I got wacked with the spyware "Total Security" which shows fake scans etc. What legit remover-tool can I use to get this out? All AV scanners refuse to remove it.
7 Answers
Get a copy of Malwarebytes Anti-Malware from www.malwarebytes.org. Update its definitions and let it run a full scan. It has handled every fake anti-virus/anti-spyware app that I have thrown at it with no problems. Once you've got everything cleaned up, get a copy of Spybot Search & Destroy and use its immunize feature on a regular basis to help keep your PC protected.
I'd also recommend installing at least one of the free anti-spyware tools in addition to av software. My own favourite is spybot search and destroy but other people prefer ad-aware. If possible set it to scan on a schedule otherwise run it manually at least once a week.
Try this:
http://www.2-spyware.com/remove-total-security.html
Total Security manual removal:
Kill processes:
tsc.exe Sc2C21UvvM.exe
Delete registry values:
HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE
HKEY_CLASSES_ROOT\CLSID{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "1FD92E3F7C34799BFB075C41DA05D1FE"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Unregister DLLs:
winsource.dll
Delete files:
tsc.exe
Sc2C21UvvM.exe
winsource.dll
TSC.lnk
Help.lnk
Registration.lnk
Uninstall TSC.lnk
Delete directories:
c:\Program Files\TSC
%UserProfile%\Start Menu\TSC
c:\Program Files\Common Files\System\Uninstall
NOTE: If you're unable to do some of the steps above... boot up in SAFE MODE and try the steps again.
-
I tried this earlier. This seems to be a new variant.– Saif KhanAug 28, 2009 at 21:38
Have you tried Malwarebytes' Anti-Malware?
Try it if you didn't. Don't forget to manually update the virus database (it's only automatic for the paid version).
Malwarebytes' Anti-Malware is very good, so is SuperAntiSpyware (http://www.superantispyware.com). With it, you also have to update manually for the free version.
You could try following the instructions on this page:
http://www.wiki-security.com/wiki/Parasite/TotalSecurity
It describes what the malware "Total Security" does, has tools to check if it has infected your computer, and instructions on how to remove it.
-
1WARNING This looks like a fake site started by the owners of total security.– MGOwenApr 18, 2011 at 9:05