How to Remove System Security [Removal Guide]

This guide will give you easy instructions on how to remove System Security for free.


What is System Security? (Information)

System Security is a fake security software which uses fraudulent strategies by displaying false or exaggerated security issues on your computer rather than any legitimate ones to coerce you into purchasing their software.


System Security Screenshots:

---

Follow these instructions to continue:

1. Please download Malwarebytes' Anti-Malware.

If you are having problems downloading from the link above, click here:

Spoiler :

2. Extract the file and install Malwarebytes' Anti-Malware by double clicking on winlogon.exe.

3. Once installed, navigate to C:\Program Files\Malwarebytes' Anti-Malware\ and rename to mbam to winlogon. Open winlogon.

4. Malwarebytes' Anti-Malware will automatically update itself after the install, you can press the OK button to close that box and you will now be at the main program as shown below.

If you are having problems with the updater, you can use this link to manually update Malwarebytes' Anti-Malware with the latest database



5. Close ALL open Windows, Programs, File or Folders.

6. Make sure you are on the Scanner tab. Select Perform quick scan then click the Scan button as shown above.

7. Malwarebytes' Anti-Malware will now start scanning your computer for infected files as shown below.



8. When the scan is finished a message box will appear, click Ok to continue.

9. Click Show Results.


10. You will now be presented with a screen showing you the malware infections like shown below. Yours may look different depending on the infection you have.

11. Click on Remove seletced


12. When removing the files, Malwarebytes' Anti-Malware may require you to restart the computer in order to do a complete removal. If it dȋsplay a message stating that it needs to restart, please allow it to do so.

13. After that you can close the Malwarebytes' Anti-Malware window, your computer is now cleaned.

To protect your computer from future threats like this, you may want to consider purchasing the Pro version of Malwarebytes' Anti-Malware with real-time protection from this link.

---

If you are still experiencing problems or difficulties following this guide or require any assistance removing this software, please post your questions in our Virus, Spyware & Malware Removal forums for free help.

You have to be logged in to post questions. Registration is free. By registering you are privileged to other virus removal resources in future.

Last edited by Doctor Inferno on 8th January 2010, 9:49 am; edited 25 times in total (Reason for editing : Information Update)

Thanks this helped me a lot

Thank you so much it worked! Registered here just to say thanks. :smile2:

I have used this removal tool but when you restart the computer it comes right back. I need some help. I am not that knowlegable with removing files and working w/register. thanks

mwallace wrote:

I have used this removal tool but when you restart the computer it comes right back. I need some help. I am not that knowlegable with removing files and working w/register. thanks

Belahzur wrote:

Hello mwallace

Please read here and post a Hijack This log in the Malware removal and Hijack This logs section.
http://www.geekpolice.net/malware-removal-hijackthis-logs-f11/read-this-before-posting-t3821.htm

I did everything which includes, Anti Malware, spyhunter, spydoctor, antispyware, avast, and even the regedit trick. It keeps coming back. There is nothing you can do. I am now going to uninstall/reinstall windows xp and pray that it is gone. I won't be suprised if it is still there. This SYSTEM SECURITY is something more that just rogueware or whatever it is people may want to name the latest PC flaw. Dont bother wasting your computer's resources downloading all the latest spyware killer programs. They are all worthless. Just burn everything to dvd/cd that you really want and kiss the rest of your files goodbye. And when you are finished reinstalling your system, but your PC on ebay and buy a MAC. Sorry about this negativity but i have been at this for 3 days now.
Later

thunderkat211 wrote:

I did everything which includes, Anti Malware, spyhunter, spydoctor, antispyware, avast, and even the regedit trick. It keeps coming back. There is nothing you can do. I am now going to uninstall/reinstall windows xp and pray that it is gone. I won't be suprised if it is still there. This SYSTEM SECURITY is something more that just rogueware or whatever it is people may want to name the latest PC flaw. Dont bother wasting your computer's resources downloading all the latest spyware killer programs. They are all worthless. Just burn everything to dvd/cd that you really want and kiss the rest of your files goodbye. And when you are finished reinstalling your system, but your PC on ebay and buy a MAC. Sorry about this negativity but i have been at this for 3 days now.
Later

Please read here and post a Hijack This log in the Malware removal and Hijack This logs section.
http://www.geekpolice.net/malware-removal-hijackthis-logs-f11/read-this-before-posting-t3821.htm

The version I found had the following numbers 2146056633.exe. The way I found it was through other web page (anti spyware 101). The numbers for the executable file on that page are different (5386543871..). This version won't allow the installation of antyspyware/antivirus programs it just shuts them down. Even it shuts off the browser if you are downloading them directly from either Mozilla or IE.

With the information from the mentioned place the folders were the files were locate were identified and deleted. (Documents and Settings\allusers\applicationdata). This was not enough to get rid of what was causing the installation rejection of anti virus/spyware programs.

I tried to install Malawarebytes in Safe mode with networking and had the same problem it rejected installation. I proceded to start in safe mode and was able to install Malawarebytes although I could not update the program.

A quick scan was launched that identified a lot of Adwares, Rogues including system security. These were all removed with Malawarebytes.

This was not enough yet and computer was shutdown and started again in normal mode to get latest updates. After this it was shutdown again and started in safe mode to run a full scan with the latest updates. I am waiting from the results of this but I think it is working.
Thanks

Last edited by Norgard on 13th January 2009, 4:08 pm; edited 1 time in total

Hello.
Please read my above reply from the last user and post a Hijack This log.

The last Malwarebyte run finally fixed the problem since I can see Mcafee running. (Thats the only useful purpose it has right now). I think it has been cured. I can post in Hijacthis the log files from Malwarebytes and also the Hijackthis list as well however this will be the one after the Malwarebytes scan that might not be useful to you.
Thanks for such a superb software.

Hello.
Any log is a start, then we can make sure it's gone.

If you have XP then i can help well it mite work for Vista but i had system security stuck on my comp. And what I did was go to the start menu, all programs, accessories, system tools, system restore. And from there you click the first one selected that says "restore computer to an earlier time" (before you go system security) then like it says select a bold date. then hit next and just follow it through. So at the end your comp. should go to shut down mode and it will restore then and restart and your comp should be fine! Well let me know if that helps any of you wahoo's out there.


:Clapping:

And I honestly think that all of you that buy this stuff or download this stuff to remove system security you are just wasting our time for god sake the person trying to help it possibly trying to give you an actual product (but really isn't) they name it that when its actually a virus. So please dont waste time or money downloading this stuff.

Downloading what? Malwarebyte's Antimalware is free. Your username is also not allowed, please check your PM.

But doing what i said only works if one of the bold dates are a day before you got system security. Oh and by the way this would probably work for all virus stuff. unless your comp. if f*#* and can't do jack then idk what to say you can try what i said on vista comps. or just search system restore.

Hey there! I'm not very clever when it comes to my computor! sorry about that! I've followed your steps on getting rid of System Security, but it wont let me do anything, so how do I get to use anything I download to help if I cant open it up to eventually scan! What should I do...Please!!!
Kenneth

Kenneth Meyer wrote:

Hey there! I'm not very clever when it comes to my computor! sorry about that! I've followed your steps on getting rid of System Security, but it wont let me do anything, so how do I get to use anything I download to help if I cant open it up to eventually scan! What should I do...Please!!!
Kenneth

We can help you remove it in another way. Please read this: http://www.geekpolice.net/-t3821.htm

And post your HijackThis log here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/

You will be assisted from there.

It works! Hallelujah... it works, and it is free. Thank you, geekpolice.net for bringing my nightmare to an end. After trying 5-6 removal downloads, your's is the first to work. Use it, share it, and get rid of System security. Never open mispelled messages on facebook. That is how this all started.

Help nothing above works ! ! I definately have this virus or malware.

I can't open any of the above devices

Just want to thank you guys from the bottom of my un-geeky heart.

My son picked up the worm this morning from Facebook, and I was lucky enough to stumble on your site tonight. Had to copy & paste your URL into the address bar, because the SS2009 was redirecting me all over the place when I tried to click on the Google links to sites that addressed it. I downloaded Malwarebytes, and it worked the first time. I'm going to pass your site on to everybody in my address book, and come pay-day, I'll click on your "help us" link. Thanks again. It's nice to not have to click off the false warnings every two minutes!!!!

is this free im downloading right now pleas if it isnt could someone tell me where i could find free spyware remover this antivirus system pro makes me want to put a few rounds of buckshot through my monitor

Anybody unable to run the tools, please read this: http://www.geekpolice.net/-t3821.htm

And post your HijackThis log here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/ We will help you from there.

Hi, I just got this System Security on my desktop (I am on my laptop right now), and it disables me from running any program, opening task manager, or opening a browser, although I can open a folder and go to a website through that. (I am running XP)

I tried to download Malwarebytes onto that computer but it won't let me run it. at one point it froze so I am trying to boot it up again but it doesn't completely. I get to a black screen and can only see my mouse arrow. I was going to do the hijackthis thing but I can't get on and I don't know if it would let me run it.

(Oh, I did safe mode and was able to run AVG but it didn't find anything).

UPDATE: Ok i can get on to the website now and go to download hijackthis, but I can't run it.

UPDATE 2: Now I just got the blue screen

quickstopme wrote:

Hi, I just got this System Security on my desktop (I am on my laptop right now), and it disables me from running any program, opening task manager, or opening a browser, although I can open a folder and go to a website through that. (I am running XP)

I tried to download Malwarebytes onto that computer but it won't let me run it. at one point it froze so I am trying to boot it up again but it doesn't completely. I get to a black screen and can only see my mouse arrow. I was going to do the hijackthis thing but I can't get on and I don't know if it would let me run it.

(Oh, I did safe mode and was able to run AVG but it didn't find anything).

UPDATE: Ok i can get on to the website now and go to download hijackthis, but I can't run it.

UPDATE 2: Now I just got the blue screen

Please download SilentRunners from here:
http://www.silentrunners.org/Silent%20Runners.zip
Unzip it to the desktop and double-click on it. If you get any kind of warning message about scripts, please choose to allow the script to run. When the scan is finished, a message will pop up and a logfile will have been created on the desktop. Please post the entire contents of this logfile for me to see.

System Security has taken over and will not allow me to run any programs. Where does it hide so that I can manualy delete it?

Not sure where my other reply went about where I am at now. Anyways I can use programs and internet (on firefox, havent figured out how to get IE to work again yet), except nothing happens when I try to run hijackthis or malwarebytes. So I have now tried Silent Runners. Not sure how long that is suppose to take.

I have done lots of scans with Adaware, AVG and now Microsofts malicious something or other removal tool. But it seems the trojans are not being removed. I am no longer receiving nasty pop ups or wallpapers, I have gotten past the black screen, and can run programs and internet. I just cant run the two I mentioned and I can't use search engines, they just go blank. So I hope I can get you some information soon.

Thanks for your help, hope to get back to you soon.

Your post is still there, just up a little.
Anyway, we have found a way to beat this, I've found a hole in this that I can use and kill it.

Please open a topic in the malware removal area, and I'll help you there.

msbglarry wrote:

System Security has taken over and will not allow me to run any programs. Where does it hide so that I can manualy delete it?

Save yourself the time. I tried to delete in manually from a post I've found on another forum..it won't let you delete it because it is running. :-(

Damn, it says its infected like all my other programs....i really need to use my comp and this stupid program has to mess up my comp...plz someone help!!

hi i cant open hijack this
can someone help me?

in fact i cant open anything
i'm surprised my internet explorer is working
i cant open any other program at all
please help me guys
thanks

Hello Ryan,

Please open a new topic here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/

You will be helped from there.

It won't let me open Internet explorer, everything I do it says warning application cannot be executed. The file tfswctrl.exe is infected please activate your antivirus software.
It will not let me open anything.

Procaps123, please open a new topic here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/

You will be helped from there.

@Doc - Add the new hole to this guide? rename MBAM setup file to winlogon and it works, then do the same for the actual program file.

I have this virus on my comp... it blocks all programs, task manager and whatever else i try to run such as firefox. I have tried to run anivirus from boot mini windows... nothing works... help plz

I TAKE MY HAT OFF TO U BRO!!! I GOT RID OF THAT SYSTEM SECURITY VIRUS 2 QUICK. THANKS FOR THE INFO!!!

Can only access the infected computer from Safe Mode which does not give full access to the internet even when that option is used. So, I need a local, manual program to use to remove System Secuiity, which came in by the way by posing as a Windows Secuirty Update, any recomendations?

Hello christinenj,

Boot into Safe Mode with Networking. There will be internet access from there.

As I said in my original comments, Safe Mode even with internet option, is hijacked - do not have full use. Therefore, virus does not allow launch of antisypware exec files. Interrupts them, gives error that system administrator has placed controls, etc.

I have isolated the hidden files. Other sites say to change the file extensions from exe using the rename option. However, the virus files I have do not have any extensions in their name. When show properties, it says exec in the Type inforamtion.l

I am guessing that I need to get into view properties, click security, click advanced and change the controls, but am not sure to change to what. Any ideas?

Once I can neutralize the virus, then I can run spyware to remove it.

Hello,

Please open a new topic here: http://www.geekpolice.net/virus-spyware-malware-removal-f11/

We will help you from there.

Hey so I could not run the program "Malware-bytes anti-malware" Got the message can not execute from this dumb program. I followed your link to post a HJT log, but when I scan and save a log, it wont allow Wordpad to run to bring up the log.... seriously getting frustrated

Hi, my neighbors comp (XP) has this System Security thing that wont go away after she downloaded something... She can't run ANY program. Its stops every action. Can't install Malware, will only let me open folders, cant run or install anything. Even on the internet, it will let me go to whatever site or search 1 time but after that nothing will open/run. How do I get rid of this?? Ideas?

Everybody with problems following this guide, please open a new topic here:

http://www.geekpolice.net/virus-spyware-malware-removal-f11/

Ran into this issue and needed to be resolved quickly. Came across the link and downloaded the app. Installed per instructions and ran. It immediatly found the problems and removed. System back up and running without a restore. Big thanks!! I normally dont sign up in the forums, but had to add this reply.

please help i have that system security virus and its driving me crazy i tried to download the app but it wont let me i wish the person who created this virus was right beside me................................

I had to register just to say this.....this worked for me and worked well, you do NOT know how frustrated I was. Tried solutions from other websites, but no dice. This one takes the cake! Thanks guys.

Hi,
Sorry to bother. But, I have installed the Malwarebytes program.
I was wondering am I supposed to keep scanning because I have scanned and rebooted 2348356734580 gajillion times. For instance last night, I had 73 infected objects. Then after 5 rebootings or so I had 35.
Today again after much rebooting I have 18.
Now, I have not gone anywhere from there. It is driving me nuts >>;
I really need help Dx I am getting blamed for this problem at home T__T

Hello,

Please open a new topic here:

http://www.geekpolice.net/virus-spyware-malware-removal-f11/

We will help you from there.