Wednesday, June 3, 2009

How to Remove System Security 2009?

System Security 2009 Description

System Security 2009 is a fake antispyware application, which may be secredly installed at your computer by another malware such as Zlob trojan or Vundo trojan. System Security 2009 just imitates the look and feel of a real security application while in fact it is a byproduct of a serious infection:


System Security 2009 is another clone of System Security rogue anti-spyware. It displays fake or exaggerated list of spyware threats and tries to frighten the user into purchasing of the "full" version of that rogue software.

Computers infected with System Security 2009 may have their search results misdirected / redirected to bogus sites, and existing antivirus software may become disabled.

System Security2009 may change desktop wallpaper into the following:


System Security 2009 displays annoying warning messages from the Windows taskbar informing about detected threats. If the user chooses the option to remove detected "threat", he/she will be asked to buy the full version of System Security 2009.

System Security 2009 automatic detection

Suggested System Security 2009 Removal Tool

How to remove System Security 2009 manually

First thing you want to do is to bookmark this page because you will need to refer to it several times duting manual removal (click here to bookmark this page).
You must perform the following tasks to remove System Security 2009 malware manually: stop all malicious processes, unregister malicious DLL files, delete all files and registry keys installed by System Security 2009 files and block System Security 2009 redistribution websites.

During installation System Security 2009 registers itself in the list of installed applications. You can try to remove System Security 2009 using "Control Panel" -> "Add or Remove Programs" utility, however some hidden files may be left behind on the system.

System Security 2009 manual removal instructions

Stop all System Security 2009 malicious processes:
  • 00308937.exe
  • 05643921.exe
  • 13662654.exe
  • 16026564.exe
  • 93672646.exe
  • install.exe

Delete all files installed by System Security 2009:
  • %Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
  • %Documents and Settings%\All Users\Application Data\00308937\00308937.exe
  • %Documents and Settings%\All Users\Application Data\00308937\00308937.glu
  • %Documents and Settings%\All Users\Application Data\00308937\00308937.ini
  • %Documents and Settings%\All Users\Application Data\00308937\config.udb
  • %Documents and Settings%\All Users\Application Data\05643921\pc05643921ins
  • %Documents and Settings%\All Users\Application Data\05643921\05643921.exe
  • %Documents and Settings%\All Users\Application Data\05643921\05643921.glu
  • %Documents and Settings%\All Users\Application Data\05643921\05643921.ini
  • %Documents and Settings%\All Users\Application Data\05643921\config.udb
  • %Documents and Settings%\All Users\Application Data\13662654\pc13662654ins
  • %Documents and Settings%\All Users\Application Data\13662654\13662654.exe
  • %Documents and Settings%\All Users\Application Data\13662654\13662654.glu
  • %Documents and Settings%\All Users\Application Data\13662654\13662654.ini
  • %Documents and Settings%\All Users\Application Data\13662654\config.udb
  • %Documents and Settings%\All Users\Application Data\16026564\pc16026564ins
  • %Documents and Settings%\All Users\Application Data\16026564\16026564.exe
  • %Documents and Settings%\All Users\Application Data\16026564\16026564.glu
  • %Documents and Settings%\All Users\Application Data\16026564\16026564.ini
  • %Documents and Settings%\All Users\Application Data\16026564\config.udb
  • %Documents and Settings%\All Users\Application Data\93672646\pc93672646ins
  • %Documents and Settings%\All Users\Application Data\93672646\93672646.exe
  • %Documents and Settings%\All Users\Application Data\93672646\93672646.glu
  • %Documents and Settings%\All Users\Application Data\93672646\93672646.ini
  • %Documents and Settings%\All Users\Application Data\93672646\config.udb
  • %User Profile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk
  • %User Profile%\Start Menu\Programs\System Security\System Security 2009.lnk
  • %User Profile%\Desktop\System Security 2009.lnk

Delete all registry keys installed by System Security 2009:
  • %HKLM%\Software\00308937
  • %HKLM%\Software\05643921
  • %HKLM%\Software\13662654
  • %HKLM%\Software\16026564
  • %HKLM%\Software\93672646
  • %HKLM%\Software\Microsoft\Windows\CurrentVersion\Run "00308937"
  • %HKLM%\Software\Microsoft\Windows\CurrentVersion\Run "05643921"
  • %HKLM%\Software\Microsoft\Windows\CurrentVersion\Run "13662654"
  • %HKLM%\Software\Microsoft\Windows\CurrentVersion\Run "16026564"
  • %HKLM%\Software\Microsoft\Windows\CurrentVersion\Run "93672646"
  • %HKLM%\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009

Block System Security 2009 redistribution websites:
  • bestcleaner.us
  • besthandycap.com
  • crownsafetytool.com
  • free-web-scaners.info
  • free-webscaners.net
  • freewebmypcscan.com
  • fullandtotalsecurity.com
  • fullpcvirusscan.com
  • fullvirusprotection.com
  • futureinternetsecurity.com
  • getpcguard.com
  • greatvirusscan.com
  • hypersecurityshield.com
  • initialsecurityscan.com
  • interinetskim.com
  • internetsecuritymetrics.com
  • justwebsecurity.com
  • loved-online-tube.com
  • networkstabilityscan.com
  • secureserver4.cc
  • securityonlinesite.com
  • securityscan4you.com
  • securityscanguide.com
  • superiorinternetsecurity.com
  • thesecuritystandart.com
  • totalvirushield.com
  • ultracleaner.biz
  • ultracleaner.us
  • websecuritymaster.com
  • websecurityvoice.com
  • webstoresecurity.com
  • wwwmobilereads.com
  • xvirusdescan.com

Once you complete the above manual removal steps, download this scanner to scan your computer for any System Security 2009 leftovers.

Similar Malware Threats

  • System Security

No comments: