How to remove Total Security 2009 rogue anti-spyware

Malware Description:
Total Security 2009 (aka Total Security 4.52 or Total Security version 4.52) is an updated version of the hazardous Total Security and System Security rogue anti-spywares. In addition, Total Security 2009 appears to have common origin with one of the nastiest current fake anti-spywares known as Alpha Antivirus. Not deviating from its forerunners, Total Security 2009 implements its dirty tactics by injecting Trojans into a potential host system without the victim’s awareness and authorization. When Total Security 2009 affiliate trojan viruses are on board, they display misleading alerts and trigger fake security scanners performed by Total Security 2009 unregistered version. Those misleading and fabricated system scanners inform (rather – misinform) the user about numerous infections residing on the PC being challenged. These methods are applied by Total Security 2009 trialware to scare the user into installing Total Security 2009 full commercial version which is declared to be a helpful tool to prevent the malware from spreading. If you get tricked by Total Security 2009 and end up purchasing and installing the rogueware, you will make a double mistake: you waste your money and you get your system contaminated further. Do not fall victim of this cyber-fraud, remove Total Security 2009 nasty malware if it shows up on your computer. Once done with Total Security 2009 removal, check your computer for all attendant infections it may have promoted into your system.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Total Security 2009 Free Scanner and Remover: Download Now

Total Security 2009 Fake Scan Screenshot:

Total Security 2009 Fake Scan

How to remove Total Security 2009 and affiliated threats manually:
Manual removal of Total Security 2009 is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

  • %Program Files%\TSC
  • %Program Files%\TSC\tsc.exe
  • %Program Files%\TSC\Sc2C21UvvM.exe
  • %WINDOWS%\system32\winsource.dll
  • %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\TSC.lnk
  • %UserProfile%\Desktop\TSC.lnk
  • %UserProfile%\Start Menu\TSC
  • %UserProfile%\Start Menu\TSC\Help.lnk
  • %UserProfile%\Start Menu\TSC\Registration.lnk
  • %UserProfile%\Start Menu\TSC\TSC.lnk
  • %Program Files%\Common Files\System\Uninstall
  • %Program Files%\Common Files\System\Uninstall\Uninstall TSC.lnk

The registry entries that need to be removed are as follows:

  • HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE
  • HKEY_CLASSES_ROOT\CLSID\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “1FD92E3F7C34799BFB075C41DA05D1FE”
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″

Please, be aware that manual removal of Total Security 2009 is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Total Security 2009, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Download Total Security 2009 Automatic Remover

Like This Article? Let Others Know!

Reader's Comments:

  1. admin |

    Dear users,
    There have been multiple cases of Total Security 2009 blocking any attempt to exterminate it. The rogue can disable Task Manager, prevent .exe files from opening and running (so you can’t use antivirus programs), block Safe Mode. Therefore, we’d like to provide two fairly simple ways to bypass some of these trickeries of Total Security 2009.

    Method 1 (applicable if you CAN enter Safe Mode which can be accessed by repeatedly hitting F8 button when your PC is starting up):
    Step 1. Enter Safe Mode
    Step 2. Go to Start – Run – then type “msconfig”
    Step 3. In the window that opens, choose “Startup” bookmark, find a numbered process (our lab PC had it under the number 10567034), then uncheck this process
    Step 4. Restart your computer – Total Security should be temporarily down. Download our remover, install and launch it. The rogueware should vanish.

    Method 2 (use it if you CANNOT access Safe Mode)
    Step 1. Open My Computer – Go to “C” drive.
    Step 2. Open “Windows” folder
    Step 3. In “Windows”, Locate and open up System32 folder
    Step 4. Find a file named “taskmgr” – RENAME it “iexplore”
    Step 5. Double-click the renamed file – it will bring up the Task Manager.
    Step 6. Among Task Manager processes, locate Total Security 2009 process – it’s usually a numbered executable like 65489463.exe. CLICK on that process and close it. It will disable Total Security 2009 for a while
    Step 7. While Total Security 2009 is temporarily down, install our automatic remover (push one of the links in the post above). Let the removal tool detect and remove Total Security 2009 pest.

    It should work!
    Anyway, we will be looking forward to your feedback concerning this.
    Regards,
    RM Team

  2. Orthio |

    Although the method above is obviously better, I luckily turned it off using AltF4 . Either way, if you’re on here, follow the Admin’s advice!

    Good Luck

    PS. Thanks for the remover. Seems to have worked.

  3. Johnny |

    At last a good idea!

    The renaming of taskmgr worked perfectly. I was pretty annoyed, not only by this Total Security crap, but also by all the ideas that implied executing any file without being into safe mode.

    Now I’m running the anti spyware prog. Thanks a lot for the idea.

    By the way, all the registry keys and pretended filenames that figure on all pages about TSC removing didn’t worked for me. I guess the thing mutates its names and so.

    Thanks a lot, you saved my day!

  4. SweetBlue |

    I just wanna say thank you so much to Orthio. I did follow ur suggestion, and it indeed worked out!!!! :))))))))) thank you :)

  5. Olivia |

    Just wanted to say thanks very much, especially for the advice about renaming task manager which enabled me to stop the program temporarily.

    I also found the same problem as Johnny with that i could not find any of the file names listed.

    I seem to have control back now, and Spyware Doctor is doing its thing.
    Thanks so much!

  6. Albert Garcia |

    Thanks for your great work.

    I did what you recommended and It worked.

    no more Total Security rogue.

    thanks again

  7. Andrew |

    My computer wouldnt let me rename the taskmanager exe so i right clicked and ran as administrator, i stopped the program and am now running anti spyware scan thanks guys

  8. Me |

    thanks!!!!!!! thanks admin…….

  9. Highly grateful |

    Thank u sooooo much those total security pop ups were drivin me insane

  10. Amanda |

    Thank you Admin for your detailed instructions. They have helped tremendously!

  11. Craig |

    Thank you for this, although the manual steps didn’t work for me, the idea of changing the task manager executable to iexplore.exe was genius, was able to knock it down, and use the removal tool to clean it out. When i restarted it had probably 50 some pop up boxes saying bad image file, but once I clicked ok on them all and restarted, she’s as good as new!

  12. Justin |

    Wow..that helped, thanks much!
    renaming taskmgr to iexplore helped.

  13. Nel |

    yeah thanks, I am downloading the remover now…I am soo nervous, Ithought I am going to lose my pc now, well at least I made the crap down now.. thanks
    God Bless

  14. Humberto |

    Great help, many thanks!

    Used the Alt-F4 to close the malware and then had to install the remover. Running it now, seems to have removed it. Will check manually for some of the registry entries mentioned above.

    Thanks again.

  15. stevenmyers |

    i could have lost a years work because of this pos crap program isn’t this malicious intent let alone invasion?

    to install itself without permission to say the least?

    they’re lucky i don’t burn them down where they stand… or take out a complaint on the company.. that’s blackmail… i could just fix up a lawyer or two and whine about my livelihood and how the makers of total security just almost bankrupted my company.

    how would they like that little ensemble in court for a few years?

    hum, i believe i’ll think about this.

  16. tutti |

    thanks people im not to computer friendly but i managed to piss tsc off,with your help and some dumb luck.ps for good i hope.

  17. Ani&Latha |

    Thanks u so much..

  18. Chris |

    admin/RM team.

    I did what you suggested. It seems to work. But I must ask. Should I change the “iexplore” back to it’s original “taskmgr”?

    Thnaks muchh for the help.

  19. admin |

    Chris,
    If you actually completed the rest of the removal procedure instructions and Total Security does not pop up any longer, you can get that file value back to what it was.
    Regads,
    admin

  20. bob |

    Admin team: Help!

    I got to the step that says open the renamed file, but keep getting the message ” Task <amager has been disabled by your administrator.”

    What can i do?

    Thanks

  21. deanna |

    I also have the total secuirty.. i have tried EVERYTHING! i can not rename system 32, nor can i pull up task manager.. please help!? any suggestions please?

  22. hope |

    what if it wont allow u to change it to ieplore?? then wht? i got this S.O.B friday and its screwin up my computer! help!!

  23. admin |

    Bob, Deanna & Hope,
    This message means you are logged in as a User and are not alowed to edit some system parameters without admin rights.
    What you need to do is log in as ADMINISTRATOR (it’s essential!). Under admin rights, you should be able to succeed in following our tips.
    Give it a shot!
    admin

  24. Jim |

    Spyware Doctor successfully removed Total Security from my wife’s laptop, yesterday. It is a Dell running Vista. I was able to “End Process” for tsc.exe from the Task Manager prior to downloading and running Spyware Doctor. I had spent the morning working with Trend Micro support and was not successful in getting it removed. Trend Micro’s PC-cillin did not locate Total Security and they were having me manually try different things.

  25. WILSON |

    thanks a lot!! I was able to remove this spyware from my dell computer using the safe mode actions.

  26. satheesh |

    hi,
    my machine has been affected by total security. i tried to follow the steps as mentioned but some of the folders are blocked. i use vista OS. the folders blocked are
    %UserProfile%\Start Menu
    %UserProfile%\Desktop

  27. Bud |

    The BEST SOLUTION:When you boot your pc, immediatley press ctrl+alt+del and access the task manager. Click processes then scroll down to a process which will be a load of random numbers like this 135635864.exe it will also show some CPU activity next to it. click on this then click end process (you have to complete this in about 10 seconds to stop it closing your task manager but if it does just reboot and do it again ) Now after you ended the process all your programs will work so you can run your spyware and remove the thing.

  28. GBA404 |

    Dear Author remove-malware.net !
    Many thanks for the help in this question, now I will not commit such error.

Post a Comment: