How to remove Total Security 2009
Monday, August 17th, 2009 at 5:26 amHome » Rogue Antispyware » Total Security 2009
Total Security 2009 description
Total Security 2009 a.k.a. Total Security 4.52 is both a scam and a dangerous computer infection. It’s a new “version” of Total Security rogue antispyware. Besides pushing people to buy full version of malware, TotalSecurity 2009 also corrupts Windows operating system.
Once TotalSecurity2009 infects a computer, it acts like typical rogue anti-spyware application. It may hijack web browser and interrupt browsing the internet. It imitates system scan and displays falsified security alerts. All the messages loaded by Total Security2009 are dedicated to trick users into purchasing the program. Avoid this trap: Total Security 2009 won’t function as antispyware even if you pay for it.
TotalSecurity 2009 is extremely dangerous for a computer. It starts randomly deleting files approximately 20 hours after the infection. This may leave the system corrupted or non-functional pretty quickly. Remove Total Security 2009 as soon as possible.
Get rid of Total Security 2009
Total Security 2009 is a Rogue Antispyware software
How to manually remove Total Security 2009
To remove Total Security 2009 spyware you must block Total Security 2009 sites, stop and remove processes, unregister DLL files, search and delete all other Total Security 2009 files and registry utility. Follow the Total Security 2009 detection and removal instructions below.
The most typical software removal method is to remove Total Security 2009 by using "Add or Remove Programs" service. However there may be hidden Total Security 2009 files, running processes and registries in your computer, so Total Security 2009 may recreate all other files after reboot.
Total Security 2009 manual removal instructions
Block Total Security 2009 sites:
explorersecuritysuite.com
Read more how to block Total Security 2009 sites
Stop and remove Total Security 2009 processes:
10530004.exe
18384534.exe
tsc.exe
Sc2C21UvvM.exe
Read more how to kill Total Security 2009 processes
Locate and delete Total Security 2009 registry entries:
HKEY_CURRENT_USER\Software\Total Security 2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Total Security 2009
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\10530004
HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE
HKEY_CLASSES_ROOT\CLSID\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "1FD92E3F7C34799BFB075C41DA05D1FE"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1?
Read more how to delete Total Security 2009 registry entries
Download RegistryBooster 2010 to scan errors caused by Total Security 2009
Search and unregister Total Security 2009 DLL libraries:
winsource.dll
Read more how to unregister Total Security 2009 DLL files
Detect and delete other Total Security 2009 files:
%UserProfile%\Start Menu\Programs\Total Security
C:\Documents and Settings\All Users\Application Data\10530004
%UserProfile%\Start Menu\Programs\Total Security\Total Security 2009.lnk
C:\Documents and Settings\All Users\Application Data\10530004\10530004
C:\Documents and Settings\All Users\Application Data\10530004\10530004.exe
C:\Documents and Settings\All Users\Application Data\10530004\pc10530004ins
%UserProfile%\Desktop\Total Security 2009.lnk
18384534.exe
%Program Files%\TSC
%Program Files%\TSC\tsc.exe
%Program Files%\TSC\Sc2C21UvvM.exe
%WINDOWS%\system32\winsource.dll
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\TSC.lnk
%UserProfile%\Desktop\TSC.lnk
%UserProfile%\Start Menu\TSC
%UserProfile%\Start Menu\TSC\Help.lnk
%UserProfile%\Start Menu\TSC\Registration.lnk
%UserProfile%\Start Menu\TSC\TSC.lnk
%Program Files%\Common Files\System\Uninstall
%Program Files%\Common Files\System\Uninstall\Uninstall TSC.lnk
We strongly recommend you to use spyware remover to track Total Security 2009 and automaticaly remove Total Security 2009 processes, registries and files as well as other spyware threats.
Total Security 2009
Trackbacks
- Remove Total Security, TotalSecurity removal tutorial
- Remove Total Security 4.52, TotalSecurity 4.52 removal help
August 19th, 2009 at 7:05 am
There must be several versions of this thing around.
After painstaking work I found the exe file on my friends computer to be “12056094.exe” I bet there are actually thousands of versions that can be installed to different systems if you think about the permutations of something like this.
IN other words: The help given here may not work for you and you may need to browse around on your machine looking for the proper exe file and its associated files.
Ps.
Safe Mode or you wont get anywhere, restart your computer and mash down the F8 button to bring up the options for booting into Safe Mode.
Hopes this helps.
Reply
Storytellar Reply:
August 19th, 2009 at 7:08 am
I also just found a bunch of Regestry entry hiding under “Search Assistant” whatever that is.
Reply
allen Reply:
September 26th, 2009 at 9:40 am
Absolutely nothing listed here worked for me but this did …
go to — c:\documents and settings\All users\application data
look for folder with random numbers
go into it.
you’ll see an .exe file with the virus logo on it.
you won’t be able to delete it. Buuut you will be able to change the .exe to .txt.
when you done that, restart your computer with the internet cable out of your pc and voila you are able to remove it in peace,…
Reply
jd Reply:
October 4th, 2009 at 3:07 pm
awesomw allengodlike toooooogud way to delete it man….i mean it ws such a headache i ws thinkin of bkin up data ,reinstallin my windows ,installin 100s of progg u saved frm all man…sexy way..wrkd fr me shld wrk fr most ppl….thnx..n as u said VOILA!!!!…..:P
Reply
August 20th, 2009 at 3:43 am
I’m trying to help my dad get rid of this virus and its not doing a thing! – we’ve tried working in safe mode and blocking the files – everything thats been suggested and its just not working at all…somebody please help me!!!
Reply
Luciana Reply:
August 20th, 2009 at 4:01 am
Have you tried running anti-spyware scan?
Reply
August 20th, 2009 at 4:45 am
yea have tried all that we have nod anti-spyware which we were told is really good but no matter what it keeps popping up!grrr!
Reply
jeff Reply:
August 20th, 2009 at 7:33 am
Someone posted on another site a fix and it worked for me.
turn on your computer. Right when the icons pop up on your desktop hit ctrl alt del to open task manager. go to processes and look for a bunch of numbers .exe (Example 287643.exe) Right click and end process. It seemed to work for me.
Reply
jack Reply:
August 23rd, 2009 at 2:14 am
thanks so much this was so easy, i hate wheniget viruses
Reply
chan Reply:
August 23rd, 2009 at 3:21 am
my tskmger i currently bblocked…what shall i do…??
Reply
C Reply:
August 28th, 2009 at 3:16 pm
TY, I only have a feeling it will be back after restarting
Reply
August 20th, 2009 at 12:30 pm
Help! My computer froze overnight, and on rebooting, this “Total Security” thing started. IT PREVENTS ANY PROGRAM FROM BEING RUN, EXCEPT FOR EXPLORER.EXE (including Search) AND IE!! NONE of the above ideas work! I had AVG 8.5 installed, and it did NOTHING to stop it from infecting! I CANNOT run even regedit.exe, tio remove those registry entries.
Reply
scott Reply:
September 18th, 2009 at 11:34 am
i have the same issue…the new Total Security blocks any program besides IE and Explore to start. I’m still stuck and it’s nasty!
Reply
Luciana Reply:
September 20th, 2009 at 10:50 pm
Security tools are not necessary for deleting Total Security 2009. Use the removal guide to delete this infection manually.
Reply
August 21st, 2009 at 2:21 am
Why wil not stop my virusscanner en adware-scanner this spam Total Security?
Reply
August 21st, 2009 at 3:21 am
Try this, it worked for me:
Step 1: Open up “My Computer” and Open up the “C” drive
Step 2: Open up the folder “Windows”
Step 3: Open up the folder “System 32″
Step 4: Scroll down to the file all the way on the bottom named “taskmgr”, simply right click and rename this file “iexplore” and bam, open this baby up by double clicking it and your task manager will open up, and find the process that total security is running, its usually a number like 34854385.exe or something like that, just click that number and close it.
After that I’ve run Hijackthis and deleted it there, and just to be sure ran also Malwarebytes’ antimalware which found nothing.
Im running windows xp so im not sure if this works on vista, make sure you delete that “iexplore” file you create, the “taskmgr” file should be automatically created again in the system32 folder but just doulbe check to make sure.
Reply
ideeaperson Reply:
August 23rd, 2009 at 5:31 pm
I tried all of this but total security is still there. CRAP
Reply
mayoc Reply:
August 31st, 2009 at 8:22 pm
Enigm@’s trick appeared to be right. I have finally get rid of that damn Total Security. In summary, removing of this rotten virus has to be from the system32 folder. Thank you very much Engim@!
Reply
derya Reply:
September 1st, 2009 at 4:13 pm
thank you thank you thank you enigm@… u’r wounderful
Reply
Chris Reply:
September 17th, 2009 at 11:13 pm
wow…epic win!
Thanks!
Reply
sophii Reply:
September 20th, 2009 at 10:23 am
THANK YOU THANK YOU THANK YOU!!!!!!!!! it works. for me, i couldn’t find the system folder 32 file thing, but what i did was i went to Search for the taskmgr.exe and in the Search app i changed the file name to open it. the virus wouldn’t let me do the Run app, so try this i guess if you have the same problem.
Reply
Kevin Reply:
September 23rd, 2009 at 8:57 am
This does not work on my version of Total Security. After renaming the file and trying to run the TaskMgr, a pop-up states the Task Manager has been disabled by your administrator.
Reply
fabiola Reply:
September 25th, 2009 at 6:54 am
Enigm@,
you are great, I managed to get rid of that HORRIBLE malware
thanks a lot
Reply
yoon Reply:
September 25th, 2009 at 8:11 pm
omg thank you so much.
this saved my life and my computer (:
Reply
Jen Reply:
September 29th, 2009 at 6:47 am
Thank you so much! you are so brilliant! you saved my computer..
Reply
Horn Reply:
September 30th, 2009 at 7:56 am
Gotta say thanks. I found so many solutions to this problem but nothing would obviously work if the Total Security thing wouldn’t let you open anything (programs, registry, cmd, taskmgr). This was the trick to shut down the initial process to get rid of this thing. Thanks again.
Reply
August 22nd, 2009 at 7:27 am
I have this troublesome virus on my laptop. When I try to run in safe mode it will not allow me to log in. Hopefully I will be able to remove it using Hijackthis.
Reply
August 22nd, 2009 at 9:10 am
Hey
I downloaded the hijackthis thing but now I do not know what to do to delete this stupid, annoying program. Please help!
Reply
August 22nd, 2009 at 7:52 pm
I have Total Security 2009 version 4.52! i tried to find winsourse.dll and the other files in safe mode and i cant find them. i cleaned the register with pctools registery mechanic and it the virus still opens in normal mode. How can i end its prosessor because i cant open any exe files exept explorer?
Reply
August 23rd, 2009 at 5:17 am
thank you Enigm@, that was the only way i managed to remove total security!!! i couldnt run any spyware that i downloaded or run any online virus scans!!!
thanks again!
Reply
August 23rd, 2009 at 1:13 pm
i bought a anti virus and tryed to set it up but for some reason it will not start. Total security is in my computer but i stopped the process. is it possible that total security is stopping my anti virus from working?
Reply
August 25th, 2009 at 8:10 pm
Enigma’s process worked- see my additional notes:
Step 1: Open up “My Computer” and Open up the “C” drive
Step 2: Open up the folder “Windows”
Step 3: Open up the folder “System 32″
Step 4: Scroll down to the file all the way on the bottom named “taskmgr”, simply right click and rename this file “iexplore” {{Notes i had a lot of trouble getting the process to scroll to that program as it kept freezing up–PERSERVERE! What I learned is that after about 30 minutes the whole darn rogue thing will basically get postal, larger and shut down the whole computer so you have to work fast. Also the Process Explorer- that downloads from sysinterals. www. sysinterntals.com is a really good idea- if you can trick into opening by catching it just as you boot up it will open a screen and after a minute or so you can delete that one number string which will TADA make it so you can launch some programs. I noticed internet explorer can open vs foxfire which can’t
and bam, open this baby up by double clicking it and your task manager will open up, and find the process that total security is running, its usually a number like 34854385.exe or something like that,{{{{NOTE AGAIN- it was actually a program name that included the word Security, and there were two of them, I shut them both down and was able to launch Spybot, AND update it.
WHEW this rogue is just TERRIBLE! this took me- seriously– 8 plus hours of learning and just kicking the cr*p out of it, restarting a million times and catching that Process Screen icon- once it actually deleted it but i found it in the trash and made it work again. just click that number and close it down. After that I’ve run Hijackthis {{Make sure you’ve got an updated kick butt program. The XoftSpySE will ask for payment once its captured. I already owned spybot . THANK YOU Anigma for the final key to the removal– getting task manager up and running by renaming it!
Reply
Suzette Reply:
August 25th, 2009 at 10:52 pm
Sigh. Restarted, still there, Scanned again, removed all, restarted, still there. Xoftspy was my best hope. As soon as it reboots it revives.
WHAT NOW?
Reply
Rachel Reply:
September 20th, 2009 at 12:05 am
I got this virus last night. My anti-virus, Avast, tried to stop it, however wasn’t able to quarantine, delete or do anything with the file. I immediately shut-down, to reboot in safe mode to allow Avast to clean it up. The virus has disabled my safe mode, as soon as I select it, the computer just reboots again. So, I disconnected my internet line, and booted normally to find the virus has block my anti-virus program from starting, block Task Manager, blocked My Computer, block Add/Remove Programs – everything. I immediately manually powered down the system again. Is there any hope of beating this thing short of completing a system restore?
Reply
August 26th, 2009 at 3:23 am
ok this worked for me…
first do the renaming taskmanager to iexplore thing then i ended the 12345 process.
then i stopped that process from starting up when i booted by computer with msconfig,
then i bought spyware doctor and ran that
then i rebooted and ran avast antivirus boot time scan which is free.
when my computer rebooted it was fixed
thank god for that!
Reply
Steve Reply:
August 30th, 2009 at 6:31 pm
louis, this is good advice, and after several hours i think this may have done the trick; my Norton now runs again, so i am double checking with one more scan.
i do fear that the program is still resident somewhere, is your system still clean?
Thanks
Reply
Mary Reply:
October 4th, 2009 at 3:49 pm
The only way to be sure is what I did, turn off computer, then turn back on and as SOON as the icons started to appear, I hit cntlaltdlte and it brought up my taskmanager. I couldn’t access task mngr before this because Total Sec wouldn;t let me!. Then I went into task mngr and went to processes and right clicked on end process and the Total Sec was gone and my access to my computer came back. For me, there were no numbers on my Total Sec, it just had tsc and that was the Total Sec virus.. Then, on my own, figuring this out myself, I went into the System Information, clicked on the software environment, (I have Vista) and went to loaded modules and scrolled through that AND found the tsc there and deleted it. Then I went to programs combed through everything and found tsc there and deleted it. For me, I found that it was VERY helpful to find it also by the date. Even in “my computer”, when I went there to drive “C” and went to Windows and from there into the programs. I found that tsc in there. Most of it is dated. EX: my infection was 3:58am 8/29/09. After I deleted all the tsc stuff, I regularly go through all of this stuff just to make sure it is GONE!! And I always look for that date. It is your biggest clue in finding that crummy virus. It worked for me!! When I realized I had a virus, it was when right after it got on my computer, I couldn’t uninstall it, could not get rid of it! The way I got it off my computer was from this message board. I looked at a few and I, ME, decided to go with this one I used and it worked beautifully for me!
Reply
August 29th, 2009 at 10:33 am
I got infected at 3:58AM, 8/29/09 and when I tried to delete it, it told me I didn’t have permission to do so. That is when I knew I was in trouble. I still didn’t know that it was a trojan infection. Not until I googled Total Security and I found all of you. I used Jeff’s solution to this problem. Turn off computer and when you start it back up, as soon as the icons appear, hit ctrlaltdelete and up came task mgr! I went to processes and it didn’t have all the #s.exe, it had just tsc.exe and I knew that it was what I was looking for because it showed the date and time it was installed. So, I right clicked on processes and clicked on end process and I got rid of it! I checked my system info and looked everywhere and it is gone!!!!!!!!!!!!!!! Before I tried Jeff’s way, I went to task mgr, but the total wouldn’t let me delete its program. So, I thank you JEFF!!!! My first try EVER at doing such a daunting task for a person like me who is still learning the ins and outs. Wow! I am so impressed with myself. Oh yea one final thought, the little icons on the bottom right computer that were of Total Security disappeared when I hit end process. That is when I knew for sure that it was gone. Good Luck Guys!!!!!
Reply
sant Reply:
October 1st, 2009 at 10:35 am
thanks a lot …finally after battling for 2 days i got rid of this…
Reply
Jayster141 Reply:
October 3rd, 2009 at 11:04 am
Mary I am glad that you found out that it was tsc.exe. I had done the exact same thing you did, and in like 7 seconds it vanished from every where (including the little icon bar at the bottom right. So no I know I have no more of this Parasite left. Thank you very much.
Reply
August 29th, 2009 at 5:48 pm
i tried the iexplore thingy but it says my administrator has disabled my task manager.
Reply
Luciana Reply:
August 30th, 2009 at 10:41 pm
Task Manager is disabled by Total Security 2009 to prevent you from deleting the infection. Boot your computer in a safe mode and then use the manual removal guide.
Reply
September 2nd, 2009 at 3:39 pm
I had the hardest time trying to get ANYTHING to open. I trid getting to my task mgr for hours.. Finally I thought about just renaming malwarebytes anti-malware to ‘iexplore’.. It ran!!! I swear by this program!! No sure if it wil get rid of (4E00C yet but its already found 23 infected objects that weren’t there earlier!
Reply
September 2nd, 2009 at 6:35 pm
I’ve been trying to help my mom with this same problem today. I have tried everything I know, and everything I’ve read here and elsewhere. Here is the problem, and I see others are having these as well:
Task Manager cannot be opened, it starts and then immediately closes.
Nothing can be downloaded or installed. Renaming things explorer.exe or iexplorer.exe does not work (may have worked for an older version of Total Security, but not this new one).
Cannot enter addresses into IE address bar.
Cannot run notepad to type addresses for cut n paste.
Regedit opens then immediately closes.
Cannot boot into safemode, when we try we get the blue screen and “A problem was detected, run chkdsk” and then can’t continue past that.
This is daunting, and extremely frustrating, and no one seems to have any answers. The only thing I haven’t tried is to run taskmgr before Total Security Starts, but unfortunately I’m instructing mom over the phone and she’s not quite fast enough to visually search for the right process to kill.
Reply
Steve Reply:
September 3rd, 2009 at 10:47 am
so i dealt with this thing last weekend, and it is a pain.
I also found that the rename thing did not work at first, but then i had the brainwave of creating a copy on the desktop, this worked a treat. i then followed the instruction as above ad it worked, i was done with Total Security!
Unfortunately, it appears that it had brought a couple of friends for the ride, virtumundo. It’s a horrible trojan. Anyway, after several days of trying to get rid of this and reading through testimonials, i finally had the brainwave to do a system restore (i am using vista, not sure this is possible with other OS’s), chose a date before Total Security was part of my life and 20 minutes later, presto.
I imagine that you will need to follow the advice from louis to disable Total Security before you can do this, i found the option for restore during reboot tapping F8 (vigorously and continuously).
The important thing to note, is system restore does not delete data (which is good), it just resets the system, so any new program including virus’ will be gone. Windows creates a restore point very regularly, i had several to choose form. after the restore i found Norton and MS Security finally telling me they were compromised, like they were gasping for air, so i fixed them and now I am virus free.
Hope this helps.
Reply
Luciana Reply:
September 3rd, 2009 at 11:40 pm
Thanks for sharing your experience, this will be useful for others.
Reply
ballinagra Reply:
September 4th, 2009 at 9:20 pm
Total Security won’t let me into task manager, won’t let me run regedit, won’t let me perform a system restore, won’t let me log in to safe mode. Even when I rename files to iexplore, Total Security won’t let me run them (Spybot, AVG, Spyware Doctor, etc.). I can’t download any program from Explorer to help me get rid of this virus. My computer is completely mobilized. Every time I read one of your solutions, I get excited, only to find it won’t work for me. Is there ANYTHING that will work for me?
Reply
Kyle Reply:
September 5th, 2009 at 2:09 pm
I dont know if this helps, but try re-installing windows. A.K.A. System Recovery.
IT WILL WIPE EVERYTHING! Except for the windows file OF COURSE. so yeah. try that if TS is still a meanie for you.
Reply
September 4th, 2009 at 11:26 am
A friend had the same problem. Safe mode would not work. You cannot execute task manager or anything. However you cannot merge registry fixes or anything. You can use explorer. Open C:\Documents and Settings\All Users\Application Data\ (make sure you enable under Tools – Folder Options – View – Show hidden files and folders). In there will be a numeric folder. Look in the folder and there will be a numerically named executable. You will not be able to delete, but you can rename. Rename it. Reboot. Now run your Malwarebytes and regedit. Get that sucker outa here!
Reply
Chris Reply:
September 29th, 2009 at 9:57 pm
I have the same problems, when I try to rename that application it does not allow it because it is currently in use. any ideas?
Reply
September 6th, 2009 at 11:19 am
I followup all the procedure above n finally the f*cking adware had been removed.
But i wonder whether it will come “Alive” again or not?
Did anyone has the solution to delete the “root folder” of this shit adware?
i scare it will come bek again after i restart my pc.
for sharing, using “Safe mode(by tapping F8 after checking RAM procedure)” and “Rename tskmgr” are both recommended to all to stop the adware running. It does a folder and exe file with numbers combination (eg:12874859.exe) that doesn’t have certain number.
find the freaking folder out and “Shift+Delete” to delete the file once it for all.
Hope it works for all ~~!!
Reply
September 7th, 2009 at 9:59 am
ok just to clarify my system is clean after i did what i said above, computer is running perfectly, i forgot to mention once i had done the process above i then searched for the total security exe and securly deleted it with a file shredder, im sorry i can not tell you the name of the exe because it varies,
i will let you know if my computer becomes like that again but i doubt it, this forum has been a great help and any info i have i will share with you. thanks everyone..
Louis
Reply
September 8th, 2009 at 4:44 pm
So I’ve tried the steps that Enigma has suggested, but once I open the iexplore.exe file, I can find any of the .exe files of Total security in the processes tab. I have looked for:
10530004.exe
18384534.exe
tsc.exe
Sc2C21UvvM.exe
and none of them are in my processes (nor is there anything referring to ‘System Security’), but Total Security is still on my computer. I know it’s still on there because its still in my start menu. Any ideas?
Reply
Rizzo Reply:
September 8th, 2009 at 6:00 pm
I have now deleted all files as listed about. All dll files, and deleted it from my start menu. I think my problem is System Security as opposed to Total Security. Thanks though to everyone who has posted on here, it has been a great help.
Reply
September 9th, 2009 at 10:41 pm
Hello, ive tried all these thing, im quite dumb when it comes to computers, its such a pain it wont let me download or open anything at all only internet explorer please tell me how to remove it as if you were writing a book dummies, pleaseeeeeee! Thank You
Reply
Luciana Reply:
September 10th, 2009 at 12:25 am
You got two easy options. The easiest option is formatting hard drives and re-installing Windows operating system. The other way is a bit more complicated. You can download some anti-spyware program on another computer and then copy it to your machine on a thumb drive. Then you need to run the anti-spyware clean everything.
Reply
September 10th, 2009 at 7:21 pm
I was a sucker and bought the total security 2009 scam..how do i get rid of the lock looking icon from my computer programs? I tried deleting files and i used task manager to stop the all numbers .exe and wpv.ajfalfj or something like that…and the virus no longer pops up but i still have total security 2009 in my computer programs…. how do i get rid of it??
Reply
Luciana Reply:
September 10th, 2009 at 11:34 pm
Make sure you delete all the files, registry entries and other items installed by Total Security 2009. If the infection is still there, I recommend running anti-spyware scan for deleting the remains of TotalSecurity.
Reply
September 11th, 2009 at 1:35 pm
How do i find all these files, registry entries and other items installed by total security??? I thought i was able to stop it but i restarted my computer and as it turns off the screen turns blue and has that infection notice screen…how do i get rid of this mess?
Reply
Luciana Reply:
September 13th, 2009 at 11:14 pm
Use the additional tutorials given next to each step of removal instructions. For example, there’s Read more how to kill Total Security 2009 processes tutorial next to “Stop and remove Total Security 2009 processes” etc.
Reply
September 13th, 2009 at 10:30 am
Wow, guess my computer is tough then.
I had Total Security on my computer last night, was able to run a few of my scan programs before one asked me to reboot and couldn’t after that. However, when I logged on this morning to look for a site telling how to fix it, found this site and was reading and all of a sudden Total Security just crashed out of nowhere. Next thing I know I’m looking for all the files, registeries, and lirbrairies listed on here and all of them are wiped clean without me doing anything.
Guess sometimes you just gotta love technology
Reply
September 13th, 2009 at 3:00 pm
I followed all of the helpful instructions, specifically from “enigma” and “larry”. The problem I am having now is that I can’t run any of the virus/spyware removal programs. Fortunately, I have all of my info stored on an external drive, so I will likely just re-install windows when I get a chance. But this has been driving me crazy for two days. Luckily I was able to stumble upon this site with very helpful tips. I still don’t understand the instructions that the site has provided, but from the help of “enigma” and “larry” I am able to use the internet without too much resistance.
Reply
September 14th, 2009 at 1:10 pm
I was deleting some of the stuff off the computer to get ride of the Total security 2009 and I got to the point where it no longer pops up but I also can’t open and downloads or click on some of my desktop icons like word and mozilla. The picture is no longer on there and they just have the icon where a picture should be. Any idea what I did?
Reply
September 17th, 2009 at 9:12 pm
i am not very good in the technical aspect of the computers. My computer got infected with Total Security in the afternoon. All day I was trying to get rid of it. I was able to go into the task manager, at times I would see tsc.exe and I would stop the process. But the virus still remained in the system. I would reappear on the toolbar and it was always on the menu.
I rebooted my system in the safe mode. Then I reset the system for 2 days back. After restarting the computer, I seem to have gotten rid of the virus. I am not seeing it anymore.
I wonder though if teh system is clean or is it lying somewhere inside and might get active again.
Any tips??
Reply
September 17th, 2009 at 11:56 pm
The automatic removal tool is as much of a scam as the virus is.
Reply
Luciana Reply:
September 18th, 2009 at 2:57 am
The automatic removal tool is functional: it detects and removes malware. How is that a scam?
Reply
Walt Reply:
September 23rd, 2009 at 4:42 am
The so-called removal tools are part of the scam because they do NOT remove the virus, which would mean it was removing itself. The “Total Security 2009″ desktop icon, and the so-called Security Center pop-ups are part of the virus itself. Even the Security entry in the Remove Programs, is a hoax (it INSTALLS more of the virus, not removes it).
IMHO, being able to successfully remove this virus really depends on if one fell for one of these removal hoaxes or not.
Reply
Luciana Reply:
September 24th, 2009 at 12:06 am
We must be talking about different applications. Of course Total Security 2009 is non-functional and fraudulent. That’s why it’s recommended to remove it.
September 18th, 2009 at 3:42 am
i’ve been trying enigma’s trick but when i try to rename the taskmgr, it keeps saying that i need permission to perform this action. can anyone help me please….i’m getting frustrated and irritated by this total security thing.
Reply
September 18th, 2009 at 6:29 am
I got the virus yesterday, and my dad and I got rid of it by doing some that stuff and we installed Avast. But then, around 12:30 am, it came back and that’s when I found your tutorials on my mom’s computer because mine was infected. But it is still acting funny and I’m still getting pop-ups when I have the pop-up blocker on, and it still won’t let me do certain things on the internet. Is there something else I can do to make sure it’s gone?
I’ve done everything on here except for the virus scans because I don’t have the money to buy those.
Thanks,
CoCo
Reply
Luciana Reply:
September 20th, 2009 at 10:21 pm
Use the manual removal guide to delete files, registry entries and other things related to Total Security 2009.
Reply
September 19th, 2009 at 12:12 am
Total Security has hijacked my computer. When I tried to reboot in last known good configuration it shut my computer off. Each time I’ve tried to reboot it the computer restarts over again. I can’t get to my desktop now. What should I do?
Reply
Walt Reply:
September 21st, 2009 at 3:26 am
Boot into Windows “Safe Mode”. You do that by pressing the F8 key immediately after your BIOS boots, but BEFORE Windows itself starts to boot. Not easy to get the timing down correctly for F8 so you might need to try more than once.
When successful with F8, you will get a text menu. Select the top most choice and allow Windows to start up.
Reply
September 19th, 2009 at 11:24 am
i got task manager to come up but i don’t know which process to delete there isn’t any with numbres
Reply
September 20th, 2009 at 2:38 am
very nice and for future
Reply
September 20th, 2009 at 4:46 am
Let me add, for me, this virus also overwrote my host file (c:\windows\system32\drivers\etc\host), by putting local mappings to 127.0.0.1 to every Google, Yahoo, etc, website URL in the word.
At least for me, after successfully removing all the files and registry keys, the overwritten host file remained. One needs to restore it with a backup copy, or manually edit down so that it only contains the one line of “127.0.0.1 localhost”.
Reply
Daniela Reply:
September 21st, 2009 at 3:55 pm
I think I had the same problem.
Before I got Total Security virus, one named Trojan Win/32.Qhost found its way on my computer (found with NOD32 pop-ups, although this antivirus simply cannot quarantine or get rid of it forever). I truly believe one is connected to the other, because after some days Total Security appeared. I was browsing with Firefox when my pc suddenly rebooted, Total Security’s warnings appeared and changed even my desktop image. I rebooted my pc faster as I could.
When my desktop appeared, Total Security wasn’t there anymore and didn’t show up, but Win/32.Qhost is still there and my pc is slower than a turtle. LOL
I rebooted on Safe Mode and ran a scan with NOD32. It found some trojans but my computer is still slow. Still on Safe Mode, I ran Spyware Doctor. It found only the bitmap image that appeared at my desktop hahahaha. XDDDD That’s all I could delete. I even used Spybot Search and Destroy but nothing was found. I tried to find some Total Security files but still nothing.
The problem is that computer is mine at work and it has a lot of data I’m afraid to lose. I’m REALLY needing an urgent help. I’m tired of finding programs that I have to pay to take these things out.
Thanks.
Reply
September 21st, 2009 at 11:14 am
Since my original post, I found that I could get rid of so-called “Total Security” (actually both a virus and a $cam) by rebooting, pressing F10 when rebooting (which replaces the existing DAT registry files with the backed-up previous good copies) which enables normal operation, and then running the antivirus program AVG 8.5 on the Documents And Settings folder and subfolders (where the “Total Security” main executable files are located) and the Windows and Program Files Folders (where other “Total Security” executable files and the DAT registry files are located).
Of course, if you had a recent backed-up image copy of the boot drive on another drive, along with a new internal drive, and if “Total Security” has now been fortified to make the above method unworkable, you could simply unload the backed-up drive data onto a new internal boot drive, install it, and reformat the old boot drive.
Reply
September 22nd, 2009 at 1:30 pm
so i tried every thing as well it has taken me about 5 days. i went to add/delete programs, and it is there, but it says that it has already been deleted even though it hasnt. i just tried everything that was said here and i did find some folders and deleted them but im scared that when i turn my comp on it will be back, it takes quick hands at the task manager to stop the process. i stopped a lot of processes trying to figure out which one it is. there is one i saw that is iexplore.exe. i stopped that and i was able to use my dang comp again. this has drivin me nuts this week. i went to my c: drive like Enigm@ said and that mostly has worked. ill see in a minute if it really did.
Reply
September 22nd, 2009 at 9:23 pm
PLEASE HELP,
Nothing that I’ve tried has helped. This SOB has every thing locked up. I can’t even format my hard drive, and statr over. I can’t open task mangr, and the files and dll’s I can open have nothing to do with TS 2009. PLEASE, ANY ADVISE?
Sincerely,
Tim
Reply
Walt Reply:
September 23rd, 2009 at 4:45 am
Are you able to boot into Windows SAFE MODE? That’s done by pressing F8 after BIOS boots, but BEFORE Windows itself starts to boot (takes some good timing to get F8 pressed at exactly the right time).
Reply
September 23rd, 2009 at 9:19 am
Well I got this bugger about 5 hours back
In my case it just kept on showing persistent popups and false alarms
I checked with spybot search & destroy which couldnt remove it
After reading this guide I started to look for suspicious processes using process explorer
and killed a few processes with weird names and which had no valid provider name showing the spyware stopped after that
I my case the stupid software had created a shortcut on the desktop and a start menu entry
I simply right clicked on the entry in the start menu and deleted it
Then I right clicked the desktop shortcut and from properties checked where it pointed to , went to the folder containing the executable and deleted it and the shortcut also
Then I ran CCleaner and cleaned the registry entries
Now I have restarted the system again and it has been half an hour already and no sign of Total Security so I guess my idea worked.
Reply
September 23rd, 2009 at 8:28 pm
http://www.spywarevoid.com/remove-total-security-4-52-totalsecurity-4-52-removal-help.html
this is where i went and i deleted some stuff that was on my c:. it does take patients and u have to open folders to look for the LOCK icon that total security has. what you need to do in the first place is restart your computer, as soon as you see your desktop pull up your task bar by either right clicking and going to task bar or ctrl-alt-delete will bring it up. you have to work really quick!!! when you get to the task bar open the tab that says processes. look for any number with .exe for example 6192116.exe and stop the processes. and anything that has iexplore.exe i believe. i actually stopped most of the things because i wasnt sure which one was the bad one. and it took MANY times to re start the computer. so once you have control back of your computer, fallow that link!!! and install spyware terminator. thats what has helped me, and its free and it takes the bad spyware off and not just the scan so its cool. im running into a problem myself still. i use mozilla and even after i have done scans and deleted the total security scam the internet explorer still pops up so im not sure i have completely gotten rid of it, hope this helps!
Reply
September 24th, 2009 at 3:29 am
i thing i removed total security from program files i removed like a file with 3 letters and then when i went controo panel i pressed unistall and it vanished it didnt tell me complete or finished.but i tihng its stil lthere coz its blocking my internet explorere if u can help me with this =) ty bdw i run vista bye
Reply
Walt Reply:
September 24th, 2009 at 5:27 am
As to your IE being blocked, scroll up and read my post #35.
Reply
September 24th, 2009 at 6:11 am
I think I got a solution to stop the virus first from running. So you can remove it in peace.
If you click on my computer it freezes but
with me below works.
press windows button + E
then go to — c:\documents and settings\All users\application data
look for folder with random numbers
go into it.
you’ll see an .exe file with the virus logo on it.
you won’t be able to delete it. Buuut you will be able to change the .exe to .txt.
when you done that, restart your computer with the internet cable out of your pc and voila you are able to remove it in peace,…
This simple solution worked for me, when I restarted the pc it did not see the .exe to start the virus, it also did not put anything in the registry file, because when I looked for it it was not there, I hope this works for you to. Good Luck,
greetings, Farid Ishak
Reply
September 24th, 2009 at 8:08 am
Thanks Enigma, this worked. I was about ready to pull the hard drive. This is one nasty virus. You saved me hours of work!
Reply
September 24th, 2009 at 12:15 pm
I guess I’ve joined a BIG club!! I can open my VAIO laptop Running XP MEdia in Safe Mode and can open all the appropriate files/ applications named above but I see no numbered .exe files, only named files.
When I open my C drive , though, I see two Application files that were created at almost the exact time of the infection, They are named “ddbpu” and “hwdgqmcw”
There IS an .exe file in task mgr/processes list “ddbpu.exe (three of them). Should i delete them and he App files? I deleted a .dll file on my last laptop and that was all she wrote for THAT baby.
Signed, Nervous but willing
Reply
AlexE Reply:
September 24th, 2009 at 12:59 pm
I deleted them…no result. Then I went back and looked at othe .exe same size (4444 K) and deleted unsecapp ( unsecure Application?) …didn’t help but when logged back on it had returned. Afraid to delete other files (svchost, tec. )
Thanks
AE
Reply
ana Reply:
September 27th, 2009 at 9:22 am
yeah i have a LOT of the svchost. stuff but dont know what it is either, i kind of feel it is somehow conneted but i can be completely wrong thats why i havent deleted anything like that
Reply
Mary Reply:
October 5th, 2009 at 12:25 pm
Alex, I got my infection at 3:58am 8/29/09, it tricked me into clicking on it when it popped up so fast, it scared me to think that I had a virus. But actually it was tsc that fooled me into thinking I did. (its emblem is just like my security center in my control panel, that is why I clicked it!) So, when I tried to uninstall it, it told me that I had no permission to do so, and that is when I figured out something was wrong. I tried everything and I just couldn’t get rid of it!! I found this sight and looked at all the given solutions and I went with Jeff’s. Turn off your computer, wait and then start it up. As SOON as you start to see any Icons come up, hit ctrl/alt/delete. I mean have your fingers on them ready to pounce. After I did that, a screen came up with my task mgr and I clicked on that, went to processes and was told to look for a bunch of numbers.exe. I didn’t have the numbers, I had tsc.exe. Then I right clicked on it and then you click on end process. Immediately, the tsc icon on the bottom right task bar disappeared! That is when I knew that I got rid of it, BUT, I went and combed through my computer looking for the remnants ot tsc. I went into system search and clicked on software environment (I have Vista Home Premium) I combed through loaded modules, running tasks, program groups, start up tasks. In these I found the tsc.exe. I highlighted any that was tsc.exe and deleted it. I mean you have to scroll through each segment and find it, it is there and delete it! It will take some time, but worth it! In program groups, I opened it and then I opened EVERY line in that, (highlighted and opened it) each one, just to make sure it was gone. And I found it,too. Like in system32, it was in there. I just deleted the tsc.exe. I also went through my “C” drive and it was in there, too. I went line by line all through there, highlighted each one and opened it up and I did find it and deleted it. One thing that helped me was I noticed right away that everything that was tsc.exe was dated, 8/29/09 3:58am. (most of it was) That was the exact time I was infected. That is it’s downfall, most of its entry onto your computer is dated, so it makes it a little easier to find the little scumbag! I don’t know if that ddpbu.exe is the one. Look at the dates in the loaded modules or the start up task or running tasks or programs, folders, sub folders, everything! If the ddpbu.exe is in all of those with the same date and time, that may be it. Like I said, mine was tsc.exe. I guess they are all different. But the date and time for me, was the connection I needed to root this evil OUT! I guess you have to get this done ASAP, I hope it isn’t too late. Be careful about deleting files. With this virus, where ever you look and find it, it should always be the same. In my infection, there were not two different sets of .exe. It was ALL tsc.exe, (or just tsc sometimes) all of it. Remember, for me it was the date and time. That helped me to know what it was when I found it, when I was not sure. I am not very computer savvy, so this was an adventure for me, you know. I was very nervous, but as I went along my confidence built up. I still go through everything that I told you to do, periodically, just to look and to keep an eye on my computer. I haven’t found any tsc since, but I will never forget it and I want to stay on top of it! Hope you get rid of it! Mary (just a note, when I first got infected, I tried EVERYTHING to delete this virus and everytime it told me that I did not have permission to do so. That is why I tried Jeff’s method and it worked for me!!)
Reply
September 26th, 2009 at 9:36 pm
I agree that these misfit criminals are spewing out updated versions of TS. My newer TS infection defeated all of the above fixes except two. Leave it to the good ‘ole OEMs to defeat the punks slithering in dark rooms: Use key F8 during boot-up and select Safe Mode for boot-up. After boot-up, task manager and other functions work normally. Then do a system restore to a previous date prior to TS infection. (You won’t lose data, and the restore is reversible if later desired.) Then restart in normal mode (don’t press key F8 during boot-up) and you won’t see TS. Then run your anti-virus scan software to insure all files are clean. Slithering criminals lose.
Reply
September 27th, 2009 at 9:20 am
hay so i found the file that showed a lock and it was the total security thing and i changed the name and all that stuff is gone BUT i am still getting the internet explorer popping up with random things on the page. i use firefox, so as soon as i see the i.e. pop up i have my task bar ready to stop the process on the iexplore.exe but it is so frustrating because i cant just brows the internet without a dang internet explorer popping up, has this happened to anyone else and if so what did you do? is there anyway to delete i.e. from the computer. oh it has popped up a couple times in the firefox as well but when i have the task bar and delete the iexplore.exe it goes away. please help i am so done with the weeks of trying to fix my computer by myself. i was ready to give up and take my comp to the geek squad but refuse to pay 200$ to fix it!!! help!!!! thanks
Reply
September 27th, 2009 at 10:28 am
Hi, I got this virus a couple of weeks ago. We were able to remove the total security file and our computer was usable again. However, the pop-up ads keep coming. I looked for all the files and other things that were suggested to be deleted or edited and nothing from the lists was found. But when I open up my regedit to look for the HKEY files I find this one… HKEY_LOCAL_MACHINE/Software/19675624
The number is very similar to a part of the total security file that we deleted. But i cannot remember the exact number so I am afraid to delete it. I was wondering if anybody else had this problem? I really feel like this is what the problem is but am not sure and I do not want to delete something that is vital to the operation of my computer.
My other question is, if I want to delete the file, how do I restore my system to a previous date, just in case I delete a useful file? Any help would be appreciated.
Reply
Walt Reply:
September 28th, 2009 at 7:28 am
Do a search for any file or directory name containing “19675624″. There should be no legitimate executable file located anywhere in “C:\Documents and Settings” or its subdirectories.
Reply
ana Reply:
September 28th, 2009 at 3:26 pm
yeah you go to the start button, then all programs, then accessories then system tools and finally system recovery. i also deleted a file that looked like that i cant remember which one it was but, my computer has been very slow now! im just happy that i have control over it. and all these pop ups from internet explorer have slowed down now that i did a scan and had like 20 Trojans. the virus total security made my virus scanner disabled. well hope that helps. im going nuts trying to fix my computer. hope we all find the solution!
Reply
September 28th, 2009 at 9:03 pm
Thanks Farid Ishak yours is the solution, there are just too many difrent answers for this problem that can confuse you more, but out of all Farid Ishak’s answer is the solution to this problem just follow his steps….thxs again Farid!
Reply
Farid Ishak Reply:
October 9th, 2009 at 8:39 am
You are welcome, …
Reply
September 29th, 2009 at 9:26 am
I went through and used system32 advice and removed Total Security from my computer, but when I get on the internet it is still blocking sites. Is there something I missed?? I searched all over my computer and Total Security is nowhere to be found. Why is it still messing with my internet??
Reply
Luciana Reply:
September 29th, 2009 at 10:54 pm
You most likely have other malware besides Total Security and this other infection is promoting Total Security. Run anti-spyware tools to clean your PC.
Reply
September 30th, 2009 at 3:53 pm
My computer just got infected last night aswell , very frustrating
i have managed to deleted the program using the advice above – ran malwarebytes and removed all other infected files. However my internet explorer is still got major problems, it keeps randomly blocking sites i try to go to, ive tried to edit the host file in winxp/system32/drivers/etc, but cannot find it using the info on post 35?????? pls help
Reply
Luciana Reply:
October 1st, 2009 at 1:21 am
Apparently your antispyware is not able to remove all things installed by Total Security 2009. Try another tool or use the manual removal guide and make sure you delete every thing related to this infection.
Reply
October 1st, 2009 at 12:29 am
Topic – TOTAL SECURITY 2009 KEEPS COMING BACK!
So i’ve gone through the numerous exciting steps to delete Total Security about half a dozen times now, and it lasts for about two or three days before emerging again. How does it keep coming back???
Reply
October 1st, 2009 at 6:54 am
http://www.bleepingcomputer.com/virus-removal/remove-total-security
I run Vista. This site helped me out. Pretty simple fix which is good sinceI am not that computer savvy. Seems to be working fine now. Give it a try. The first step requires you to download from te Microsoft website, so if the virus won’t let you browse this may not help you.
Reply
October 1st, 2009 at 10:44 pm
i finally got to the total securty thing off but i have tons of internet explorer pages popping up and my comcast anti spyware thing doesnt stop it, i have mc afee and spyware terminator and nothing stops the pages from popping up. they always have things like life insurance or more spyware protection b.s. but i have run scan after scan and deleted files and ran bitdefender.com and weeks worth of stuff!!! HELP! i am getting so tired of this, im so close to having my computer back but then something else pops up! i also got another couple viruses that were way easier to get rid of then total security. but does anyone have a clue how to help me? has this happened to anyone else? i go a day with a good computer but then some how it messes up again! frustrated! thanks for taking the time and read this!
Reply
Walt Reply:
October 2nd, 2009 at 6:38 am
It reads like you either don’t really have all of Total Security removed, or you have yet another virus too.
As mentioned previously, start Windows in Safe Mode (F8 at boot), and see if you are still getting those popups.
Reply
ana Reply:
October 5th, 2009 at 3:50 pm
well it looks like all my problems ( well these ones) are solved! my hard drive totally crashed and my computer is in the recycling now! they told me at geek squad its a lost hope i need a new computer so now i have a new tower and starting fresh! not what i wanted at all or even needed but its all gone.!!! i have like 10 spyware and virus blocker lol
Reply
October 4th, 2009 at 10:17 am
Someone please help remove Total Security from my computer! I’ve been trying and trying for hours and hours to remove it but nothing is working. If someone can help me, it will mean alot to me. Someone reply soon!
Reply
October 5th, 2009 at 10:16 am
Sounds like the folks at TotalSecurity are reading this post and fixing the “loopholes” as people post them. LOL
Reply
January 12th, 2010 at 11:00 pm
I gotta agree with Alex. I think I recently picked up this virus at the library on my jump drive and it’s a pain in my ass.
If you’re trying Enigma’s trick above, you should note that the process is now disguising itself as an iexplore.exe process, thus making it harder to find.
Does anyone have any recent news on this virus? It’s kept me going for 2 days now and I’m running out of options. Even when I boot into safe mode and try to System Restore, I’m being blocked from performing a Restore. I’ve NEVER heard of a virus that affects actions in Safe Mode!
Reply
Farid Ishak Reply:
January 13th, 2010 at 1:42 pm
Could you try my solution provided on nr 42.
The registry is only polluted when the .exe file of TS2009 starts up. It seems that it is not really a virus but actually a program that starts running whenever you start up your computer. And that program is just programmed to create a huge pop up wherever you click on your desktop.
When I managed to keep the .exe file from running just by renaming it to .txt and restarting the computer, i was able to delete the program and found that the registry was clean and my computer is up until now still running without the pollution that TS2009 brought.
if you decide to try it and it works, great. If it doesn’t, let me know.
just one thing, if you do not see the ‘ Application Data’ folder when you follow the path
C:\Documents and Settings\All Users\Application Data
just write the path in the url address window of your explorer.
Reply
January 19th, 2010 at 10:58 am
Hello Recently I’ve recieved a very sercurity alert on lab top computer of a virus initiated by some strange software which has infected my labtop computer. It was call 2010 Anti pro. Which some some software I did not even want in the first place. When I have tried to remove this malious fake soft ware its keep interfearing with my whole system .So this blue and white shield just came out of nowhere .
I have for these last several been trying to remove it . with either or little success.
I would like to find a new solution to fake want to be anti virus soft ware which to me is not real anti virus software .But in fact is a cheap innertation brand that prevent from accessing my all my important files.
Michael.Johnson of Charlottesville virginia
Reply