invaded my system. Trojan Horse FakeAlert.FG. I then realize that this thing is all fake and just one of those programs for you to purchase it. I was pissed. I tried everything to remove it, but no joy. I then googled “uninstall system security” and came to this site. I was reading everyones entry into this blog. And I read “Phyllon’s” instructions. And there was my answer. I followed every step and it worked. Trust me his instructions really worked. My worries was over. I thank Phyllon for his knowledge and his expertise in sharing this vital information. If it wasn’t for him, I would be stuck with this piece of crap, pop ups appearing up the ying yang, saying my system has multiple errors and viruses. Who ever came up with this “System Security” crap ought to be shot, rip to pieces, and be fed to the beast within. People who do things like this, ain’t got no life. But, I am glad we have individuals like Phyllon who has the knowledge and power to break this sort of thing. Again, thank you Phyllon a job well done.

By Kim on Feb 11, 2009 | Reply

Phyllon, I am an English teacher so that will tell you I am not technologically literate. I cannot thank you enough for your computer expertise. I had asked my own students if they had heard of the System Security virus, and they all said you might as well buy another computer. I followed your instructions verbatim, and I am happy to say, my computer is clean! You have a lot of skill, and I will be forever grateful to you. I am also very thankful to the other contributors and to this site. Thank you,Kim

By Javier on Feb 13, 2009 | Reply

The way i stopped it was by going to start>>Run>> and then typing “msconfig” then clicking on the start-up tab and unchecking it from starting up and rebooting.

By jesse l. on Feb 14, 2009 | Reply

hey for everyone who has this fucking problem go to Phyllon’s advice on January 3… i followed it exactly like he said and it works, i now have no more problems with system fucking security… thanks phyllon

By jing on Feb 14, 2009 | Reply

thanks phyllon, for the advice, it worked.

By lear on Feb 15, 2009 | Reply

Phyllon is a computer god. All Hail Phyllon. I was hesitant to try this for fear I would ruin my own computer but it worked like a charm. I had been downloading and trying things from microsoft and I installed malware. They didn’t do a damn thing. Glad I lucked up on this site. Thanks again Phyllon.

By Trixie on Feb 17, 2009 | Reply

i promised myself i would help you guys out if i got rid of it. this persons instructions got rid of it for me

“By phyllon on Jan 3, 2009 | Reply

I may have got rid of it, first i did was found what the system security was really called by right clicking on the short-cut icon and going to properties. when your in the properties thing click on the “shortcut” tab and click on “find target” after that it should bring up a window with a few folders and stuff. in there is another sheild looking think that had a number as its name for example like mines 790385XXXX or something. (yours may differ.)

that’s what your going to be looking for so you go and kill the process by clicking Alt + Ctrl + Delete to bring up the task manager. before you delete anything you have to make sure you found the name of the Security thing which would be something like 790385XXXX.exe or something with that number you saw before. when do you have the right one, end process.

but your still not done yet. after all this you gotta go back and click delete the folders of the system security, (look in the first paragraph to get there.) when you do get back to the windows where the System Security is located, delete them to the trash. and delete them in your trash too. or else it’ll come back like what someone wrote up there.

your not done yet though. after this you go to Start > Run > type “regedit” and click OK. Then find the same number in key window by clicking on these folders. (dont delete anything else, you might ruin your computer.): HKEY_LOCAL_MACHINE > software > microsoft > windows > current version > run > 79038XXX and delete just that.

REMEMBER TO DELETE IT OFF IN YOUR TRASH TOO.
AFTER DOING ALL THIS RESTART YOUR COMPUTER AND SEE IF IT COMES BACK. IF IT DOES YOU PROBABLY MISSED SOMETHING, IF YOU DIDNT THEN IT DIDNT WORK.

we’ll that’s what i did so if it doesnt work, im sorry i couldnt help. but if it does work then congrats to you and just let us pray it doesnt come back. “

By Jerry on Feb 17, 2009 | Reply

Phyllon thank you so much. You probably won’t ever read this because you already deleted it, but yours and DavT on jan 2, 2009 have been the most helpful ones and I finally deleted this sucker after two hours of despair. I don’t know what I would have done without y’alls help because I didn’t understand the “model-esque” form at the top and took it too literal. Thanks again. Thank you

By Melissa on Feb 17, 2009 | Reply

Hello,

I am the latest vicitm of this f**ing system security thing.I have partly tried Phyllon’s suggestion but get stuck trying to access the ’short cut’ system (cant find this icon).However, I have managed to access the task manager and ‘end process’ on the number 9574346xxx.exe. I then go into the recycle bin and delete it but the thing keeps popping up…someone please help-I am so stressed with this thing

By Melissa on Feb 17, 2009 | Reply

can you help Phyllon, you’re instructions are the most but I seem to be missing something as this thing will not go away any ideas greatfully received!!

By terry on Feb 17, 2009 | Reply

Had a nasty case of system security blues got the answers that I needed THANKS!!!! I found my file listed in the scheduled task bar under systems file 1245349721.exe THANKS again!

By Jenn on Feb 17, 2009 | Reply

Phyllon,
I tried different malware and virus scans free from the net including the one on my computer. They didn’t work. After five hours of trying I found this blog site. Your instructions seems have worked. Thank you so much for taking the time to explain what to do.
Many Blessings to you,
Jenn

By Jenn on Feb 17, 2009 | Reply

For those of us that fell for the System Security ploy, Don’t waste your time downloading all these malware/virus/spyware programs trying to rid your computer of this menace. Try Phyllon’s directions. These directions removed the icon off my toolbar as well as the system folders.

Good Luck.

By Jenn on Feb 17, 2009 | Reply

The shortcut icon is on your desktop. Try also right clicking on the icon on the toolbar and go to properties. Follow Phyllon’s directions. Delete all the folders for System Security in Programs. Reboot your computer to see if the icon pops up on your desktop and try it again.

Good Luck.

By ann on Feb 18, 2009 | Reply

THANKS PHYLLON on Jan 3. Thank you so much for taking the time to give detailed step-by-step directions. I’m not a computer person at all and followed your directions exactly. Thay were perfect. If I can do it anybody can!

By ThE aNtI vIrUs on Feb 18, 2009 | Reply

If you have XP then i can help well it mite work for Vista but i had system security stuck on my comp. And what I did was go to the start menu, all programs, accessories, system tools, system restore. And from there you click the first one selected that says “restore computer to an earlier time” (before you go system security) then like it says select a bold date. then hit next and just follow it through. So at the end your comp. should go to shut down mode and it will restore then and restart and your comp should be fine! Well let me know if that helps any of you wahoo’s out there.

By ThE aNtI vIrUs on Feb 18, 2009 | Reply

And I honestly think that all of you that buy this stuff or download this stuff to remove system security you are just wasting our time.So please dont waste time or money downloading this stuff.

By Bob on Feb 18, 2009 | Reply

THANKS PHYLLON for your Jan 3 solution & step-by-step instructions . It worked !!!!!
Cannot thank you enough, I was going out of my mind trying to get rid of this insidious trojan program . Anyone should be able to follow your instructions.

By Frank Sitchler on Feb 19, 2009 | Reply

Thank you, Phyllon. It worked. Frank in Denver

By Frank Sitchler on Feb 19, 2009 | Reply

Thank you Phyllon. It worked. Frank

By cire555 on Feb 19, 2009 | Reply

to those of you who get stuck in the step by step instructions at that’s what your going to be looking for so you go and kill the process by clicking Alt + Ctrl + Delete to bring up the task manager. before you delete anything you have to make sure you found the name of the Security thing which would be something like 790385XXXX.exe or something with that number you saw before. when do you have the right one, end process.

but your still not done yet. after all this you gotta go back and click delete the folders of the system security, (look in the first paragraph to get there.) when you do get back to the windows where the System Security is located, delete them to the trash. and delete them in your trash too. or else it’ll come back like what someone wrote up there

before you press ctrl+alt+delete make shure you click the danm things icon to make a pop up apear then when you press ctrl+alt+delete it will show up. so you can end task it and follow the instructions from their

By melissa on Feb 20, 2009 | Reply

In order to get rid of this THING you might want to try system restore using F8 in safe mode.

Hello! I have managed to get rid of that horrible virus, my laptop left click and right click are busted so couldn’t do it phyllon’s way. Anway I found another alternative and it worked!!!! I basically rebooted my system using the F8 and then restored the system in safe mode-not problem since then. I have provided instructions, some of you may know this procedure, but for others like me I needed instructions so here they are. I hope it helps someone.

1. restart you’re computer (making sure you are logged on as administrator)
2. when the computer starts loading again start lightly tapping F8, especially when you hear the ‘beep’ mode.
3. this should take you to a screen with options, choose the safe mode option
4. then go to start
5. all programmes
6. accessories
7. system tools
8. on the welcome screen click on restore my computer to a earlier time (youmay need to carry out this procedure more than once if it doesn’t work the first time; making sure you pick a different date each time, the further the date away from when the infection started the more chance of success).
9. click next
10. make sure you have picked a date and keep clicking next until the computer starts to restore to an earlier time.
11. you know it has worked when you get the message of ‘restoration complete’
12. click ok
13. should now be virus free.

I researched this all on this great website http://www.microsoft.com/windowsxp/usinghelpandsupport (or tap in windows XP system restore you know you have the right page when you see a blond woman named on the first page. It’s a good site and tells you how to restore with different pc’s.

By Ivey on Feb 21, 2009 | Reply

For those of you who may start at the bottom…take the advice from phyllon, date Jan 3, 2009. After trying several Anti-malware programs this “manual” way of removing it really works.

By Bob on Feb 23, 2009 | Reply

Phyllon Thanks a ton!!!! i got rid of this irritating stuff…

By nj on Feb 23, 2009 | Reply

thank you so much for the step by step instructions to remove this garbage.after trying for 3 days with no luck(from different web sites offering help at a price).you saved the day .I wasn’t going to give up.I couldn’t get it to stop popping back up ,but after a few times I finally beat it.you are a life saver.I have learned a lesson

By James on Feb 26, 2009 | Reply

For those of you out there, Melissa’s approach using system restore is the best and easy option.
I got rid of that Malware at once without going into many steps.

By Drea on Feb 26, 2009 | Reply

This worked for me! Thanks!!

By kenric on Feb 27, 2009 | Reply

This Trojan is extremely difficult to get rid of

By kenric on Feb 27, 2009 | Reply

People like these should go to jail

By Izza on Feb 28, 2009 | Reply

A huuuuuuge thanks to melissa and phyllon for your ways to combat this shit!

I finally managed to remove it after 6 hours of trying!

thnx guys!

By menarik on Mar 1, 2009 | Reply

Hi Davt thank you so much, with your step
I can kill that stupid system scurity

By jb.3000 on Mar 5, 2009 | Reply

Did anyone get there money back or everyone just get ripped off??

By Roger on Mar 5, 2009 | Reply

I have System Security and none of the spyware programs work. I tried the manual process but the file systemsecurity.exe does not exist in task manager. And I cant find in the program files. Any suggestions?

By Maya on Mar 7, 2009 | Reply

If you have XP then I can help well it mite work for vista but I had system security struck on my comp. and what I did was go to the start menu,all programs,accessories,system tools,system restore.From there you click the first one selected that says “restore computer to an earlier time”(before you got system security struck on your comp.)then like it says select a bold date,then hit next and follow it through.So at the end your comp. should go to shut down mode and it will restore and then restart and your comp. should be fine!System security stops running.Then you can delete all the left over scraps of system security by going to start menu ,search.A speech bubble will pop up asking you “What you want to search for?”click “All Files And Folders” type system security in the search box,and select “Local hard drives” click search.Once the files are found select them all and finally delete them.Please let me know if this way help you guys out there.

By Jason on Mar 12, 2009 | Reply

hay mellisa and phyllon thxs!

By hajar on Mar 17, 2009 | Reply

I’ll was cheat by this security system..I though it was real n I buy it but suddenly it lost by himself in my computer. When I see my credit card list it already charge me.

By Jeannie on Mar 21, 2009 | Reply

I hope I finally got rid of this system security. Had problem trying to find it until I went to Control Panel – folders Options and clicked show hidden files and folders. When I clicked on the number it automatically changed to xxxx.xxxx so I opened the file and deleted 3 more things in that folder but still had problem putting it in recycle bin and so I rebooted the computer and finally was able to put in recycle and emptied it.
I really thank the guys who mentioned about the numbers, otherwise it would have took few days to look for it!

By Jeremiah on Mar 25, 2009 | Reply

I just wanted to add my kudos to phyllon. I was successfull in following your instructions. The random number advice helped alot. I had deleted the shortcut icon off of my desktop before following your advice but it came back when i rebooted so I could right click on it to find the virus numerical name. I purchased Stopzilla to get rid of the system security junk. It detected it but could not remove it.maybe it will prevent future infections …. I can only hope. Anyway, Thank God for phyllon and the decent user community for all of their help. We need to band together to stop these infiltraters!

By Misty on Mar 31, 2009 | Reply

Man, this is gonna be cliched, but thanks Phyllon, I had no idea how to get rid of it. Thankfully I got lucky today and this was the first site I clicked onto get rid of the stupid thing. I already have an anti-virus that gets rid of things, and when I couldn’t uninstall the program I got confused, which is the reason I looked it up in the first place. Fuckers should rot in hell for the frustrations they cause, especially if they ruined my two-month old laptop. So once again, thank you Phyllon!

By Koehnsfitness on Apr 1, 2009 | Reply

Latest Victam have not tried to remove just got it last night deleted all the shortcuts and get the pop ups. Looks like there is a lot of good advice on here will be attempting to try and will let you know how it goes thank you for the advice.

By mygod on Apr 1, 2009 | Reply

I can’t delete those files. System Security 2009 drives me crazy. I don’t know what to do anymore. Maybe I should just junk the old piece of sh*t and buy a new computer.

By len on Apr 2, 2009 | Reply

thanks phyllon
had a hard time getting rid of this dam pop up but ithink i finally got rid of it.The first thing i did was search for system security file and found none.Then i went to task manager by clicking Alt+Ctrl+Delete and clicked on processes and found all numbers something like 73897xxx.exe . Then i went to search and searched for the numbers 73897xxx and came up with 6 files with that number and one actually had the stripped sheild next to it so i knew that this number was the right file.Itried to delete but it would not let me so i went back in task manager went to processes and clicked on the number and hit end process.Then went back and searched for number in files on C hard drive and all 6 files came back.Right clicked on files and deleted them one at a time.Then went to run and typed in regedit and clicked on HKEY_LOCAL_MACHINE then clicked on software then clicked on microsoft then clicked on windows then cliced on currentversion then clicked on run found same numbers 73897xxx and deleted just that number.Then made sure went to recycle bin and deleted the number files from there and restarted my computer and everything seems to be good!!!

By Willem on Apr 3, 2009 | Reply

Holy moly! Thank you it worked Phyllon. Thank you a billion times. Finally that ball soccing virus is destroyd

Willem

From holland

By fsbr on Apr 3, 2009 | Reply

Thank you. Thank you. Thank you. After Googling “Remove System Security” and finding no help at all, except for all the pay sights,
I believe I have been able to remove this virus with the instructions you gave. I even have McAfee and they wanted $89.99 to remove this virus, even though I’ve already paid for their security and service. Thank you once again for helping me remove System Security.

By Yvon on Apr 4, 2009 | Reply

Many many thanks to posting by Melissa Feb 20/2009. I follow all the directive by Melissa and to my great surprise I think I am free of this lousy SYSTEM SECURITY 2009. Their logo on my task bar is gone, their icon on my opening page is gone and when I check ALL MY PROGRAM they are not there anymore as they were previously.
Hope it is gone forever.
Melissa you save my life and my money.

By Yvon on Apr 4, 2009 | Reply

Thank you so much Maya, after following step by step the posting of Melissa feb 20/09 and following step by step your posting on march 07/09 I can say I am free of that horrible SYSTEM SECURITY hopefully forever. Everything was done in less then half an hour and on my first try.
Thanks again to Melissa and Maya

By SAM ROSTEIN on Apr 5, 2009 | Reply

PHYLLON ARE THE MAN!! I PURCHASED NORTON 360 JUST IN CASE SOMETHING LIKE THIS HAPPENS AGAIN.

By Cody on Apr 6, 2009 | Reply

Yep that did work, however my number was listed different, so I’m thinking every computer has a different number when you delete it or find it in the task bar.It was the only thing in the task area that had a number, once I stopped the process it disappeared.Thaks!!

By ron on Apr 7, 2009 | Reply

Yea! go to your bank or where ever you go and have them close out your debit account if you used that and get a new one. But first, contest the charges and demand that the money be put back in your account. I did this and my institution took care of this. Now i’v the 49.95 charge reversed. Fuck these bastards right back.

By Jay on Apr 8, 2009 | Reply

I got rid of system security 2009 by removeing the system security 2009 registry values. It is discribed near the top of page. Not knowing much about computers it’s a risky fix. Lucky for me I chose the right file to delete.

After doing so, I did a restart on my computer and Presto! It was gone. You only need to delete the one file from the registry. Anything else, will probably mess something up. That’s what they say. I don’t want to find out. I am just glad it’s gone.

By Marige on Apr 9, 2009 | Reply

Well, I think there is a new strain of this– and I have it.

First, none of the processes or files listed above exist on my computer. And none of the removers have touched it– most bomb out, making me think this is preventing them from running.

I just found the Spyware Protect 2009 install screen on my computer this morning.

Any help, please? I work on my computer and cannot afford to not use it…

By damien on Apr 9, 2009 | Reply

thank you! ok going to task manager and stopping the process from there seems to work. then proceeding by deleating the upcoming 3 files. recyle bin will get you in the ass. dont forget to empty it or your system friend will reinstall himself. thanks everybody!

By Julie on Apr 11, 2009 | Reply

Thanks Phyllon….you’re a rock star.

By Julie on Apr 11, 2009 | Reply

BTW ….the file number on my computer was 45735203

By None on Apr 13, 2009 | Reply

Phyllon (Jan 3 2009) has the answer.
Thanks man.
Saving your directions for the next time it pops up, as it surely will.
FYI: TO HELL WITH NORTON AND THEIR PAY ME FOR OUR HELP. This thing has been around for a long time under different iterations and they should have had it stopped by now.

By Drenda Mills on Apr 23, 2009 | Reply

I have windows xp I want to get rid of this annoying piece of crap (system security) How do I get rid of it?

By Neelima on Apr 28, 2009 | Reply

I fixed my computer by doing exactly what Phyllon has suggested.It worked for me.THANKS TO PHYLLON .You saved my day. I was suprised to see the spyware. it’s report which was shocking made me think. I tried all kinds of tricks I don’t have anyone to approach so i logged on and downloaded some software which failed to cease the problem.I recommend everyone with this problem to first try PYLLONS METHOD and save thier time ,money and enery.Once again thanks to Phllon .love you
neelima

By Rhonda on May 8, 2009 | Reply

Phyllon,can you send me clearer directions on how to remove this? Thank you so much!

By Rhonda on May 8, 2009 | Reply

My PC wont even allow me to pull up task manager! Please someone help,I dont wish harm to anyone,but I pray that God stops whomever created this in their tracks soon.

By Rhonda on May 8, 2009 | Reply

Maya,if I go to system restore like you advised,doesnt that remove all of my good data too? Doesnt it basically restore the computer back to when it was new,with no photos,music,etc.? Thanx

By Doris on May 8, 2009 | Reply

HELP ME
I have tried Phyllon AND Melissa’s suggestions. First and foremost, this thing won’t even let me access my task manager or regedit!! I can’t delete the folder with the icon either. It will let me delete the subfolders and then those from my recycle bin but when I try to delete the one with the icon, or try to delete using select all, it doesn’t work and adds more subfolders!! What on earth do I do now??

By Doris on May 8, 2009 | Reply

I have also tried system restore. I get so far and then it won’t let me go any farther.
????!!!!

By sara on May 9, 2009 | Reply

same thing is happening to me as doris! i barely got the damn thing yesterday. ive tried removing it but it wont let me got into the add/remove programs, task manager, system restore, properties…basically it wont let me go into anything…even into some program i had installed to remove virus…please if anyone knows how to delete this let me know…

By Littleangel03266 on May 9, 2009 | Reply

Yea i know what you mean it got me too

By damnbug on May 10, 2009 | Reply

this bitch highjacked my task manager and I can’t activate system restore from anyplace: not from system tools & not from control panel

By yabs on May 12, 2009 | Reply

managed to work around the closing of all .exe files and the blocking of safemode caused by this stupid self-installer… i set it so it could not run in my current system. then manually cleaned the files without downloading anything that would cost me any cash.

By Lore on May 12, 2009 | Reply

well got me yesterday denies me access to task manager, the internet add/remove programs etc etc. I went in through safe mode as able to remove through add/remove and ran my adware and anti virus. adware found 33 items and mcafee found nothing after 3 hours. re-booted still has control of my system.
I will try the roll back when I get back home in afew days. If that doesn’t work, is my only option wiping the hard drive or getting a new HD? i still have my install kit for xp.
Any help is appreciated.
Thank you,

By Lore on May 13, 2009 | Reply

hAVEN’T BEEN home to try this but an idea i was given was to use a thumbnail and off a different computer DL the removal tool or an adware program that works and run from the thumbnail, i will prolly try it in safe mode first. IF that doesn’t work i will try a roll back, if that doesn’t work i will wipe the HD or buy a new one.

By Saad on May 13, 2009 | Reply

if ur task manager is not working follow javier on feb 13 n uncheck three unknown files with numbers
mine were 19951564
69971559
99961556
this wont remove it but it will stop it after this follow PHYLLON on jan 3rd to remove system security

By Lore on May 13, 2009 | Reply

thanks saad, i havewritten both down so when i get home friday i will try it.
I think i deleted the shortcut icon so not sure i will be able to find it in regedit.
but i will look. thanks to these posting I have at least some hope to not have to wipe my HD or buy a new.
thanks to all.

By Christine on May 13, 2009 | Reply

Thank God you guys were on here with these saves! Hopefully I have a chance to get rid of this awful thing. thanks.

By Tad on May 15, 2009 | Reply

I searched the C drive for “Sytem Security” and found two files. By following Mya’s directions I think I should delete them, but the date they were modified is over 2 years ago. The exact phrase of the files is System.Security.dll. I don’t want to delete somthing I shouldn’t but I’m not sure if this problem will happen again if I leave them. (Everything seems to have been repaired so far) Any suggestions?

By Tad on May 15, 2009 | Reply

The way I repaired my system was by following Melissa’s directions and going into safe mode to do a system restore. I only went back to a month ago. I’m not a computer guy so can somebody explain what happens now that I’ve only gone “back in time” and not actually deleted the System Security application? Thanks.

By Celeste on May 15, 2009 | Reply

this system security thing is blocking me out of everything that can basically delete it. it won’t even let me get into my task manager. does anyone know of any way i can get rid of this?? please PLEASE PLEASE!!

By Ian on May 16, 2009 | Reply

I feel for every1 who has this problem.there are so many sites that say the same removal instuctions but as many of you also say this is no help.This virus wont let me access what i need to delete it.The same f*****g message THIS APPLICATION CANNOT BE ACCESSED INFECTED i mean what am i to do i feel like breaking my pc and i am normally a nice guy.I assume you can guess i need HELP any sugestions?Thanks for reading.

By Doug on May 16, 2009 | Reply

Phyllon’s notes from Jan 3 worked just right for me. I found I had two infections of the System Security – random numbers starting with 1 and 9. I also had trouble getting Task Manager to open with the virus active – found that restarting my PC and selecting “continue unprotected” from the virus questions would unfreeze it.

By rose on May 16, 2009 | Reply

it just downloaded by itself =[ it won’t let me even open task manager or download anything.
i’ve tried countless number of times to download an anti-software program and when it is about to go through the set up it closes on me because of the security thing. what do i doo =(

By Allan on May 16, 2009 | Reply

I’ve been trying to follow all of these instructions but the problem is that my Task Manager won’t start, I can’t download any program to remove anything, and when I start-> Run something, nothing opens. Is there any way to remove this virus without going into your task manager? Or does anyone know how to make the task manager start again? It would be GREATLY appreciated .. thanks.

By Ben on May 17, 2009 | Reply

Ok, don’t know how much this will help, I think I might have got lucky. This seems to be a new variant that only came into existence within the last few days. Phyllon’s method didn’t work for me. I solved it completely differently from anything I’ve read on the net in the last few hours, so I thought I should put it out there.

Had the same problem as Allan. System security was killing any program I tried to open: notepad, msconfig, cmd, taskmgr… anything. Meant no antivirus tool could start, let alone attempt to remove it.

I had 2 copies of system security in c:\documents and settings\all users\application data\(random 8 digit no.).
For some reason I could CUT one of these to the desktop. When I restarted and before system security had restarted itself, I was able to delete everything. This relied on my computer being a slow piece of… technology.

If you can’t cut it, making a shortcut to the folder it is in might help. When you restart, hit the shortcut and delete the number folder before it can start. Once I deleted it I followed the standard advice above to remove the last remenants.

Best of luck guys… hope this helps with this new evil son of a…

By Gary on May 18, 2009 | Reply

My computer won’t let me even do any of these

By John on May 18, 2009 | Reply

Yeah, just got hit by this as well. I don’t think I clicked much on it, and realized pretty much instantly that it was a Trojan. However, I’m concerned that it could have left behind trojan executable files on my system. I mean, it was somehow able to read my drive off the web without me ever really interacting with it. WTF? I mean, if it can read stuff from my HD, it presumably can write to it as well, so, could it have created some trojans on my system? Is there any simple way to find out?

Thanks for any help,

- John

By Rei on May 18, 2009 | Reply

Thank you for your help! It was so bothersome until I found this page. I had my 12 year old niece help remove it with your instructions I cant thank you enough

By Hisham on May 18, 2009 | Reply

To get control of the task manager and other anti-virus software you need to disable System Security from running when you start windows. Javier on February 13 was correct,
turn on msconfig
in the start-up menu disable anything that looks fishy. (Uncheck the boxes) You can also try to find the system security start-up process by its location. Mine was located in C:\Windows\SecurityLayer.exe
Once I unchecked this box I was able to start windows and access the task manager and update virus software. I am now running updated virus software (AVG). I hope everything will work… what a nasty virus.

By Rhamax on May 19, 2009 | Reply

For those of you having problems with loading the task manager:

Restart your computer, when it begins to boot up hit F8 (or whatever brings you to the safe mode screen)

Once your running safe mode go to run > msconfig and hit ok, once in the config screen look for the tab “Start up” Find the box(s) with the system security numbers and check them OFF. Hit apply and restart your computer and go in normally.

This should get rid of not being able to enter your task manager/executables problem. Then follow the advice given on Feb 3rd. Hope this helps.

By Scruckus on May 19, 2009 | Reply

I have become a god in the office thanks to the helpful advice of RHAMAX and PHYLLON. thankyou thankyou!

By Eric on May 19, 2009 | Reply

Thanks for the tips all. That sucker would not let me do anything to get rid of it at first I had to give it credit for that. What I did was found where it was hiding(Documents and Settings%\All Users\Application Data003089370308937.exe\) and dragged it to my desktop. I restarted and QUICKLY deleted it from the desktop and emptied my trash. I restarted again and I was able to open my anti-virus but since I was on the offensive now I tried a system restore and IT WORKED!!!!!! no more system security crap….

By bunkbink on May 19, 2009 | Reply

XP: I was unable to get to the task manager (ctrl+alt+del), “regedit”, and “msconfig”.

My solution:
1)Go to C:\Documents and Settings\All Users\Application Data and found file folder that had 7 digit number. Opened it and deleted all files except the shield looking icon (exe).
2)Cut and pasted System Security – the shield looking icon (exe) to my desktop.
3)I restarted and QUICKLY deleted it from the desktop and emptied my trash.
4)Went to Control Panel > Add or Remove Programs> found System Security 2009 and clicked remove it…I did receive error saying it had already been deleted but clicked YES when asked to remove it from Control Panel.
5)I went to START> RUN> typed in “msconfig”, hit ok, then went to Start Up Tab. Found the seven digit file and unchecked the box to the left…REBOOT

It looks as this has worked I was only able to get rid of it using partial instructions from those listed above…Thanks to ALL!

By bunkbink on May 19, 2009 | Reply

In order to VIEW the C:\Documents and Settings\All Users\Application Data:

1)Right Click on the My computer icon> explore
2)Click on the TOOLS tab> Go to Folder Options
3)Click on the VIEW tab> under Hidden files and folders click “Hidden files and folders” – you can now VIEW the Applications Data folder….

By puddleduck on May 20, 2009 | Reply

Phyllon got me halfway there! Once I followed all the directions, I decided to do a search in regedit for the number that was assigned to me – 91936026 – guess what I found – another registry with a different number altogether but in the same folder! This one was 11926034. I found both under the following registry string:

HKEY_USERS\S-1-5-21-S-1-5-21-2606161271-3649565817-1280980002-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell

Once I found the new number, I did a c: drive search, found the folder with the new number and opened the folder. Inside, I found a file with the exact same icon (red shield with white x in the middle) and realized that it was definitely the same spyware. So, I conducted all the necessary deletes (regedit, hard drive, & recycle bin). Make sure that you do an “Edit\Find” from the menu for the number. That way, you know you get what you can.

Don’t be fooled into thinking you got it all the first time! These a**h**** are nefarious!

By puddleduck on May 20, 2009 | Reply

oh – make sure you are doing an advanced c: search that shows all hidden files!

By puddleduck on May 20, 2009 | Reply

Jay – don’t be so sure that it’s all gone! Check out my other comment today.

By puddleduck on May 20, 2009 | Reply

check out my comment on May 20th – you may have missed another file. It seems to download more than 1.

By Bigbock66 on May 20, 2009 | Reply

I had this nasty system security 2009 on my pc, that just popped up out of nowhere on 5/18. I tried several things, it wouldn’t let me open any programs, including my device manager, or any spyware, but allowed me to get on the internet. All of my Icons were missing from the lower right, except for this new one for SS 2009. What I did to fix mine was restart in safe mode (F8 several times)with networking, I then went to start,all programs,accessories,sytem tools and sytem restore. I went back to Friday 5/15, it so far,everything seems to be back to normal. I have had several local friends that have been hit with this, and I only had one out of 4 of my computers hit with this thing.

By luckyguy? on May 20, 2009 | Reply

I got hit by that nasty thing yesterday. I tried to clean it by spyware doctor but my computer still got infected. This morning, I used restore system at an earlier time my computer is back to normal. I hope my computer is cleaned now.

By Liz on May 20, 2009 | Reply

can you guys please help me out?
I’m on my guest account, the only one that works. My other two accounts are infected. It won’t let me do anything! I can’t go on the internet or do any system restores or delete any programs let alone open any.
I tried going on Safe Mode with Networking and my internet won’t work. Please Please Please help me out you guys!!!

By Amanda on May 20, 2009 | Reply

I bought a used gateway laptop without any of the disks or anything and I can’t get the automatic updates to turn on. I’ve went to my services and tried starting it and i get a message that says it can’t be started because its disabled or has no enabled devices associated with it. Can someone please tell me how to fix this.

By KA on May 20, 2009 | Reply

Thanks Melissa
Your solution did the trick for me
I hope not to get this crap again
Anyone use this solution and find more issues?

By Carlos on May 22, 2009 | Reply

Thanks so much Bigbock66. It seems to have worked!!! I was freakin’ out!!!

By Cherissa on May 22, 2009 | Reply

I have this terrible virus on my machine but it closes everything that I try to open, including task manager..I cant stop it from there, cant get it to start in safe mode, but I guess I am sort of lucky because the virus its self needs intrnet explorer to do its thing so I am able to use it as well. I have searched for the files and never find anything that has a name of “system security….”. not even in the registry…Any new ideas from anyone would be greatly appreciated..
Thank you

By Dennis on May 23, 2009 | Reply

I’ve been trying to follow all of these instructions but the problem is that my Task Manager won’t start, I can’t download any program to remove anything, and when I start-> Run something, nothing opens. Is there any way to remove this virus without going into your task manager? Or does anyone know how to make the task manager start again? It would be GREATLY appreciated .. thanks.

By charles on May 24, 2009 | Reply

wow..great fix!! i was unable to use the other solution because i could not get into my task manager. thanx for your research. you are the best!!

By Scott on May 24, 2009 | Reply

I had System Security version 4.51 and had to finally invest some $ to Mcafee to remove it..I tried all the recomendations as listed thru comments but this new version wouldnt let me access my comp as adim. and over rode Mcafee. Thank You Mcafee and GL to all that get this frickin worm..FU SS

By justin on May 25, 2009 | Reply

ok i finally got rid of system security 2009 v5.41, very tuff virus 2 get rid of but i managed… i couldnt push Ctrl+alt+delete 2 end its process cuz it disabled the task manager, the add remove programs, the insternet,turned my comp back on after i turned it off, safe mode, opened porn popups, downloaded trojans, disabled my McAfee, and system restore… I called McAfee to see what they could do any they wanted 80 dollars to speak 2 a technician even tho i pay for their protection… finnaly got the program 2 close so i could be able to use add remove programs and delete it… inorder 2 do so i push Ctrl+alt+delete+click+enter cuz window would pop up for .5 sec and i could see the top thing on list was random numbers, perfect timing is key took me alot of tries over and over but eventually got it 2 close… then i went 2 add remove programs and deleted it, then i got my McAfee running and it got rid of the 20 other trojans/viruses that system security downloaded. the virus was from the UK with just a lil search online i found common IP adress that ppl got the virus from, i really dont see why the government doesnt do shit about this, so many pll have had 2 reformat their comps cuz of this loser… i think i got it from yahoo mail when i was checking it but i never ever clicked on a link/left yahoo.com… from what i hear system security gets on your comp from a simple trojan embedded in any compromised website and when u visit it the trojan gets into your computer then remotely downloads the system security… well hope i have helped someone else get rid of this virus and i hope god doesnt have mercy for the POS that makes these thing. (death penalty would be nice…)

By Greg on May 26, 2009 | Reply

Please help!!!!! I did a system restore to before my issues and it seemed to wipe out the System Security 2009. Now my internet explorer will not stay up. Soon as I click on it it pops back down. Everything else on it is fine now though.

By Randy on May 26, 2009 | Reply

HELP! I can’t follow any of the directions for removing this thing because I can’t do anything! Justin (above) said cntl+alt+del+click+enter…what’s “click”? Like others I can’t execute anything. I can’t get to SYSTEM RESTORE, TASK MASTER, etc. I need ideas!!!

By sandra on May 27, 2009 | Reply

This one was only advice that it did work for me. Thank you Maya so much!!! I spend like 4 hours trying to do any of advices other people gave. But, yours did work for me. All the best

By Randal on May 28, 2009 | Reply

Fist of first – go to microsoft.com and download the malicious software removal tool. Run it to get rid of the Trojan installer that downloaded the piece of $%$# in the first place!

This was rather nasty. The version that popped up on the kid’s PC did not respond to service stopping (it pulled the window closed). It also, killed restore so you could not even back up to before it triggered. Going to command prompt to run system.cpl and services.msc also failed.

What worked was simple.
reboot in safe mode (F8 F8 F8 F8 F8 F8 …. choose boot in safe mode. From there run regedit from the run box.

look for HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run (suspicious program name – probably 2 or 3 of them)

in my case they WERE NOT systemsecurity2009 or as seen above, they were changed to a new numeric file name – 19588434 and 99598426. So in my case two entries needed deleting

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run 19588434
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run 99598426

The data pointed to \Documents and Settings\All Users\Application Data\19588434 and \Documents and Settings\All Users\Application Data\99598426

Look there and there was the freekin executable.

If you can’t hack the registry yourself, boot is safe mode and look for the files as suspicious under c:\Documents and Settings\All Users\Application Data\(suspicious numeric file name). Maybe you can delete it. The registry can’t run it if it isn’t there. Restart (you may get the “can’t find” error message at start-up). Then go to microsoft.com and look for their online registry cleaner. maybe it will clean up the registry for you.

Good luck.
(btw: win xp home ed. sp3)

By Randal on May 29, 2009 | Reply

UPDATE

the little bugger came back – reinstalled itself (all 3 file in HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

I found HKEY_LOCAL_MACHINE\software\19588434 defining pc1958843ins which in turn seems linked to 1958843.EXE-179B69AC.pf (a prefetch) located c:\windows\prefetch

still looking for the root Trojan.

By Randal on May 29, 2009 | Reply

The Trojan randomly generates pairs of file with numeric names and associated directories as told above. It also creates random prefetch executables as well.
It will even turn off regedit from the current user.

Where I believe I found the original Trojan writing to HKEY_LOCAL_MACHINE is in HKEY_CURRENT_USER – so look for a numeric file being run under HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run 11176509 (your file name will vary)

By Randal on May 29, 2009 | Reply

Please forgive me – the last line is in CURRENT_USER (getting tired).

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run 11176509 (your file name will vary)

By erol metin on Jun 1, 2009 | Reply

bitte sofort per telefon melden 0212 2308105 wenn nicht wird anwalt eingeschaltet habe kein intzresse an euer programm .blockirt meinen pc komplet .habe dadurch verdinst ausfall habe denn dreck nich installirt hat sich selbst eingerichtet das ist ilegal

By john on Jun 2, 2009 | Reply

i restarted my cpu and it disappeared. (the icon on the bottom and the weird alert)
could it still be on my computer?

By TheAfterPipe on Jun 3, 2009 | Reply

FOR EVERYONE WHO CANNOT ACCESS THEIR TASK MANAGER OR ANY OTHER PROGRAM TO DELETE THE FILES:

Please boot in Safe Mode by pressing F8 when your computer boots up, then follow all the instructions given so graciously by Phyllon.

Several days ago I was listening to some music when all of a sudden my background went black with a giant warning on the screen.

I was like wth? and tried to delete the process but alas System Security had already hijacked my task manager and the rest of the computer telling me I couldn’t run anything so I couldn’t follow Phyllon’s guide. It works once you reboot into safe mode because safe mode only uses the basic essential processes.

By JoGI on Jun 3, 2009 | Reply

Thank you for sharing your knowledge to get rid this very malicious ware/virus. I started mine by booting to safe mode with command prompt, access regedit & followed your third step (removing system security registry values).Thought it didn’t show the systemsecurity.exe into the RUN folder but I’ve traced it in form of a number as 19860934.exe.

By flubed on Jun 3, 2009 | Reply

Maybe virus updated, I am running Xp ran across System Security tody. Hints at top don’t work now. Apparently I no administator anymore. Will not allow Tak Mgr. due to Admin. Priv. nor Regedit. No new accounts, not sure where Adminisrator logon is now??

By flubed on Jun 3, 2009 | Reply

Spill check not working, LOOK before submit!

By KGP on Jun 3, 2009 | Reply

Here is my ‘hand is quicker then the application’ hybrid approach. First, find where the application and associated files hide (per phyllon 3 Jan 09) I found the target at C:\Documents and Settings\All Users\Applications Data\18168434. I couldn’t access Task Manager, couldn’t run regedit, couldn’t run msconfig, couldn’t safeboot, couldn’t access Add/Remove Programs, and couldn’t just delete the files in the target folder. I deleted the System Security application from the Start Menu: All Programs – I think this was key, all I remember is I deleted an icon that actually said System Security from some Window I was searching through and it no longer appeared on the Start Menu. Then I rebooted the computer and immediately upon being able to control the cursor, I opened the file C:\Documents and Settings\All Users\Applications Data\18168434 and quickly deleted the contents, then emptied the trash and went back to delete the empty folder itself and emptied the trash again. I have no more pop-ups and no apparent presence of System Security. One note, if you are lucky enough to have the shortcut on your desktop and are able to find the files, you can see when the virus was last modified, which will inform you as to the time to restore your computer if you are able to access that path. I can’t believe this has been around since Dec 2008 – my file date was 2 June.

By happygonian on Jun 3, 2009 | Reply

Thanks a million bunkbink – this allowed me to get into Task Manager, System Restore etc. when before, the virus prevented even accessing those tools. You’re a genius.

By tim w on Jun 3, 2009 | Reply

this piece of crap must have morphed into a nastier piece of crap
it killed my msconfig, internet access, task manager, and most of all of my programs…

I used the info posted By Randal on May 28

safe mode
reg edit

hopefully its gone for good

By pnorman28 on Jun 4, 2009 | Reply

<<>>>
Hey guys, In my case I had Norton AntiVirus Installed which did not protect my computer from getting this virus ironically, but did help me get rid of it. So if you have this installed on your computer it may give you an edge.
<<>>

So I wasn’t able to access anything to remove the virus. Not Control Panel, Task Manager, and RUN did nothing etiher. But I found it hiding in the C:\Documents and Settings\All Users\Applications Data\15003422 like everyone above.

What I did was Used the Quarantine feature in the Norton Antivirus on all the files in the folder because it was not allowing me to delete them to the Recycle Bin. After they were Quaratined I had no more pop-ups or fake alerts. One file couldn’t be Quarantined so I Quarantined the rest and removed them and after doing that i was able to delete to the Recycle Bin, and then empty the Bin.

Gave it a Restart and i was good to go!

Good Luck and God Bless!

By ilyasah on Jun 6, 2009 | Reply

um i cant do anything on my computer i cant go to my task manager or open up stuff nor can i do add or remove programs cus its controlling my computer

By Manson2009 on Jun 7, 2009 | Reply

I think it is about time some heads in the spyware industry roll. Sine the government will not protect us from this crap, we have to take it in our hands. Look for a few bodies in the streets near where these guys do business!!!

By bam09 on Jun 7, 2009 | Reply

hay davt how did you open task manager when i do it it doesnt come up with control alt deleate

By gingi on Jun 7, 2009 | Reply

can plz someone help me im only a little kid and i dont understand what to do plz someone help me

By ShkStr on Jun 9, 2009 | Reply

You ROCK KGP, I don’t know about the start menu, but the way I did it was to look in the same folder as far as application data, the systemsecurity file was in a folder with a different long number for a name. I then moved the entire folder to my desktop for easy access and rebooted my computer. Then I opened the folder as soon as I saw it, deleted it, emptied my recycle bin and everything was back to normal!

By sasho on Jun 10, 2009 | Reply

Here’s how I removed it without any software:

1. Enter windows trough Safe Mode
2. Go to control panel -> add/remove programs and delete the program “SystemSecurity2009″ from your computer.

3. See if there’s a folder called something like “SystemSecurity2009″ in your “program files folder”. If there is – delete it

4. On your desktop there should be a shortcut for “SystemSecurity2009″ – right click on it and choose “properties”

5. In the “Target:” field there should be a path to the executable file. See what the path is and go to the folder where the executable is. Mine was in “c:\documents and settings\all users\ application data\90981866\” Before I could see it I had to enable “show hidden files” in “Tools->Folder Options..->View->show hidden files and folders.”. So I went in “application data” and saw that there really was a folder named 90981866. I deleted it immediately. http://img44.imageshack.us/img44/5199/spyware1.jpg

6. If there are another folders in the “application data” folder wich name consists only of digits, go in that folder and see if there is an executable file. Right click on it and choose “properties” and go to the “Version” tab. You should see a list in which there is “Company”. Click on it and see what it says. If it says something like “AV System Sec.” delete this folder too ! http://img149.imageshack.us/img149/9846/spyware2.jpg

7. Repeat step 4 for all folders which names consist only of digits or any other suspicious folder.

8. go to start->run and type “regedit”
9. Delete these registry values if they are present in your registry:

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 shortcutpath
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 uninstallstring

10. Restart Windows

Hope that helps somebody

By Chezne on Jun 10, 2009 | Reply

nastier version of it is around.

Safe Mode will take care of it locking out your executables. from that point, use your malware remover of choice or manually scour. My boss freaked out when this thing changed his background and locked everything up!

By mike coates on Jun 10, 2009 | Reply

can someone please help me. this system secuirty virus will not let me do anything I cant open task manger, delete files acess internet install or run programs from cd acess system restore or format my hard drive in windows. Ive tryed starting in safe mode the safe mode screen comes up but the arrow keys on my keyboard stop working so i carnt select safe mode please help.

By dexter_the_dick on Jun 11, 2009 | Reply

yer hi i just did that excatly that i even typed it correctly and yet its still on my system damn…my real problem is i just cant get off this web page..damn i wish i knew a way out, oh well ill try again. thanks guys your a real pal.

By tammy on Jun 11, 2009 | Reply

System security showed up on our pc yesterday, i immediately restarted the computer and made sure that my security suite was on, because it had turned it off, i denied access for system sec to connect to the internet. since doing so i have had no problems except how do i remove it? i have done 2 spyware scans 1 with windows defender and 1 with the verizon security suite and neither one has noticed any spyware or virus on our pc. should i allow access to the internet and then do another scan or should i just purchace a malware remover? any help will be greatly appreciated!

By Loree on Jun 11, 2009 | Reply

What do I do if I can’t get ctrl+alt+delete to open? It shows down at the bottom of the screen that is is trying and then it is closed and nothing shows up on my screen?

By Dave on Jun 12, 2009 | Reply

i cant get the task manager to open and end the process can anyone help me pls?

By Lee on Jun 12, 2009 | Reply

i also cannot get task manager to open and all programs except internet explorerare being blocked can any one help ??

By Lee on Jun 12, 2009 | Reply

It also wont let me open CMD

By John on Jun 12, 2009 | Reply

Finally got rid of it! Thanks Rhamax to your advice, I went into safe mode as suggested, then run – msconfig. Then clicked off number sequence (ex. 1122333333) it stopped it at start up and then I was able to do system restore to a week earlier in reqular start up.

By steve on Jun 12, 2009 | Reply

Thank God for all you who posted suggestions to this site!! I was able to remove the virus by using sasho’s instructions. It was critical that I booted up in Safe mode to begin the process. So thanks agian Sasho for the help!!

By Lizzy on Jun 12, 2009 | Reply

Hey dumb fucks could u get this muthafuckin security thing off my computer. i cant do shit on it. and im getting really pissed off.

By stitch on Jun 12, 2009 | Reply

I think there’s a new version of system security out there cause none of the previous method posted earlier worked for me. There were no security system in my program file or when i searched. Checked regedit and nothing was there.

I went to task manager and ended process with number because it didnt look like it belonged. Once i did this, the system security stopped attacking my comp. I figured these were the files i needed to get rid of. I forgot what there were but it was about 6 numbers. Write these down, you will need it later. I think one started with a 1 and one started with a 9.

From here, I booted to safe mode. Now here are the steps to get rid of it:

1. open my computer and then go to tools –> folder options –> view tab –> show hidden files –> apply

2. Go to your main drive —> document and settings —> administrator —> application data

From here you should see folders with the number you wrote down earlier or ones smilar to it. you want to do delete all these folders.

3. go to start—> run –> type in reg edit

hkey-local-machine/software

there should be a folder with the number you wrote down earlier… delete the folder

if it’s not there.. check through the microsoft–>current version–>system

it should be in there somewhere, i dont remember where it was. From here just reboot and it should be gone. Hope this helps.

By Heather on Jun 12, 2009 | Reply

I finally got rid of it! The instructions about stoping it in task manager and doing the file search didn’t work.

I went to safe mode using F8 at start up, then went into the run>msconfg to disable all of the start up files. I ran my security software while in safe mode and it deleted all of the registry files, etc but it missed that hidden file.

Then, I rebooted in regular mode, went into “c:\documents and settings\all users\” and then into “Tools->Folder Options..->View->show hidden files and folders” and it then showed the “application data” folder. I selected it and then did a shift+delete to permanently delete the folder and anything in there. Rebooted the machine and everything is working fine now but I’m running a virus scan again just to be sure.

Thank you SASHO!!!! D

By Kevin on Jun 12, 2009 | Reply

system security 4.51 will not allow me to download anything or run any programs to try and eliminate it. Does anyone have suggestions on how to get rid of this. It also will not allow me to use the control panel and try to stop it.

By Gg on Jun 13, 2009 | Reply

I think there is a new version too. This is the second time i have this crappy frustrated problem. It stopped all my program. Last time I’ll be able to kill the process in task manager but not this time. What I do is:

1. go to safe mode
2. then C:\documents and setting\all users\application data (makesure turn on all the hidden files first)
3.search for the file normally all the number. Eg 15445784 or 95455776 (for me).
4. delete all the file.
5. then run search file again to make sure delete all the exe. too
6. restart to normal mode and run the antivirus.

This is what I do to remove it. so far there is no problem. I hope it wont come back again.

I hope this info will help you guys. good luck.

By John on Jun 13, 2009 | Reply

Hey Kevin: Can u please my previous email from earlier if u are having trouble?

By Ben on Jun 14, 2009 | Reply

Thank you sooooooooooooooo much Gg. I have literally been up for 30 straight hours trying to fix this and, because of you, i was finally succesful, thankyou.

By Piguy on Jun 14, 2009 | Reply

Many thanks to the community for solving this trojan. Gg your help was invaluable. Regards

By RONNNIE on Jun 14, 2009 | Reply

THANKS MATT!!!!!i GOT RID OF IT YAY!!!!! HERES HOW.
START IN SAFE MODE. (F8 WHEN STARTING COMPUTER) GO TO START (BOTTOM LEFT) PROGRAMS, MAINTENCE, HELP AND SUPPORT, AND RESTORE YOUR COMPUTER TO A EARLYER DATE!!!!! AT 3 OR MORE DAYS, DEPENDING ON HOW LONG YOUVE HAD THE DAM VIRUS. THEN RESTORE IT , IT WILL TAKE YOUR PC BACK TO THE WAY IT WAS JUST BRFORE YOU GOT THE VIRUS. AND YOU WILL KEEP ALL YOUR PICS AND DOCUMENTS EVERYTHING IS GREAT, YAY! I WAS SCARED, BUT I KILLED IT. F*CK THE SYSTEM SECURITY!!!!

By Pat on Jun 14, 2009 | Reply

how can I access task manager if this virus is not letting me run ANYTHING?

By carl on Jun 15, 2009 | Reply

The “application data” folder holds important files which are being used by some useful applications like AutoCAD. It’s not recommended to delete the entire folder. A registry cleaner or Uninstaller maneuvered in safe mode should do the trick. Treat System Restore as your last option and I think those remnants in the “Application Data” folder are harmless.

By Nea on Jun 15, 2009 | Reply

oh my computer is infested by this virus i don’t know what to do i’t worry me … Oh please help me anyone … ?? please

By Ron on Jun 15, 2009 | Reply

Boot into safe mode and then you can do what phyllon (Jan 3) says to do. To get into safe mode, reboot and press F8 several times while it is booting. Hope this helps

By JC on Jun 15, 2009 | Reply

I used SpyHunter suite and it work. I was able to remove System Security.

By logan on Jun 15, 2009 | Reply

Hey, Ive done like everything but its taken over my computer I cant open my task manager it blocks a lot of my internet pages it wont let me open links it wont let me open my main secuirty it wont let me system restore wont let me search my files for it so what do i Do should I just take it to frys or what I dont know wht else to do can someone please tell me if this is happening to them and how to fix it through the problems i have please!!! You can email me at logan.duckett@yahoo.com please hellllllpp!!

By Razzell2 on Jun 17, 2009 | Reply

There is only 1 way to stop this insidous bastard from infecting your computer, and I know this will come too late for many of you.
But please use this information the next time that pop up box shows itself on your computer.

Hit ALT, then F4.

This is the function that closes all open windows on your screen.
It will safely close the pop up window that tells you your infected, and then offers the option of clicking “yes”, “no”, or “X’ing” out the box.
ALL of these things activate this virus.

So the next time it pops up on your computer, and it will believe me..(its freaking everywhere), HIT ALT + F4.

(If you have multiple tabs open, and the box that asks if you want to close all tabs, pops up, it is safe to click yes. close all tabs.)

Continue to hit ALT F4, untill all of your windows are closed.
Clean temporary files
Run disk cleanup
Delete cookies
Run CCleaner, if you have it. (if not, you should)
Run your virus program to remove all data miners.

Shut down your computer, leave it off for 10 minutes.

You will safely be able to restart your computer.

This is the only way to keep it from activating.

I sincerely hope this helps someone. It has saved me, and my daughters computers, several times.
Of course, we lost two hard drives on two seperate computers before we found this simple blockage of the system security virus.

razz

By jhon on Jun 17, 2009 | Reply

Good Evening to all, some type of unwanted security system has attached itself to my PC. I think I clicked on it thinking it was a Norton alert. Its called “System Security Version 4.51″ it has a shield with bars as its icon. It keeps flashing pop-ups telling me there are (37) security risks that need immediate attention even after running a full system scan with Norton. It has an IP address for the uninstall but the Norton program won’t let me save it. Is there a way to uninstall this program? Please Help!!

By Garry on Jun 18, 2009 | Reply

Hi Guys
What a mongrel………..

It took lots of goes to beat it to its startup so it was bit by bit at each startup before it took control and disabled everything.

Run > msconfig > startup > disable all processes
then Apply & try to reboot

You may only get Run >msconfig on the first go. If so hit the “Windows key” + R on your next go and it will go to MSconfig automatically (thereby saving you a few more seconds this go) We had the “mongrel” pop up during this process but managed to get to where we wanted.
What you do need to see is the “You have to restart the computer before changes take effect” before you shut down to know that you got into msconfig correctly (click restart).

We were also able to quickly get into Task manager & kill “system security” process. ( for those brief seconds to get our recommended malware software installed.

It is a challenge

By John on Jun 18, 2009 | Reply

THE QUICK SOLUTION!!

This virus WILL cause the inabilty to run your anti spyware, regedit and pretty much anything that is an executable. You can’t even run task manager.

However…this virus isn’t as bad you think and has it’s loop hole…here it is…

You can’t deleted the files from c:\documents and settings\all users5643921…BUT…

The quick and easy think do is rename all the files in the 05643921 folder. I won’t allow you to deleted it, but will allow you to rename it.

Once renamed, remove your network cable or disable your wireless connection and reboot your machine.

Now…because the reg entries can’t locate the systems files, it can’t launch on start up.

This enables you to run whatever you want and also delete the systems files in the all users folder that were not able to do before.

After that, run your anti spyware tool or the automatic remover to clear the loose endsup

Last…reconnect to your network, broadband point and you’re back in action.

Hope this helps

By mike on Jun 18, 2009 | Reply

READ VISTAS USERS********

go to Start > Run > type “regedit” and click OK. HKEY_LOCAL_MACHINE > software > microsoft > windows > current version > run > (NOW LOOK FOR A SET OF NUMBERS ONLY SOMETHING LIKE “79038XXX” OR WHATEVER and RIGHT CLICK THEM AND delete just that., THE RESTART YOUR PC AND YOU GOT RID OF THAT CRAP!

MIKE

By Carlos on Jun 19, 2009 | Reply

I couldn’t access task mgr or start my computer in safe mode either. A good way around this was to press ctr alt del as soon as my desktop appeared. Then wait until the system security program appeared on the applications screen (not the processes screen) and at that exact moment I ended the program. After that I was able to follow Phyllon’s advice. Hope this helps.

By David C. on Jun 19, 2009 | Reply

Hi everyone!

I didn’t have time to read each and every post so someone may have already covered this – but DaveT and phyllon have the answers -

BUT -

If you’re like me, your computer was too slow to bring up the Task Manager while the malware is running –

SO -

Try starting up in safe mode. It’s easy to do -

When you first power up your computer, just start hitting the F8 key until you see a menu with the first selection as Safe Mode – select that and, once you get to the desktop, you can follow phyllon’s steps without a problem.

(remember to empty your trash before restarting!)

Hope this helps!

/David C.

By billy on Jun 19, 2009 | Reply

can’t be removed or
renamed …;-(

By Joe on Jun 19, 2009 | Reply

Gene,

You are an idiot. Obviously you have never had System Security 4.51 thats why you are telling people to stop whining. People come here to ask for help not to hear your smart ass comments.

Joe

By jon on Jun 20, 2009 | Reply

THANK YOU SOOO MUCH!!

By josh on Jun 21, 2009 | Reply

what the hell is this system security fuckry about man im tired of the same old bullshit sheild keeps poping up and telling me my computers is infected wit some shit please help cause if i catch da motherfucker who created this hes gonna be in a world of hurt

By Billy on Jun 21, 2009 | Reply

did all of these …
none helped …
what did was in safe mode
( f8 ) highlight and click
on Restore This Machine To a Time
When It Worked …or something
like that ….then use ccleaner
and wish 4 the best

good luck

By Keith on Jun 22, 2009 | Reply

Hey Ronnie Thanks! Even a dummy like me could fix it! Sorry bastards that did this don’t out number the good people here! Just push F-8 save mode and recover before you got the damn thing!!!!!!!!!!

Keith

By mike on Jun 22, 2009 | Reply

i cant get 2 task manager the security says its infected so i cant even go on it

By Jim on Jun 23, 2009 | Reply

C:\Documents and settings\All Users\Application
Data12752344\12752344.exe

This is the file I had to find and delete to finally be rid of this pest. Thanks for all the suggestions.

By Steve on Jun 23, 2009 | Reply

Hi

I just removed this from a freinds computer. So
1. Restart the computer and press F8 to get into safe mode. this may take a while so be patient.
2. Once in safe mode go to start, then “run” and type in msconfig.
3. Click the startup tab.
4. Look at all the things that start up aumtomatically on your computer.
5. Un check all thoses that you dont need to start.
6 Typically most of this “piece of shit work” are in capitals but if you dont know what to uncheck write them down and put them on this post.

By chris on Jun 23, 2009 | Reply

Hello all. I too did not read every post here, but going into safe mode is the first step and then following advise listed here is good. I have Trend Micro and I called them up and they remotely removed it for a fee of $65.00. Maybe too much $$ for some but for me well worth my time! Good Luck!

By Robert on Jun 23, 2009 | Reply

I got ‘r gone fast. I put the computer in safe mode with comand entry option. I entered %systemroot%\system32\restore\rstrui.exe (I found this code on Microsoft web site) and did a system restore. It was very slow but it worked – virus is GONE>

By Bob Lai on Jun 23, 2009 | Reply

This SOB sux…I want to kill the creator of it.

By sha on Jun 24, 2009 | Reply

hi my friends computer has this virus too. have tried to remove using avast and system restore plus pc doctor in safe mode all of it..it says its gone but when we try to go back into ordinary mode which is not a problem. then try to connect to the net..it won’t connect. looking at her internet connections it says its firewalled any help please..she has also lost all her photos.

By Robert Steiner on Jun 24, 2009 | Reply

Where do I buy a software CD that will remove System Security 4.51 from my computer???

By Jose on Jun 25, 2009 | Reply

check the information provided by Phyllon here at the top of the page on January 03.

By Tracey on Jun 25, 2009 | Reply

I am too trying to remove this System Security virus. I have attempted many of the ways everyone has suggested to no avail. I am currently trying to remove items in the start up tab in safe mode, per Steve’s post on June 23. I am not sure what to remove. I have a few listed in all caps (ARPWRMSG, RTHDCPL, ALCMTR) also numbers (14064684 and 94074676) Any way to figure out which one may be the one I need to remove? Help thanks

By shiela on Jun 26, 2009 | Reply

can anyone help me?
i can’t open my task manager because it’s ‘infected’ or blocked or whatever by this annoying virus ..
someone please help me figure this out,

By shiela on Jun 26, 2009 | Reply

okay, nevermind ..
i finally did it.
thanks to steve on jun23
it worked!!
weew ..that’s a relief

By Nathaniel on Jun 26, 2009 | Reply

My CTRL + ALT + DEL is being blocked, I believe my F8 button has been shut off as I cannot get into Safe Mode, and msconfig is blocked. This virus is more annoying than I almost care to deal with at this point. Apart from doing a system restore, are there any options available to me?

By Jose on Jun 26, 2009 | Reply

If you are able to get rid of the virus, please others know and give credit to the person(s) who helped you. Thus, future visitors will be able to succesfully remove the virus in their computers.

You are welcome

By Jose on Jun 26, 2009 | Reply

Sometimes the virus takes over almost inmediately an does not let you use alt+ctl+dlt to get to the taskmanager.
Do this:
sign into your computer and as soon as the desktop opens:
go to Start,run and in the run window type:taskmgr then press ok. YOU HAVE TO DO IT FAST. MOVE FASTER THAN THE VIRUS.
It took me about 7 tries , but I was able to stop System Security 2009 process from working in my computer.
Then follow the instructions given by Phyllon on Jan.,03,or Steve on June 23.
If I was able to do it, you can do it too.
Jose

By Jose on Jun 26, 2009 | Reply

John,

could you please explain how can one do these steps that you mentioned ON THE QUICK SOLUTION!!

“You can’t deleted the files from c:\documents and settings\all users5643921…BUT…
The quick and easy think do is rename all the files in the 05643921 folder. I won’t allow you to deleted it, but will allow you to rename it.

By Tracey on Jun 26, 2009 | Reply

To John and Steve (June 23 posts)
Thanks for your info I have successfully removed the system security virus.

By Mike on Jun 27, 2009 | Reply

Thank you to everyone for the tips, especially Steve’s post on 6/23. I was able to get into safe mode, open task manager, run “msconfig”, and disable many strange looking executable files from auto-starting (Per Steve’s instructions). I didn’t know what 90% of the files meant so I Googled each from a different computer and it was easy to identify the bad ones. These 3 were the big culprits:

sysgaurd.exe
fmnupd32.exe
zqosys32.exe

Even after I disabled the last two they would still find a way to start up so I deleted them from the root file (In start menu).

Thank you again to everyone for all the help – I didn’t even know where to start.

By Robert Steiner on Jun 27, 2009 | Reply

I followed Jose’s instructions June 26. Start, run , type in taskmgr and click ok repeatedly 15 to 25 times. Each time nothing happened. I then restarted computer and a screen shot came up briefly saying to continue or terminate. I clicked continue and System Security 4.51 was gone. It happened that fast and am back to normal

By Guy on Jun 30, 2009 | Reply

Thank you for your post on 5/17/09! We got this virus and your solution was the only thing that worked. Thanks for taking the time to document this for all to take advantage of!

By Craig Newfield on Jul 1, 2009 | Reply

This thing SUCKS. It won’t let me run any programs, or intall new anti-malware, or goto “Add/Remove Programs”, Control/Alt/Del is disabled. etc. etc. BUT, while Windows has just started (just as the icons started to appear on the desktop) I hit Control/Alt/Del, and went to Processes, sorted by name and stopped the process that is named by random numbers. I didn’t see any process named sysguard as indicated above. But the virus did not start up and I was able to install malware and I hope that killed it.

By ATweed on Jul 1, 2009 | Reply

I had this thing for a few days and like many of you, it would hardly let me open anything. However, whenever i restarted the computer I had approximately a 60 second window of opportunity to try and run something, but it would shut down malaware or any other anti-virus program before it could fully function. However, the method that worked for me was to do a system restore of the computer to before I received the virus. The way you do this in case you dont know is: click on start and all programs, go up to accessories, then down to system tools. After that find system restore and try to run it back to a date before you got the virus. I didn’t do it fast enough the first time, but the second time it worked and restored my computer’s settings to a previous date. After that, run any antivirus software you have just to be sure. Hope that may work for someone.

By sigve on Jul 1, 2009 | Reply

THANKS A LOT !! i had to restore it 2 days back, lost some rare mp3 and flac files, but it was either that or NOTHING, hehe, even ctrl-alt-delete didnt work… couldnt do shit

By Mina on Jul 2, 2009 | Reply

Help- just got this on the computer, and it has totally locked me out of mouse and keyboard control, even in safe mode- is there anyway to get rid of this purely from Dos? I can’t run any form of windows, as I have absolutley no control- keyboard and mouse will not work. HELP!

By Rusty on Jul 2, 2009 | Reply

There is another way to get rid of it . If it already block your ctrl+ alt + del, and won’t even allow you to install another antispy sysrm.

First right click the security system 2009 on desktop, find out what the real name of the progame , mine was 17234312.exe and then . restart your computer
doing ctrl Alt del before the Security system is loaded. You got to do it fast rite when your computer is still loading other stuff . and hurry go to Processes tap in window Task Manager. and end process for your 172xxxxx.exe
Then delete the folder containing 172323.exe mine was under RUN . THen remember to empty to trash can. and restart

By Frederick on Jul 3, 2009 | Reply

Ohh piss on this crap I just had installed xp home on this eee too. took me some time to get the setup disk for windows sent to me from the house. And As soon as I connect to the internet this crap. O hell with it I am putting eeebuntu back on my eee. I cant even get this program off so I am doing the easy thing FREE-O.S.+very few viruses= LINUX

By Bill on Jul 3, 2009 | Reply

ALL – easiest way to do this!

Go to your C:\Documents and Settings\All Users\Application Data folder and find the subfolder labeled with an 8 digit number. Then just change the folder name. When you restart your computer, the virus is still there but it can’t find the file to boot up.

Then run any cleaner.

By kalum on Jul 5, 2009 | Reply

thanks phyllon i could remove crasy system scurity . i just go to safe mode and run “regedit” and fallow your method .i hate this system scurity.i wasted my time

By Pete on Jul 6, 2009 | Reply

search won’t run

regedit won’t run

sys restore won’t run

can’t find file in docs or anywhere else

By daniel on Jul 6, 2009 | Reply

some how it doesn’t wanna go
i have windows xp

when i try to open a folder it just cuts it out is this happend to anybody else

helppppp pleasee

By lina on Jul 6, 2009 | Reply

fucking fuck
i hate this
so frustrating

anyway if you can’t open anything make sure you go on safe mode
press f8 when you start up your computer

By Allen on Jul 6, 2009 | Reply

On july 2nd, Rusty had a good idea. For the people just getting the virus now, you’ll notice that it has changed. You cant really use any of the tips listed a couple months ago since you cant go online, use regedit, the task manager, or system restore. You can however use Rusty’s advice, which although kinda sounded funny at first, worked for me.

By Des on Jul 6, 2009 | Reply

ok well I deleted files before looking for the proper way to do it. Big mistake. On top of that now my mouse and keyboard will not work either. Someone else mentioned that as well. So now I really don’t know what to do. if anyone has any suggestions that would be greatly appreciated.

By neil on Jul 7, 2009 | Reply

What Bill said (on July 3rd) is accurate – find the file and rename it. I renamed it Fuck You Virus cause it made me feel better. Then run any anti-spyware program and you’re good to go.

By Goodman on Jul 7, 2009 | Reply

I was traying to remove and i there shows a don’t send i clicked don’t sen and this fucccckkk system security 09 4,52 gone… i have a question it is disappear for a while? sry for my english mistakes….

By lynna on Jul 7, 2009 | Reply

For those of you who are experiencing the annoying pop-up stage (which is before you’ve downloaded the fraud program *System Security 2009* and before you’ve given any of your credit card information), You are a step before these instructions (theses instructions are for those who’ve already loaded and purchased the fraud program.

If you’re at the beginning stage of this virus, you must follow these steps (its fairly easy).

1. You must be on safe mode to do this (restart computer and just when you hear your computer starting again, press on the F8 key constantly to get to the black screen…don’t press on it too much…you will know when you’ve pressed on it too much when you hear a loud beeping noice after pressing the F8 key…use arrow key to go to safe mode with networking)…there will be pop-up window asking you about system restore (click on ok and not *no for restore*…you don’t want to restore because virus will still be on your computer…you must remove it manually…so once you’ve clicked on *ok*, you should return to the desktop)

2. go to control panel and go to *add or remove programs*…remove program System Security

3. Then go back to recycle bin and restore

4. go to desktop and right click the system restore icon and go to properties

5. click on find target

6. from this point on you need to delete all the files associated with this *system security* program…anything linked to it DELETE…mkae sure that if you see folder icons that you go into them and delete anything in it…you must not just delete the folders alone because the programs in those folders will still be on your computer and reinstall itself all over again…I can’t tell you the file names and numbers associated with this program like this site has because the developers of this virus changes the file names for each victims every so often…thats why you can’t find them on your computer…most likely if you’re in the beginning stage, you won’t have much to delete

7. make sure you go through all the steps on this site provided to you *which is located above all the comments* just to be safe and to make sure this fraud virus don’t load itself all over again when you go back to normal mode (you probably won’t find much of it listed because you are at the beginning stage *meaning you haven’t loaded the full program*…but just do it just in case…remember each victim could be different from others depending on thei situation)

8. after attempting to remove everything, empty recycle bin *VERY IMPORTANT*

9. restart computer on normal mode using F8 again

10. Remove all cookies and history and bookmark files on internet (whichever internet you’ve used when you got the virus..*mozilla/internet explorer etc.) by going under tools and settings

10. check all registries and delete listed files *which are all listed above in the steps under REGISTRY*

from then on, you should be ok…I’m ok…you just got to use common sense on this stuff…there’s no real updated instruction on how tto remove viruses…viruses are getting advanced and they change their procedures often…these procedures on how to remove this virus was probably backdated…that would explain why anyone can’t find the files…or simply because they are only in the beginning stages of the virus…These instructions are more helpful for those who’ve already purchased the viral device and paiid for it…if you paid for it…you probably can get your money back by talking to your credit card company or bank…well good luck!

By Mark on Jul 7, 2009 | Reply

melissa’s solution from 2/20/09 worked for me. THANK YOU melissa!!

By Ellie on Jul 8, 2009 | Reply

I have this stinking thing on my computer. I was able to temporarily stop the pop ups by emptying all history, cookies etc in all browsers. The sucker was there when I started in SAFE MODE so I’m going to pass Melissa’s instructions on to my husband’s geek team who will hopefully take care of it.

I am writing to suggest that anyone who has paid these SOB’s via credit card find out who they are from the credit card company and publish the information online. They need to be stopped. Anyone have a practical idea?

By Pry on Jul 8, 2009 | Reply

I cant get rid of this, I’ve remove many spyware from my pc, this one is bad. I cant open any programs, I cant even open task manager they close right away, only way I got on the net is through the spyware bringing up a webpage… I dont know what to do…

By kenny on Jul 8, 2009 | Reply

does anyone know how to remove the system secruity if you do please tell me cause its bothering me please help !!!!!!

By Dee on Jul 9, 2009 | Reply

Thank you melissa,your information was a God Send!

By Chuvy on Jul 9, 2009 | Reply

Hi guys…

None of this works for me… this dumb system security wont even allow me to open the task manager… it says its infected. PLEASE HELPPPPP!!!!!!!!!!!!!!

By Brooski on Jul 9, 2009 | Reply

Thank you Phyllon – your method worked for me – and I’ve been trying anti virus/spyware for days – even PCtools couldn’t deal with it. The only other thing I did was search in the regedit for the notorious numbered exe file – and found it in several locations and deleted.

By Mike on Jul 9, 2009 | Reply

Hey guys, I JUST GOT RID OF THIS S.O.B.!!! SCROLL UP TO KOHHAL, he/she had the best advice. but basically all you need to do is:

– Hit Ctrl+Alt+Delete
– Find the “PROCESSES” tab
– DELETE the process that is a scramble of numbers (mine was 1936447547.exe) That wasn’t exactly it, but that’s what it looks like. END PROCESS!!!
– Go to “START”, then “RUN”
– Type in “REGEDIT”
– Then find “HKEY_LOCAL_MACHINE”
– FOLLOW to “software\ microsoft\ windows\ currentversion \run”
– You will then see the same number you saw in “PROCESSES”

This should delete the files completely. Make sure to go to your RECYCLE BIN and empty the contents.

Hope this helps gang!!! Good Luck!!!

By Mike on Jul 9, 2009 | Reply

Just to follow up…After you find the file in HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run…

BE SURE TO DELETE THE FILE!!!!!!

By Ida on Jul 9, 2009 | Reply

you can go to system restore.
and restore ur computer to an earlier date
worked like a charm

start menu= acessories=system tools=system recovery.

By Richard Gawne on Jul 10, 2009 | Reply

This is what I did..

I started Windows in Safe Mode. I used MSCONFIG, switched to the STARTUP TAB and disabled the programs you do not reconize from the startup (it will probably be a “number.exe”). You should be able to see the file location. Write down the location for reference later.

When you reboot your computer, the virus will not load anymore if you disabled the correct exe files.

I restarted my computer and then used a removal tool to delete the files or manually delete them using your written location reference.

Good luck.

By Hunu on Jul 11, 2009 | Reply

I ran into this virus/trojan today. What I did and it worked for me

- Right click on the system security icon
- Find its target folder. The folder may look like a random number.
- Inside the folder, you will see another system security icon and some other files.
- Attempt to delete will not work.
- But you can rename them. I rename them to xxxx, xxx, xx, x…and so on
- There may be other folders with different random numbers. Look under them and if they show system security icon, rename it.
- Reboot your computer
- The system security icon on desk top now loses its graphic and revert to the default windows exe type icon
- now you can remove the system security icon in desktop along with the folder(s) you had renamed the files described above.
- make sure you clean the waste folder
- Reboot the computer again.

All that did the trick for me. I can’t guarantee that it wil work for you. Seems like mileages do vary for different people here.

Good Luck.

By dawn on Jul 11, 2009 | Reply

dont know if this will help but re this system security 2009 ….i found i kept getting music and voices coming through pc but nothing running and still had trouble typing in anythng……tracked it in processes to a file called IEXPLORER.EXE searched for it deleted it and pc running fine now

By d-_-b on Jul 11, 2009 | Reply

this virus infected everything on my pc including my CA security suite. it happened in less than an hour so if you have this problem and don’t fix it fast, good luck

By Justin on Jul 12, 2009 | Reply

all the 3 ways of getting rid of system security won’t work for me because it says the files i need are infected, please activate system security. help?

By ags on Jul 12, 2009 | Reply

restore works!

By Bazooka on Jul 12, 2009 | Reply

Do exactly what Cat said I just found a folder with a number mine was not the same number as his but you will see it there is only one folder in there with that number once you click on the folder you should see the icon for this System Security garbage.
Thanks Cat I am in safe mode now and going to reboot.

By Dave on Jul 12, 2009 | Reply

I too have the System Security 2009 virus. Nothing listed above worked for me. I can still access task manager but cannot locate any of the filenames listed – including any random numeric file names. I cannot boot up Safe Mode – the screen just freezes. No Windows search of hidden and system files reveals any .exe files with the names listed above nor with numeric names.

By Sagnar on Jul 13, 2009 | Reply

Thanks to this site. I was to stop this “system security” via msconfig.
NOW, Firefox keeps me redirecting to survey sites. I am UNABLE to run any Spybot and see 3-4 IEXPLORE.exe
any ideas to fix it? IT support wants to reinstall OS but i want to check if there is a way to fix.

PLEASE help – THANKS!

By elmer dodson on Jul 13, 2009 | Reply

Follow up on my earlier post- the bug ‘returned’-still, stopping it in taskmanager is the big step to getting some control back. You then need to check documents, msconfig, add/remove programs to further remove that ‘odd’ number.There appears to be a dll that needs ‘unregerstered” This box had a reg clean utility that I was loathe to risk scanning with but under an option-it listed the ‘odd’ number in the registry so I deleted that specific item (no scan-yet).It may take a few reboots and removal ‘in layers’ with repeat virus scans to beat this and of course- don’t let it go online till you are pretty sure you’ve got it all.

By Helper on Jul 13, 2009 | Reply

What I did was I turned on computer, then quickly right clicked desktop shortcut of it, pressed properties, find target, then moved the files to my desktop and deleted.

By frances on Jul 13, 2009 | Reply

I just got this nasty little virus, but I was able to get rid of it fairly quickley (less than five hours). This is what I did:

1. Restart your computer, and before the System Security can boot up open task manager and STOP the PROCESS. So just press Ctrl+Alt+Delete, click on Processes at the top, and end the process with a number in it (ie, 102475…) Remember, this all has to be done in about five seconds, give or take a few seconds. It took me a couple of tries before I finally was able to stop the “scan” from starting.

2. Delete everything System Security related. So, go to Start > Search > Search for “System Security” and remember to search hidden files > anything that pops up, delete.

3. Get rid of the registering keys by going to Start > Run > Search “regedit” > Press Ctrl+F and search for “systemsecurity”. Make SURE what you are deleting are things listed above ^^^^

4. THIS IS IMPORTANT! System Security usually comes with Trojan, and if I’m not mistaken, that’s how it gets to your computer in the first place. So if you don’t get rid of the Trojan, System Security will just pop up again. This happened to be at first too. So, what I did was follow the instructions here and let it do the rest. It got rid of anything I missed safely. I was required to restart my computer – you may or may not have to.

5. I highly recommend scanning your computer after you’ve done all of the above. This assures that you didn’t miss anything. My scan revealed that I still had the desktop image (a bmp file). I’m not sure if this can still bring back the virus, but I deleted it anyway.

** Remember to DELETE anything that goes in the Recycling Bin, or the virus will just come back when you turn your computer back on.

Hope this helps.

By frustrated peter on Jul 13, 2009 | Reply

this virus locked me out of the computer, I had to use my Mac in order to pull up a browser.

By SL on Jul 14, 2009 | Reply

damn i’m so fucking nervous about this shitty program !!! X_X I HOPE THAT MOTHERFUCKER WHO CREATED THIS BULLSHIT WILL FUCKING BURN! FUCKING FAG!

By nick on Jul 14, 2009 | Reply

This virus is killing me, gets worse every time I try to fix it. Now it is blocking me out of task manager and registry edit. Any suggestions around this???

By SL on Jul 14, 2009 | Reply

@nick: disconnet it from the internet and restart PC , after that , delete all that is show above. I did exactly that and it is back … well not to normal , it moves really fucking slow , that’s why i will reinstall windows

By Joseph morin on Jul 14, 2009 | Reply

please let me free from this system security
I don’t now how i got in it but it is doing me harm becouse i don’t now how to delete it and it is screwing up my work.THANK YOU VERY MUCH.

By Greg on Jul 15, 2009 | Reply

My PC got infected about a week ago. There must be different, or newer versions of this, because pretty much anything I do does not work. Can’t get into safe mode, can’t install any kind of programs or tools including the
DDS Tool (so no log), can’t end processes, can’t go into add/delete programs, can’t go into system restore to turn it off, can’t open Task Manager, I go to “Run” and type “msconfig”, and the configuration utility does NOT open.
I’ve tried some versions of Hiren’s and Ultimate Boot CDs, but nothing I can figure out seems to help. I’ve looked at YouTube videos on removing System Security, but on the videos they CAN boot into safe mode, go into Task Manager, go to System Configuration, etc. where as I CAN’T.
Is there anything else I can do? Any advise would be appreciated. I am OK with PCs, but very, very, very basic.
Please talk to me in the simplest terms.

By John on Jul 15, 2009 | Reply

Man I can’t find any of those files in search, and i cannot open task manager, regedit or anything. ALL, and i mean ALLL i can do is open search!!! please help!

By John on Jul 15, 2009 | Reply

and i have no icon so i cant figure out its true name

By Kassandra on Jul 15, 2009 | Reply

Thank you SO MUCH MELISSA!!! I TRIED EVERY OTHER WAY AND NOTHING OPENED FOR ME! ITS WORKING!

By Steve on Jul 16, 2009 | Reply

Instead of paying the funsters, victims should all put a few bucks in a kitty for hiring hitmen to take out the garbage. Could be quite a deterrent.

By Urd on Jul 17, 2009 | Reply

Fuck yeah man! Im still tryen to get this shit of my computer! what the hell is this shit i mean it doesnt do anything but get in the way!

By remove it my computer on Jul 17, 2009 | Reply

I could not stop SystemSecurity.exe in task manager. What’s the chance of losing all my doucments & settings?

By Doug on Jul 18, 2009 | Reply

I have an older PC (XP) that got this pain in the ass program. In a matter of hours it had everything locked up. I couldn’t open anything.
This is how I got rid of it. I used Frances’ step of restarting my computer and getting the Task Manager open as it boots up. If you get Task Manager open, Click on the the Processes Tab and quickly find an “exe” program that’s all numbers…. ie 50147287.exe …stop this file form running immediately…. Once I stopped it from running I was able to completed a system restore. Start/All Programs/Accessories/System Tools/System Restore. Complete the restore back to a point time before your machine became infected. I determined this by right clicking on the System Security icon and I found a date and time that the progam was modified/installed. With that I set my restore date for just before that date and time. You will lose anything that has been saved since that point in time, but if you’re like me, I couldn’t do anything on my machine since that f*^@#ing program got on there anyway.
Once you get your machine back, go to your Start button and complete a Search for System Security. It did find two folders, no programs though. I deleted these two programs and then emptied the Rcycle Bin.
Hopefully this works for you

By Elmer Dodson on Jul 18, 2009 | Reply

I lied,I decided to clarify what I have found. Since I’m ‘laid-off’- I had some time to tinker with this.”System security’ is pretty nasty- I’d advise a re-install. I’ve got my friend’s XP running again- but ‘quirks’ remain. If your ‘browser’ starts on the last page you viewed (instead of home)- you broke the hi-jacker but now need a browser re-install to fix it. Updating to IE8 fixed IE.
I see someone says they found the ’system security’ bmp image-(it replaces the desktop wallpaper).This ‘repaired’ XP’s ‘wallpaper’ selection appears to have every image thats on the HD.I doubt that’s ‘default’- the pointers were changed- and since I DID find a file hidden in the ’system32′ folder (NOT VIEWABLE IN WINDOWS)by using DOS -it almost makes sense. I think the ‘yihaguta.exe’ I deleted through DOS,both created/hid exe. dlls (ctfmon as a typical starter) along with writing an ‘autorun’ and image under the ‘recycler’,which would explain the moved wallpaper pointers. DO NOT DELETE the , thats likely the directory for the folder.
This would be the easy way to ‘break’ this, if CMD still works. A space is needed between the attribute switches or you’ll get an ‘invalid switch’. If you want better instructions say so in a post that you want to try it and I’ll post back.DOS is not hard, but it is powerful and irreversible.

By Elmer Dodson on Jul 18, 2009 | Reply

I read my post and see that the DO NOT DELETE lost it’s item-DIR because I placed it in the brackets like it was- and HTML didn’t like that.
DO NOT DELETE the (DIR).

By Kurt on Jul 18, 2009 | Reply

I had the same problem, every time I started my computer that crap started runing by itself I tried every single thing that is posted on the net. but I couldn’t run anything, so I found out that the simple way to deal with it is, restart your computer on safe mode and then run your antivirus, that worked for me, hope it does for everyone else.

By svenny on Jul 18, 2009 | Reply

okay go to C:\documents and settings\all users\application data. From there you should be able to spot a file with a random number. open it and you’ll find the system security tiger stripe shield and another file. right click on each and rename them something like 444 and 555 then rename the file they were in with something like 666. Restart your computer then go back to these files right click them and delete them then empty your recycle bin. Done and dusted…..

By Chris on Jul 19, 2009 | Reply

I have this exact problem, I can’t open my task manager or any .exe files, how did you get rid of this?

By James on Jul 19, 2009 | Reply

ok i seriously need help, i cant open task manager or regedit to clean this stuff off my computer, how do i go about it?

By faheem on Jul 19, 2009 | Reply

Hey can some1 help me please. This virus is so annoying when I turn the computer and try to do the end task thing but the security system thing is annoying and pops up and starts scanning then when I press ctrl-alt-delete the task manager wibt open the virus blocks it I see the task manager then it goes away I also tried alt-shift-esc but still can’t get it. Now about a day later when I try to turn the computer on sometimes it freezes and the screen goes blue and says physical memory dumping for help restart computer go to advanced options and safe mode. Then I just turned it on and like 2 or 3 new antiviruses r downloaded now can some1 please please help me. If u can contact me my aol aim is pakidbest01 and my email is pakiking01@msn.com please help me and tell what 2 do thank yiou very much.

By Denny on Jul 20, 2009 | Reply

phyllon’s advice is spot on. The only difference is that I removed the file while in safe mode.

Thanks a million phyllon!

By Cashjo on Jul 20, 2009 | Reply

Hi guys email me and I will email you how to rid yourself of this shitty programme, all I ask is that you re input my email address when you give thanks for the removal. This way everyone will get rid of it. I have also put it on face book.

Steve

By Steve on Jul 20, 2009 | Reply

Thank you so much Doug!!!!

I used your advice and everything on my computer seems OK – I am so relieved…..

Steve

By ft28jags on Jul 20, 2009 | Reply

6. Final piece to the puzzle was a program called “UnHackMe 5.0″. Google it again. This has a strange interface, but was the only program to find the root trojan. On the first scan, it found “winhelper.dll”, which I removed after a little google research. I rebooted and it scanned again, this time finding the root trojan. It is a new trojan, discovered only recently. I did not write down the name, sorry. You will not miss it, it is labeled as a dangerous trojan.

Once I rebooted following the second scan, I HAD INTERNET BACK!

Now, I was able to download the latest updates from the other malware, and scan again.

During this process, I repeatedly ran CCLEANER to clean the registry and other files.

One other reminder, when you find the original System Security file, write down the number string, so you can double check later to make sure it is gone!

Let me know if this works for you.

By Phyllis on Jul 20, 2009 | Reply

I tried following the instructions but I just can’t get into anything?????

By will on Jul 20, 2009 | Reply

that fucking program is a virus dont go to a computer store to get rid of it just go to CTRL+ALT+DLT. my comes up 930833453.exe dont try this unless you know what your doing.

By will on Jul 20, 2009 | Reply

whoever created this program should fucing burn in hell

By TCHHHH on Jul 21, 2009 | Reply

There is a new problem after you rebooted the computer when system security is installed you wont be able to have access to anything such as:
Task manager
CMD
And all software
So any of those instructions you read above will not work at all.
System security has fuck my computer up and ATM i dont know how to get rid of it instead of formatting.

By skorpion on Jul 22, 2009 | Reply

ALL – easiest way to do this!

Go to your C:\Documents and Settings\All Users\Application Data folder and find the subfolder labeled with an 8 digit number. Then just change the folder name. When you restart your computer, the virus is still there but it can’t find the file to boot up.

Then run any cleaner or any other antivirusprogramm who makes the rest of sheet away greetings skorpion

Greetings Stefan

By ed on Jul 22, 2009 | Reply

do as svenny above says in safe mode and it gone

By John on Jul 22, 2009 | Reply

Ok, just when I didnt think things could get worse, this is the blue screen I get when trying to boot in safe mode

“A problem has been detected and windows has shut down to prevent damage.

If this is the first time you’ve seen this stop error screen restart your computer. If this screen appears again, follow these steps:

Check for viruses on your computer. Remove any newly installed hard drives or hard drive controllers. Check your hard drive to make sure it is properly configured and terminated. Run CHKDSK /F to check for hard drive corruption, and then restart your computer.

Technical information:

***STOP: 0×0000007B (0xF7B2C528, 0xC0000034, 0×00000000, 0×00000000) ”

Now what do I do? I can’t get ANYTHING to work. I was even going to reformat, but my disc doesnt run. I really need some help please!!

Mr_Party21@yahoo.com

Thank you

By laguardia on Jul 22, 2009 | Reply

I just wanted to say thank you from the bottom of my heart your instructions worked perfectly. Once again thank you thank you thank you. smooches

By RachelB on Jul 23, 2009 | Reply

Okay I had this virus…and it sucks!
I tried everything…but nothing worked because it disabled everything. The only thing that worked was Restarting my computer in safe mode (press F8 while starting up) and restoring my computer to a later date. It’s like it never even came! I’m so happy that it’s gone, and I love being able to use my computer again!

By Angie Carns on Jul 23, 2009 | Reply

I had the same problem as RachelB. I got around it by going into Safe Mode. So, to get into safe mode:
1. Reboot the computer and watch carefully.
2. When the manufacture’s screen comes up hold down the F8 key (top row of keys on the keyboard) until the computer starts beeping.
3. Release the F8 key and wait for a screen that gives you SAFE MODE as a boot choice.
4. If SAFE MODE isn’t highlighted use your up and down arrow keys to highlight it, then press your Enter key.
5. You will then get a screen with your Windows Version(s). Choose if necessary and press your Enter key.
6. A dialog box will prompt you. Choose YES to continue in Safe Mode.
7. You will get a strange looking screen, but SAFE MODE doesn’t run the System Security files and you will be able to follow the steps Phyllon gave.

GOOD LUCK ALL!!!

By mon on Jul 24, 2009 | Reply

hey poeple, im fuming about this stupid system security shit. Just cant get rid of it, can even open my task manager, i read almost everyone’s add and by the look phyllons advice was the most helpful, but i deleted the shortcut from my desktop. Can anyone help what to do now?? PLEAAAASE SOMEONE.

By John on Jul 24, 2009 | Reply

I seemed to be able to remove System Security 2009 by starting in Safe Mode and using Ad-Aware and my CA virus scan. But when I restarted the computer the screen goes to black right after the Windows XP intro screen and everything stops. It won’t start up in Safe Mode anymore either. The screen lists a bunch of files and then stops. Any ideas?

By OLEGF on Jul 24, 2009 | Reply

Thank you, Hunu. Briliant, simple solution that cleaned my machine from System Security.

Here is what Hunu recommended:

“By Hunu on Jul 11, 2009 | Reply

I ran into this virus/trojan today. What I did and it worked for me

- Right click on the system security icon
- Find its target folder. The folder may look like a random number.
- Inside the folder, you will see another system security icon and some other files.
- Attempt to delete will not work.
- But you can rename them. I rename them to xxxx, xxx, xx, x…and so on
- There may be other folders with different random numbers. Look under them and if they show system security icon, rename it.
- Reboot your computer
- The system security icon on desk top now loses its graphic and revert to the default windows exe type icon
- now you can remove the system security icon in desktop along with the folder(s) you had renamed the files described above.
- make sure you clean the waste folder
- Reboot the computer again.

All that did the trick for me. I can’t guarantee that it wil work for you. Seems like mileages do vary for different people here.

Good Luck.”

By Rona on Jul 25, 2009 | Reply

I have maanged to delete from search a few files and now system security 4.25 is romoved from my desktop start up but it is still on my backround screen when i search for it, it says its been recycled but its still warning me about virus?? any ideas?

By phil on Jul 25, 2009 | Reply

Help…I accidently downloaded this, thinking it was from Microsoft IE. So, here I am, not computer savvy and seeing this rogue software taking over my system…I’m starting to panic! What do you folks recommend that’s simple? Should I try to save what I can of my files and reinstall the operating system? Or will my Micro Trend PCillin come to the rescue? Is there something I can buy to fix this? How to find a trustworthy pro?

By phil on Jul 25, 2009 | Reply

Mike, OF 7/7/09, was a big help. His solution solved my problem and may of saved me about X days of hassles. I want to buy him a drink! THANK YOU.

By john on Jul 25, 2009 | Reply

Ok so i read everyone’s (pretty much) posts, I have managed to get rid of this annoying little program on a client’s computer after a whole day of mucking around,
It seems to shut down many programs just as they start when in “normal” mode. this includes
regedit, Task manager, various anti-spyware and anti-malware removers. the only way to do this is through SAFE MODE.

and so now i will give a full set of instructions for rebooting in SAFE MODE and then removing system security 2009 (VER. 4.52) on NT systems (2000, XP, and it should work on Vista as well)

1. REBOOT IN SAFE MODE.
(Hold or repetedly tap F8 During bootup/reboot BEFORE windows shows up (right after the quick wite stuff that shows up so fast you cant read it).. if it asks you what the computer should use to load files choose the default highlighted choice and start holding (or tapping) F8 again.

2. once windows boots up Go to Start > Control Panel > Add/Remove programs and uninstall System Security if you can find it… dont worry if you cant uninstall it..

3. Go to Start > Search in “My Computer” for “system security”… delete anything you find.

4. go to Start >run and type “regedit” and hit ok. then go to the following “folder”:
My Computer > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and look for a reference to an EXE file with a name made up of random numbers (mine was 14896874.exe)… write that number down and then delete that entry.
then click back at the top on “My Computer” and search for (CTRL+F or Edit > Find) that string of numbers (14896874) and delete what you find then continue search
(Find >Next or hit F3)
and delete the next one.. keep doing this until the whole registry is searched and all of that number is deleted. do this also with “system security” and “system.security” stuff you find.

5. Search in your computer (run> find files or folders) for that same set of numbers and delete anything you find.

6. delete the System Security shortcut on your dekstop if it’s still there.

7. reboot.

Jump for joy and let out a whoop!…. i find the classic gretzky “YESSS!!!!”, or the E-vil laughter MOOOUUUAHAHAHAHAHA works well for me.

i don’t think i forgot anything. Hopefully that should help you guys out.
have fun and dont drink and hard drive!

By Ben on Jul 26, 2009 | Reply

The only thing that worked for me, is to rename the virus. Restart, then delete the virus. Make sure to delete from recycle bin. Restart again. That took it off my computer. I got the virus on 7/20, and all the suggestions before didn’t work. This virus gets updated frequently I think.

By juwin3 on Jul 27, 2009 | Reply

Hey I had this pain in the ass virus too, but by following the instructions of Phyllon,Rhamax,Melissa,Razzell and Steve its now gone. I read their instructions moving my way down this Blog and finally beat that dam virus. I want to thank you all for your help. I didn’t think I could do it but after many hours of persistance and understanding my computer better the beast was destroyed. You guys that are helping others with this instruction are good souls. Don’t get discouraged people. Think of it as a puzzle and try all their different advice. You will not go wrong. Peace

By Thelxiepeia on Jul 27, 2009 | Reply

Just run regedit, and delete its registry values. Once you have done this, you will be able to close it in process list. After it’s closed, you will be able to delete the files.

Add my msn if you still dont get it.

By noel on Jul 28, 2009 | Reply

thnaks to all contributers. managed to get my neighbours pc disinfected (after reading this forum) by booting in safe mode and renaming the numbered .exe in the numbered folder within the APPLICATION DATA folder (all numbers seem to be random) you’ll know if you have the correct one because of the icon. after renaming start in normal mode and full control should be restored. remove the renamed file and its folder and remove the registry entry. clear the recycle bin and do a virus scan hopefully it will come up clean.
I know it won’t help but I always find myself wisihing all sorts of evils on virus compilers

By alex on Jul 28, 2009 | Reply

I stopped the process in taskmanager and started looking for all the files and registry values but i could only find shortcuts and a folder named systemsecurity that was empty. Is this because i had stopped the process and it cleaned out most of the temporary files?

By Faroo on Aug 2, 2009 | Reply

I thank “john” for this. He gave me the steps that I was actually able to do without the virus getting in the way. Thank you so much. You’re a life saver to me.

By kristen on Aug 4, 2009 | Reply

ok i cannot restore bc mine does not have a restore to an earlier time option and the file has itself blocked where i cannot simply delete it. have tried to download other helps but they require money and whenever i do download something the virus blocks me from using it. cant get task manager up and i cannot delete manually cause the virus says i do not have permission to delete it. please help. my computer is a dell with windows vista 2006 i beleive so please help me!!

By gag0818 on Aug 4, 2009 | Reply

f*** them mother F******** thay mess up my pc i kill them

By jim on Aug 4, 2009 | Reply

rhamax where are you finding the run in save mode
I go to safe mode,I see start and click it but after that there’s no run to type anything. Im not too good at computer, so can you go back over this again very slow for us dummys like me
thanks.

By ryan on Aug 5, 2009 | Reply

My computer wont even go into safe mode i tried to press f8 and hold it but i cant get the safe mode screen up, any suggestions?

By ryan on Aug 5, 2009 | Reply

Scratch that! I GOT RID OF IT!!!his is how I got rid of it. I used Frances’ step of restarting my computer and getting the Task Manager open as it boots up. If you get Task Manager open, Click on the the Processes Tab and quickly find an “exe” program that’s all numbers…. ie 50147287.exe …stop this file form running immediately…. Once I stopped it from running I was able to completed a system restore. Start/All Programs/Accessories/System Tools/System Restore. Complete the restore back to a point time before your machine became infected. I determined this by right clicking on the System Security icon and I found a date and time that the progam was modified/installed. With that I set my restore date for just before that date and time. You will lose anything that has been saved since that point in time, but if you’re like me, I couldn’t do anything on my machine since that f*^@#ing program got on there anyway.
Once you get your machine back, go to your Start button and complete a Search for System Security. It did find two folders, no programs though. I deleted these two programs and then emptied the Rcycle Bin.
Hopefully this works for you

By aliyah on Aug 6, 2009 | Reply

ok I did a search for everything under system security and I get a list of lies and folders. none of them are numbers though. i’ve already stopped the process, did a system restore and ran norton anitvirus so…are those files even associated with this stupid virus?

By aliyah on Aug 6, 2009 | Reply

oh the files also says they were created back in feb so is it likely they’re not related?

By Mikey on Aug 8, 2009 | Reply

I am assisting my friend with removing the virus from XP Pro. It disabled everything accept IE, including taskmgr.exe…
The easiest way to take care of the problem is to Reinstall the OS, or use a Factory Restore Disk.
If you are using the guide printed above, it is easiest to carry out the process in safe mode {Press F8 at the brand’s splash screen} you Will not have to kill the processes. you will be able to just start searching and deleting the files…
DO NOT START BY DELETING THE REGISTRY ENTRIES, UNLESS YOU ARE AN ADVANCE USER!!!

By techochino on Aug 10, 2009 | Reply

just go to the rightmost top option of the security centre …..i dont remember it clearly ,it was subscribe or something starting with S alphabet.scroll it down it gives the way to uninstall it.however if that doesnt work a link is given below that method of uninstalling.surf to that link and run the remover programme that appears automatically on your screen and CHEERS ,your security centre has been successfully removed.

By bean on Aug 10, 2009 | Reply

my pc keeps restarting ever since i removed system security going nuts pleasee help

By jdm1750 on Aug 12, 2009 | Reply

Still trying to get this stupid thing off my computer. Managed to degrade it so I at least don’t get the fake virus alerts and can open taskmanager, but it still has disabled my antivirus software and slowed the machine to the point of being useless. Pulled all the icons and executable folders into my recylce bin and tried to delete them, but it has the recycle bin locked up now so I can’t open it. This happens in safe mode as well. Any commands to clear the recycle bin lock up the machine. I’m convinced these guys are reading this blog and updating to defeat any techniques people come up with to remove it.

By Dana on Aug 16, 2009 | Reply

I am trying to remove this System Security 2009 program and there are so many instructions out there and none of them work. I can’t access the internet, or start in a safe mode. Can someone please send me simple instructions for how to remove this from my PC. I have above average computer knowledge but I am confused by all the different answers to this. I need my PC to look for jobs as I am un-employed and I can’t pay someone to fix it.

By DiscreetControl on Aug 21, 2009 | Reply

for a co-workers comp
windows media center edition

i too was unable to get any program to start, takmgr, msconfig, regedit, i couldnt even get command prompt… i tried a couple of times to go into safe mode… it would error at mup.sys i think and restart… it just wasnt happening… luckily i restarted and it kinda locked up, i continually press ctrl alt delete and eventually the taskmanager came up. the virus was not running… idk how… i do have avg running so… anyway…(now that i think about it, the wireless switch was off position, i turned to the on state and then that happened… hope that helps) i remembered seeing total security in the programs folder on the start menu… i was able to get a command prompt up… heres how… if you can get to the task manager as i did by pure luck i think… click file at the top then hold ctrl down and click new task(run) you will get a command prompt… now type at the command prompt: type C:\”Documents and Settings”\YOURUSERNAMEGOESHERE\”Start Menu”\Programs\”Total Security”\”Total Security 2009.lnk”

that should give you some code and a directory to where the executible is launching from. mine was in: C:\Documents and Settings\All Users\Application Data\19225934\

now type at the command prompt: rmdir “the directory you found in the code from the step above” /S /Q

that will remove the directory and the executable, i then typed at the command prompt: regedit and searched(edit Find) for Total as in Total Security i found one listing and right click on the folder and hit delete… it also brought me straight to SystemSecurity2009 Folder(why im here as they continually seem to be changing the name), i right clicked that guy and hit delete as it referenced the all users directory too to the horrible executable.

unknown critcal step(probably a good idea though)
then at the command prompt type: del c:\”Documents and settings”\”YOURUSERNAMEGOESHERE”\Start Meny\Programs\”TotalSecurity”

then type: c:\Windows\pchealth\helpctr\binaries\msconfig.exe
go to the startup tab i found 19225934 and unchecked it.
also found metefovu and unchecked that
and kupageli and 18675934

i will later search the registry and my directory for these filename above and try and remove if found in the same manner as we did with 19225934.exe i would suggest you do the same.

of course after i uncheck those above megefovu and kupageli were back as another instance… i wasnt getting the warning background nore the popups but the task tray is still locked… and it still restarted if i tried to boot into safe mode…

i then opened the command prompt as before and did a system restore to the earliest time possible…

PROBLEM SOVLED!!!

and them did all the system updates/antivirus updates that everyone seems to fail to do… duh…

By DiscreetControl on Aug 21, 2009 | Reply

guess it would help as to how i accessed the system restore from the command prompt…

type: cd c:\windows\system32\restore\ press enter

then type: rstrui.exe press enter…

voila…

By Dillon on Aug 22, 2009 | Reply

After hours of work, my friend and I found a simple way to disable and remove System Security 2009. Our “strain” of the virus would not let us open Task Manager, Regedit, or Msconfig, which pretty much eliminates most instructions on the web, as they say “just go into Task Manager and end the process.”

That’s great, but what if you can’t open Task Manager. While you can in Safe Mode, the System Security isn’t running, of course, and we couldn’t track down the files.

Here’s what you do:
1) Get into Safe Mode (reboot and tap F8 until boot instructions come up, choose Safe Mode).
2) Click Start > Run > type “msconfig” > hit enter.
3) Choose the “Startup” tab
4) Disable (uncheck) all non-Windows Programs. 5) You can read up about this, but most are okay to uncheck. There’s sometimes an option to not display Windows necessary tasks, leaving the rest for unchecking. There should be a few suspicious looking ones with random letters or numbers (Especially ones that have HKEY in the beginning of their root path). If unsure, uncheck them all except for ones that look like legit Windows programs
6) This SHOULD stop System Security 2009 from running when you reboot to your regular user.

Phase 2:
1) Hit Start > Run > type “regedit” > ctrl-F to search > type “systemsecurity2009″ or “systemsecurity”
2) You should come up with a list of infected Registry Keys. Note where the FILES are kept, not the Keys (to the right of the column “command”
3) Navigate to these folders in Windows Explorer and delete the all important .exe files.
4) Continue to eradicate the files as you find them. Some will be random names/numbers.

Hope this helps someone!

By razzell2 on Sep 23, 2009 | Reply

Here is how to make the pop up go away, without clicking on “no, or yes, or x’ing out the box”, all of which activate this nasty thing.
Very simply, when the security systems warning box appears on your screen, quickly use the keyboard command to close all open windows.

This commmand is ALT + F4

If you do this quick enough, it will close out the first pop up window…the one that “warns you of a virus infection”.
If you continue to hit ALT/F4, (even if that window that looks like its scanning your computer pops up) your windows will begin to close, one by one.
If you have several tabs open, and you hit ALT/F4, and the box that says “do you want to close all tabs?” pops up, you must use your mouse to click on YES, and that series of tabs, and window will close.

Sometimes the yellow security bar will pop up, (depending on what webpage you happen to be on when this thing pops up on you) and again, you will have to use your mouse to close out the warning box, and then the yellow bar, and then use ALT/F4 to close that window.

AS LONG AS YOU DO NOT CLICK ON ANY PART OF THE SECURITY SYSTEMS POP UP WINDOW..NO, YES, OR X IN THE UPPER RIGHT HAND CORNER, WHILE YOU ARE CLOSING OUT YOUR WINDOWS, YOU WILL BE ABLE TO MAKE IT GO AWAY.

Use your common sense when any obstacles keep the windows from closing, as I described above, when you use your mouse to close all tabs, or close the yellow warning bar, etc.

Now, I want you to know, that I am unsure if we are infected with something that makes this Security Systems warning box pop up on us, or if it is just an attempt to infect us, while we are surfing the net, or are on certain websites.
In my case, this thing pops up about once a month, and it doesnt seem to matter what website I am on, or where I am surfing too.

My computer runs fine, it is very fast, all programs and functions on my computer work correctly and with speed, so I am inclined to think that I am not infected with this thing….only that it tries to get in from different locations on the web.

Using this method of closing out the window with alt/f4 keeps me from catching this nasty, funky thing.

That was not the case with a previous XP computer I had. I was on a webpage, the warning box popped up, It looked so much like a windows warning that I clicked on Yes, to run the scan, and I was infected. I even bought the offered software that claims to remove it, but of course, it does not, and not only did they get me for the 30 bucks, or whatever it was, for the fakie removal tool, that computer in a matter of days had all of the windows commands deleted, all the exe files snuffed out, and eventually wouldnt even turn on, and finally fried out.

It was then that I researched and found this little maneuever to close it out before it infects.

AND LET ME SAY THIS. NOTHING, AND I MEAN NO PROGRAM OUT THERE, AS OF YET, WILL PROTECT OR REMOVE THIS THING AFTER YOU ACTIVATED IT.
I DONT CARE IF YOU DOWNLOAD MALWARE, OR SPYWARE, OR NORTON, OR A HUNDRED OF THESE RECCOMENDED PROGRAMS THAT CLAIM, OR THEIR USERS CLAIM WILL REMOVE IT.
THEY DO NOT.

Norton, (I use norton) for a fee, will scan your system, locate the exe files for the security systems virus, and remove it. (The say..I have not had to use their services thank god, to remove it)

So, all I wanted to say here was, you have TO PREVENT IT.
And the only way to do that, is what I have described above.

I know that this does not help you good people who are already infected, and who are crying out for help. I was one of you, and I wish I could help you.
All I can do is tell you how to prevent it the next time the first, warning, “you have a virus” window pops up.

Razz