Virus Removal Guru

Melissa December 31st, 2008 at 5:21 pm

Does anyone know how we can get our money back I spent 51.49. I am very pissed about this I’m new to the computer business and my first buy is a scam. Please help!!!!!!!

jjjj January 5th, 2009 at 3:00 pm

thanks!….just click at the first how to at this page ::Stop System Security Processes (Learn How To Do This)::

Stabilityinternetscan.com - System Security Virus | Virus Removal Guru January 10th, 2009 at 5:11 am

[...] Stabilityinternetscan.com attempts to spread the System Security Virus. This System Security virus is a fake program. If you need help removing System Security, please view our official guide by clicking HERE. [...]

Securityonlineread.com - System Security Virus | Virus Removal Guru January 21st, 2009 at 3:05 am

[...] Securityonlineread.com spreads the System Security Virus. System Security is a fake antivirus software. If you need help removing System Security, please view our official guide by clicking HERE. [...]

Onlinescanservice.com (Onlinescanservice) Virus Attack Site | Virus Removal Guru March 19th, 2009 at 8:42 pm

[...] Security is a fake antivirus program. To learn more information about System Security, please click HERE to view our official guide to remove System [...]

Getscanonline.com (Getscanonline) Virus Attack Site | Virus Removal Guru March 22nd, 2009 at 2:14 pm

[...] virus, which is a fake antivirus program. To learn more information about System Security, please click HERE to view our official guide to remove the System Security [...]

Greatvirusscan.com (Greatvirusscan) Virus Attack Site | Virus Removal Guru April 6th, 2009 at 2:17 am

[...] Greatvirusscan.com is a malicious website which spreads the System Security virus. System Security is a fake program which attempts to trick the user into purchasing it. To learn more information about System Security, please click HERE. [...]

Aga462 May 12th, 2009 at 12:56 pm

Witam.. co zrobić jeśli komputer nie reaguje na powyzsze instrukcje? np usuwanie zabezpieczeń systemu kluczy rejestru nie jest możliwe (start-uruchom-regedit.exe-okienko wyskakujące na 1 sekunde) nie jestem wstanie zrobić cokolwiek bo znika po sekundzie:/ Nie mogę też odnaleźć pliku SystemSecurity.exe :/ Nie jestem wstanie niczego usunąć ani też zaistalować, prosze o pomoc

Gary May 15th, 2009 at 2:39 pm

When the system security entered my computer, my Norton antivirus didn’t recognise it. the virus wouldn’t let me download, go online..etc and the pop-ups were a pain in the ass…..here’s what I did and it worked!! I switched to another user on my computer (my sons)the virus only seemed to effect the other user…. on my sons I could download, go online…etc….heres the crazy thing, when the virus/trojan showed its ugly head and tried to invade this user my Norton antivirus caught it and removed it, I went back to the original user and the system security is gone!!!! Don’t ask how, it just worked. I can go online, download ….Norton gets high praise from me

Arkinen May 17th, 2009 at 3:35 am

I recently had the same problem as described by HELPPP on May 11th – i.e. it would not allow me to open any programs. Here is what worked for me:
1) Restart the computer and press F8 during start up. This opens up Windows but in Safe Mode.
2) Select the Command Prompt option when you have to make a choice of how to open the computer.
3) The Command prompt will appear (cmd.exe). This is just like the old MS-DOS that existed before Windows.
4) Use command prompt commands to delete the SecuritySystem execturable files listed at the top of this page (http://www.virusremovalguru.com/?p=796).
5) The commands to use are [cd = change directory; del = delete; rd = remove directory; dir = display directory contents]. Look online (on another computer) for command prompt explanations if you are new to command prompt.
6) In the All Users directory, the Application Data directory will not appear since it is a hidden folder but it is there and one can cd to it.
7) Once you deleted the SystemSecurity files, press CNTRL+ALT+DEL to bring up the Task Manager.
Use the Task Manager to Shutdown.
9) Restart the computer in the normal way (into Windows).
10) Once in Windows, the virus executables were not there for me and gave me control.
11) Follow the other methods described above to Remove System Security Registry Keys and Remove System Security Startup Entry.

IT Dude May 29th, 2009 at 5:37 am

I FOUND A DIFFERENT AND MUCH EASIER WAY TO GET RID OF THE SYSTEM SECURITY VIRUS.
My brothers laptop got this pesky virus. It is a mean little one. He is running Windows Vista O/S. After doing some searching online on another laptop about this, I found alot of ways to remove it. The way I did it I could not find it online, so I hope this helps out. After I did it I could not find any instance of the virus in the places they said to look. Since the virus attacks all .exe files, preventing you from opening firewall, defender, etc you can’t just click on Windows defender and open it. The easy trick I found was this: 1-Click on the start button/orb. 2-In the start search box type in “defender”. 3-DO NOT CLICK ON DEFENDER NORMALLY, instead right click and choose “RUN AS ADMINISTRATOR”. 4-When the UAC dialogue box appears, choose “ALLOW”. This will open Windows Defender. Defender then it will find the virus and delete it. Now this worked for me and I hope bt passing it on, it will work for you without having to buy any additional software to get rid of it.

Amanda June 2nd, 2009 at 2:36 am

I renamed the installation executable file, and still can’t install it. Please help.

zeke June 2nd, 2009 at 3:13 pm

Has anyone tried downloading the “install stopzilla” at the top of this page? Has it worked or is it just another waste of time? Let me know. Thanks

Salim June 11th, 2009 at 6:42 am

If you are not able to overcome this(this is most notorious thing i have ever seen) rename the system security exe file and restart your system.

It will be just fine.Then you can remove it from your PC

Hope this helps somebody

Mark June 13th, 2009 at 12:07 am

What I did was open windows task manager IMMEDIATELY while start up and delete the two (random number).exe files that show IMMEDIATELY…they should appear at the top, something like

1534864.exe
9725325.exe

the numbers won’t be exact, just random long numbers…then I did everything listed at the top of this page and added stopzilla to my computer.

r June 14th, 2009 at 9:51 am

ps… i tried all the other was to remove it and not only are they more complicated but they do not work because system securities will not allow you to scan your computer to delete it. trust me this is the easiest way.(listed in my first comment). let me know if you have any problems….

I-Worm.Trojan.b Fake Alert | Virus Removal Guru June 15th, 2009 at 4:01 am

[...] I-Worm.Trojan.b is used to trick the user into downloading a fake antivirus program called System Security. If you are infected with System Security, you can view our guide for removing System Security by clicking here. [...]

felix June 16th, 2009 at 10:33 am

i think an easier way that i found since apparently this is a nasty bug is to search and change what i was searchin to within the specified dates since you cand do anything and its 16118184 and 96128176

CK June 18th, 2009 at 5:40 am

None of the solution worked for me.I went to the Document and settings and I had a Number folder on the AppData.I renamed the .exe with t and restarted the computer.earlier I couldn’t even get to registry or any place.Now it got automatically removed.When I removed the exe on the number folder it kept telling it is in use.So I had to rename and reboot to confuse it.Hope it helps

thanks
CK

ja June 23rd, 2009 at 6:59 pm

zainstalował mi sie ten wirus system security i nie moge go usunąć wedlug waszych wskazówek bo nie moge nawet wejsc menedzera zadan prosze o pomoc

Kassidy June 26th, 2009 at 3:53 pm

The problem with all of this is the fact that this Rogue will NOT allow you to open ANY files, including task manager, my computer, or add/remove programs… or anything else that might link you to getting rid of it!! Also, it will not allow you to download ANY kind of antivirus/spyware programs, it says the program is infected and kills the download!! So im my experience, the only way to get rid of this is to format your computer!!!

Peter June 29th, 2009 at 8:29 pm

the blasted thing kept shutting down my avast! anti-virus and prevented me from opening task manager, fortunately I killed it with this method

Remove System Security Files (Learn How To Do This)
C:\Program Files\System Security\
C:\Program Files\System Security\SystemSecurity.exe
C:\Documents and Settings\All Users\Application Data\[random numbers]\[random numbers].exe

helchacha June 30th, 2009 at 5:04 pm

Oh one thing i forgot to mention. When in safe mode make sure you disable system restore. You can enable it when you have completely removed the virus.

not doin so good July 7th, 2009 at 4:03 am

I got back some of the applications that System Security wouldn’t let me into. I managed to download several anti-virus/spyware/malware programs, but I’m still unable to open and run them. The shortcut and tray icon for System security are gone, too, but I know I’m still infected. If anyone can help that would be most awesome!! THANKS

fred July 7th, 2009 at 11:58 pm

i cant get on the internet on my computer to dowload this so i had to use my parents labtop to learn how to remove it wat should i do

Maulik July 9th, 2009 at 5:08 am

I had this same thing. I couldn’t access the Internet or anything. I tried a suggestion on a previous post about system restore and it worked perfectly!!!!! Ps. I am using xp. . Hope this helps!!

Darshan Nandha July 10th, 2009 at 11:17 pm

I hate this virus and I used two methods on this site but they took forever and gave me no results that’s why I made up my way, 2 ways actually. Doesn’t matter if your on Safe Mode or normal but I recommend Safe Mode just so the virus won’t interfere in the process of removal

First Way: Copy the link:
http://www.forospyware.com/sUBs/ComboFix.exe
into your address bar instead of directing you to a website it will ask you if you want to download a program (Combo Fix) download it and run it.Then just sit back and let it do all the work. Just keep clicking yes or I accept etc. Restart normally and install CCleaner go to the registry component and selected Scan for Issues afterwards click Fix selected issues and fix all the issues basically what you are doing is removing any leftovers of SystemSecurity. Hope it works.
You will need to disable/uninstallyour anti-virus anti-spyware otherwise it will seriously damage your computer.

Second Way: Go to the link above and download the program then scan a few times and restart if the virus is still there scan again.If you have to scan more than 3 times this method isn’t for you. If the program isn’t opening then go to C:\Program Files\Malwarebytes’ Anti-Malware there will be a file with an and its name is mbam rename it to remover anything else and double click it then scan.(I strongly recommend using this method in Safe Mode.)
These methods are good and worked for me hope they work for you.

P.S.If you can’t access the internet due to the virus then go into Safe Mode with Networking

Heather July 11th, 2009 at 1:03 pm

I got this virus and was having a lot of problems trying to get rid of it because it doesn’t let you do anything. This is what worked for me, and its simple and easy to do!

“if you have xp like me the easiest way to remove system security is to go to the start button then click on all programs then assesories, then system tools then system restore. you will have to do this in safe mode so first you will have to shut down your computer and go into safe mode by hitting f8 rapidly right after you hit the power button on the computer. after you are in safe mode follow the above steps and choose a date under the system restore option that is in bold before the date system securities infected your computer. this will definately work for anyone who has xp, but try it on any system, it should work on any.”

Thanks R!

Orlando July 13th, 2009 at 10:16 pm

I had this but there is an easy way to do this. Just turn off your computer but shutting off the actual computer, not through windows. Turn back on, select safe mod, and run windows defender. It should remove it

Kate and Ed July 16th, 2009 at 5:40 am

Thanks a ton!! Being able to walk through step by step saved us a ton of time. We used the manual directions and they worked perfect once we figured out Safe Mode!

Cristi Tudose July 16th, 2009 at 9:15 pm

1.start in safe mode by pressing f8 at start-up
2.command prompt only
3. press ctrl+alt+del and open task manager
4. use new task —> explorer
5. find the virus files in C:\Documents and Settings\All Users\Application Data\[random numbers]\[random numbers].exe
6. restart windows …..

NOW IT’S OK good luck

TBOUFF July 24th, 2009 at 2:33 am

In XP, doing a system restore to a time and date prior to the onset of this nasty bug worked for me – this was suggested above. Thanks!

Chris July 28th, 2009 at 9:48 pm

Restore worked perfect. The easy way to fix if thanks Heather. (See July 11th)

parth July 30th, 2009 at 7:49 am

Its very easy to get rid of this virus
After going thro various sites and after almost 4 days of trials i almost gave up, cause this SS virus was not letting me open run nor was i able to run my system in safe mode…but dont know what stuck, I tell you its very easy. here what i did
1) I right clicked on the SS icon on the desktop
2) clicked ‘properties’ from the drop down
3) clicked ‘find target’
4) in the new pop up window you’ll find SS.exe,and some numbered file with .exe extensions
5) rename all the .exe extension to .ex thats in this folder
6) restart your system and run the anti-virus, i used spydoctor.

thats it my system is back on track now

Herman July 31st, 2009 at 9:28 am

this virus won’t let you run/open anything nor can it allow me to auto run any cds i put into my comp, nor can it allow me to go into safe mode.

what i did to remove the virus was restart my comp and right when i logged onto my account, i pressed ctrl+alt+delete and the screen pops up BUT you have to click “new task” RIGHT AWAY and type in “msconfig” into the box. From there find Norton (or which ever anti-virus) you have. At this point the System Security virus would have stopped loading. Now just do a full system scan of your computer using your anti virus program.

This works for some ppl but for me my computer crashed and restarted by itself while the scan was happening but once the computer rebooted itself, Norton automatically deleted the virus and rebooted my computer again.

Hope this helps and if this worked for you kindly send me an e-mail (hermanho_90@hotmail.com) or smthg to let me know.

Thanks and hope this works out for you guys =)

Abdul Waheed August 5th, 2009 at 12:25 pm

Soon after I log on, I pressed alt+ctrl+del and wait until some strange program name starts, it started with the name 14285464.exe, I quickly memorised it and wrote it down on paper. Restarted the system in safe mode. Start Menu – Run – Regedit.exe, in its edit menu – Search – there I wrote 14285464, where ever it was found in registry, I removed it and boot the system normally. Successful.

Total Security / Total Security 4.52 Virus Removal Guide | Virus Removal Guru August 17th, 2009 at 2:50 pm

[...] 2009, is a rogue security application, also known as a fake antivirus program, and is a clone of System Security. The fake program hopes to trick the user into thinking that it is a real program. The program [...]

Frances December 12th, 2009 at 2:37 pm

My other computer just got hit with “security tool” and now it is locked up. BTW all I did was to log onto Face Book and got hit. I looked this up and know it to be a “rogue”. How can I remove it safely without a huge expense? It is not on my hard drive ( Thank goodness ).Thanks in advance to any and all who can help!