System Security

1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on mbam-setup.exe to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart your computer.

Note: System Security may prevent mbam-setup.exe from downloading and running. You can download and rename this program from a different computer before running it on infected system.

Used this solution this morning - it works

thnx for the software!

I ran this yesterday (mbam-setup.exe) it did not clean up 100% when I restarted my computer this malware was back. I can’t get it off, any suggestions

I have norton anti virus and it hasnt detected this virus. every time i restart my computer system security shows up. will Malwarebytes’ Anti-Malware work? please get back to me asap and let me know. thank you

I used Windows Defender to find and remove this malicous pest.

how do i remove secruity systems scan off my comp..it always pops up whenever im doing something on my laptop

how do i remove secruity systems scan off my laptop.pops up everytime i do anything on my laptop

Great result got rid of system security 4 me on xp , done my head in before hand

what an annoying bit of malware! great advice, did the job. thx

The best and quickest solution I found to this nasty little problem. Thanks!

I tried mbam.exe. In fact I had to rename it to make it run since it apparently was blocked by som malware. But the problem now is that the update process is also blocked - som I cannot get the latest update/protection. So System Security is not removed!
How to get around this?

Same as Jan Ling. I did the rename, but I cannot get the installed program to run, or the update.

same thing as jan ling and john matthew. renamed it but it’s still blocked from running. any suggestions? Thanks

Thank you I used this software - it work!!!!!

Used this this morning on XP. Did the trick in no time excellant thankyou.

Excellent. Thank You

[...] is a part of the counterfeit program System Security. zserv.Transponder.Trojan will be detected as a present threat that has to be removed using only [...]

Thanks so much for this solutions. . . .System security was a major piece of work and pain.. . . . ***Sigh. . . majorly relieved.

Try using the task manager to shut it down manually that what i did,look for the task called tmpb or tmpc with a squilly line next to it,stop the process then search the computer for the file PERFETCH delet this file, then search and delete the tmp files,try to install the program after that and make it snappy,it will return soon

i have tried all of the above and still have not got rid of this..any other suggestions?

i hve dwnloaded malware but its nt runnin wat 2 do??????????????/

Tried the .exe download. The dialogue box to start the process doesn’t stay visible long enough to press the continue or next button.

Did the job perfectly as easy as 1, 2, 3.

Thanks

i bought the system security for my computer for protection off virus and it does not appear on my computer ..what can i do to get it back or any number i can call for informacion?

Try downloading and running the program while in safe mode. Make sure you let the program run its entire course (over 1/2 hour).

I already had malware bytes but it just doesn’t recognise this virus with the black and yellow sheild, H>E>L>P

It doesn’t work. Can anybody tell me the other way to remove system security. It still disturbing me.

Thanks so much for the instructions on how to get rid of this annoying System Security bug. Downloading Anti-Malware did the job. Thanks again!

thanks………. for this solution

What caused this bug? My son was on the computer when it started. I have Norton’s antivirus protection.

The malware was installed when I accidentally clicked on an ad on Facebook. This could possibly be the cause.

Thank you for the solusion, works good, only needed to change the name of the program to instal and run.
Problem fixt.

If you have XP then i can help well it mite work for Vista but i had system security stuck on my comp. And what I did was go to the start menu, all programs, accessories, system tools, system restore. And from there you click the first one selected that says “restore computer to an earlier time” (before you go system security) then like it says select a bold date. then hit next and just follow it through. So at the end your comp. should go to shut down mode and it will restore then and restart and your comp should be fine! Well let me know if that helps any of you wahoo’s out there.

I honestly think that all of you that buy this stuff or download this stuff to remove system security you are just wasting our time for god sake the person trying to help it possibly trying to give you an actual product (but really isn’t) they name it that when its actually a virus. So please dont waste time or money downloading this stuff.

David,
Which solution worked, and how? What program name did you change? I cannot get rid of this darn System Security. Malware didn’t work. It said that it remove the files, but it keeps popping up. Somebody said to remove it from “Shortcut” but I don’t know what/where that is. Help!

Tried it with XP. No luck. Anybody else have a successful alternative?

I have this System Security popping up constantly on my PC! I can’t remove it. I have McAfee and I still can’t get rid of it. what can i do!! I’m scared to be on the internet because it’s saying i have a virus. I downloaded Spy doctor but it didn’;t remove it

THe post by Dont Mess With Me - it worked, quick and easy. After spending a whole day and downloading yet another anti-virus (that did not work), this did the trick. Thanks!!

Avast anti-virus got rid of it for me after trying just about everything else…including Malwarebytes / Antimalware…….

At first it did not work…I had to boot up in safe-mode and run Avast from there….good luck…I really thought I was gonna have to buy a new CPU…System Security sucks!!!….Oh…and I got it from an infected mp3 at Limewire.com

Hello everyone i have the same problem as everyone i hope it works for me and other persons i just want to warn you all that there is a other virus called

antivirus 360 watch out for this one its same as system security but more anoying

oh and thx for the information everyone!!!

the post from Don’t Mess With Me, did not work for me. any other suggestions?

cant get anything to open, no ctrl alt del. to try and close the malwear. cant open system restore, dl’d avast and the other anti virus cant get either to open up. tryed renaming programs and no luck HELP HELP HELP

Am having problems as well This one is tricky. No alt ctrl delete, no msconfig, cant install malware bytes….

I managed to download malwarebytes but could not install it. I was able to start computer in safe mode (Press F8 on system start up) and then install and run Malware bytes from there. It is now in the middle of the scan and finding several things. I will reply later if it was successful or not.

OK! Yes, after a long scan i rebooted and the problem was fixed! For those of you who cant start malwarebytes in normal mode boot up in safemode and try. I did a full system scan and it fixed it. The version I downloaded today from the link here did not require an update to fix it so dont worry about not being able to update it. Hope this helps some!

I have to remove junk like this for a living. Mostly, it is the user who is at fault by using the computer for free personal entertainment. This stuff mostly has to be manually installed or it comes piggy back with other programs or music or a fake screen saying you need codecs to view something. The only cure for sure is just to wipe and reload the windows and start from there. Using Norton or Mc Affee are probably the most useless programs you can have. Why? A virus program is only good for 3 months before the bad guys learn how to get around it. Those protection programs are replaced every year, so you will collect infections and not know since you will scan clean. Daily updates will not cover this. You have to have a new program written to look for the newest of bugs. Kaspersky Internet Security is normally replaced 4 times a year and it is free to you. You buy time, but never the program. I helped to bring this program to American for this reason. Now you can buy it anywhere. This bug you are talking about rewrites the Windows. Removing the bug does not put Windows back to where it was. The best solution is to reload and do it better the next time around as a learning lesson. I hope this helps you folks.

This System Security virus is a nasty and fraudulant thing. It blocks your USB ports to stop you backing up your PC, it removes Cntl-Alt-Delete rights and blocks the Malwarebytes’ Anti-Malware (mbam-setup.exe) software from running (even if you change its name).

To fix:
(1) Down load the Malwarebytes’ Anti-Malware software
(2) Save it to your desktop
(3) Reboot and start up in “Safe Mode” as Hito mentions above
(4) I just did this for a friend and he had 92 file infections!
(5) Follow Hito’s instructions and it should be fixed.

Best of luck

Don’tmesswithme” solution worked…..safemode,all programs,accesories,systemrestore…..after restart, system security was gone, i ran my anti spyware (Xoftse…..great!)….thnx don’tmess. it’s time for the slack-jawed, lipped-strumming morons that create these malwares to be classified as terrorists and prosecuted as such……good luck, all!

Can anyone please explain to me how to start up in “safe mode”? (pressing F8 on system start up didn’t work…unless I’m doing it wrong) I have the system security virus on my computer and have tried many ways to get rid of it but the virus will not even let me open up ANY files. I’m going to try the advice from Hito & ChrisR-NZ but am having trouble figuring out how to start up in safe mode. Thanks

I just had this virus today and I did what Hito and ChrisR-NZ suggested and it worked perfectly. It took about an hour and a half for the scan to complete but it was worth it.

Took the advice of Hito & ChrisR-NZ and it WORKED!!!!!

To fix:
(1) Down load the Malwarebytes’ Anti-Malware software
(2) Save it to your desktop
(3) Reboot and start up in “Safe Mode” as Hito mentions above
(4) Run the program & it should work
(5) I just did myself about 5 minutes ago

(it only took about 10 minutes for me)

Ok. I had the system security virus that would not let you do anything. So, I started computer in safe mode by pressing F8 continuously at start up. Then I went to system restore and restored my computer to April 1st. It took a while to do the restore. But, so far it is gone. Hope this helps.

very assnine virus. you need to change properties in the virus itself, then reboot and your programs will work then do a scan and find the rest of it and delete it.

A.O.A guyzzz..:)…!!!
After a long exploration of a whole day got rid of dis annoying virus… just wat u hav to do is..
1) Right click on the shortcut on desktop.
2) Click the properties n copy the target. . (n Haan!! if u couldn’t fynd shortcut just try to check in”C:Documents and SettingsAll UsersApplication Data” path….)
3) Open dat path..
4) Click on “tools” on menu bar of folder n den “folder options”
5) Click on the “view” tab…n den uncheck the “Hide extensions for known file type”.
6) u’ll fynd unknwn mst prob 2 folders(naming 16223 etc) in which will b exe,zip n some other xtension files..
7) Just rename dere xtensions to .txt, even to .zip folder too..
8) N den restart ur pc..n delete all ov the stuff u changed in .txt
U would b got rid ov dat virus.. InshaAllah Talla…
Best ov luck…
Do tell me does it work for u or nt coz atleast it worked fyn with me…
Allah Hafiz…

I had this too, to the point where I couldn’t open any executable files other than internet explorer. What I did was went to “search” and looked for anything called “system security” under “all files and folders.” Once I found them, I sent everything related to it to the recycling bin. Next I went to start>all programs>accessories>system tools>system restore. Now it worked and I was able to restore to a date before I had the virus. Not sure if it will work for everyone, but might be worth a shot. Good luck!

Hi, Thx for info, it’s working.

I BEAT IT! There’s a simple fix!

First off, this was the nastiest virus I’ve ever dealt with. And I fully support the idea of hunting these people down and trying them as terrorists. Or better yet just wipe them out with a Predator drone. Seriously. That’s how mad I am.

This thing blocked my anti-spyware, blocked task manager, blocked firefox, blocked system restore, blocked the malware download that worked for some people and generally made life hell.

Here’s how you can beat it (this was for Windows XP on a networked computer being used off network):
* Open my computer –> C drive –> Documents and Settings –> All Users –> Application Data (you may have to set your preferences to view hidden folders to see this)
* You should see 1 or 2 folders that are just a bunch of numbers. View by details and you’ll see that the “date modified” coincides with when your misery began.
* DON’T TRY TO OPEN OR DELETE THE FOLDERS. I made that mistake and discovered this dang virus adapts and starts shutting down stuff that you’re using to try to stop it.
* Right-click on the suspect folder and choose EXPLORE.
* You’ll see a file that ends with .exe
* rename the file and change exe to txt
* Restart.

That’s it. NOTHING else worked for me. Hope this helps.

Hey…….tried a ton of different stuff to get rid of this pain in the A**……nothing worked until i found this malwarebytes……worked AWSOME!…..virus gone……download it to desktop…….then open it in safemode…….thanks alot!

Windows Defender (free from Microsoft) will get rid of this. You may need to boot in safe mode with networking in order to allow you to get it downloaded (since this pest prevents a lot of activity types). Download and then update to get latest. This thing hides (in my friend’s case) in All Users temp data area.

A.O.A guyzzz.…!!!
hav gvn u this suggestions, havn u guyz tried dat….no need for internet or any thing elz or not even need to download any software…but for XP or SP pack 2 users…..
”
1) Right click on the shortcut of dat “system security” on desktop.
2) Click “shortcut ” the properties n copy the target. . (n Haan!! if u couldn’t fynd shortcut just try to check in”C:Documents and SettingsAll UsersApplication Data” path….)
3) Open dat path..
4) Click on “tools” on menu bar of folder n den “folder options”
5) Click on the “view” tab…n den uncheck the “Hide extensions for known file type”.
6) u’ll fynd unknwn mst prob 2 folders(naming 16223 etc) in which will b exe,zip n some other xtension files..
7) Just rename dere xtensions to .txt, even to .zip folder too..
8) N den restart ur pc..n delete all ov the stuff u changed in .txt
n den scan ur pc datz it…
”
U would b got rid ov dat virus.. InshaAllah Talla…
Best ov luck…
Do tell me does it work for u or nt coz atleast it worked fyn with me…
Allah Hafiz…

I FOUND A DIFFERENT AND MUCH EASIER WAY TO GET RID OF THE SYSTEM SECURITY VIRUS WITHOUT HAVING TO DOWNLOAD ANYTHING!!.
My brothers laptop got this pesky virus yesterday. It is a mean little one. He is running Windows Vista O/S. After doing some searching online on another laptop about this, I found alot of ways to remove it. The way I did it I could not find it online, so I hope this helps out. After I did it I could not find any instance of the virus in the places they said to look. Since the virus attacks all .exe files, preventing you from opening firewall, defender, and so on, you can’t just click on Windows defender and open it. The easy trick I found was this: 1-Click on the start button/orb. 2-In the start search box type in “defender”. 3-In the results up top highlight “Windows Defender”. DO NOT CLICK ON DEFENDER NORMALLY it will not open, instead right click and choose “RUN AS ADMINISTRATOR”. 4-When the UAC (User Account Control) dialogue box appears, choose “ALLOW”. This will open Windows Defender. Defender will then run and find the virus and delete it. Now this worked for me and I hope by passing it on, it will work for you without having to buy any additional software to get rid of it.

Ok. So I ran Windows Defender while in Safe Mode, but it did not find anything? I’m running the scan again but what if it doesn’t find anything again? I haven’t tried the System Restore option yet so hopefully that will do the trick.

Victorious …….. that worked for me thanks

none of the above worked for me. I found the folder c:\\windows\prefetch with the files, but they seem to remake themselves, even after I rename and delete them.
The programs stop me from running a virus scan or adware removal programs. I’ve tried in safe mode as well as regular.

I also tried restoring to previous date, but it won’t allow me to do so.

Any other ideas?

By the way, how do I turn off the invisible mode of a folder? I didn’t see a “preference” folder as mentioned.

Victorious - you totally rock. Nothing else was working but your suggestion worked!

Victorious’ fix worked perfectly, thanks a lot. Normally I’d just use MBAM, but System Security kept preventing me from running .exes by telling me that they were “infected.” Thankfully I could still open Windows Explorer. Definitely one of the tougher malware/viruses I’ve come across lately.

I tried a bunch of rescue CDs - Kaspersky, BitDefender etc… They didn’t remove System Security. I tried Victorious’ simple fix and after an agonizing 4 days the solution worked!

Worked great allthough keeping my fingers crossed. That system security virus is a pain in the &$%!!! I preformed all the tasks in safe mode and so far so good. Thanks so much.

Many, many thanks for this help!
Worked great, very bad virus Rogue.Multiple.H

Yuck! Cannot use any exe and no real internet access.
Had to go to safe mode and manually type in site.

Malawarebytes is excellent software!

Good advice

Jeff

Victorious!!

Indeed, worked perfectly for me!!!

Many thanks.

Yeah, we just got it fixed!! Thanks for all of the advice. We tried everything to get rid of it, including trying an uninstall. The virus was preventing everything from being opened except the Internet, so we couldn’t do an uninstall. We also attempted to backup the registry before attempting to do anything, but it was not accessible. Hito’s advice (et al)worked for us too.

We:
(1) Downloaded the Malwarebytes’ Anti-Malware software to a different computer, renamed it and then used a flash drive to save it onto the desktop of the infected computer

(2) Rebooted and started up in “Safe Mode” (hit F8 continuously to get the option for Safe Mode) as Hito mentioned above

(3) We did a full scan and it took 1.5 hours, there were 18 infections

(4) We checked “remove all infected” even though it looked like Microsoft Word and some other Office programs were infected

(5) Computer is running great now. We downloaded some additional free anti-virus protection that a friend suggested called Avast

Hope all works out well for you too!!

Got this virus in one of my computers by accidentally clicking an ad on facebook.

Program removed it just fine.

Thanks

i tried what Victorious and Faiza did! THANKS! it wouldnt even lemme run malware in safe mode anyways but i found that s***. althought it didnt show that exe. file but search for the file Av.exe or ad.exe one of those was the name of the file i dont rmemeber now lol.. but change exe to txt. and delete the file that contains the name prefetch also. i found that in c:\windows\prefetch there you will find that odd number with 166……exe change that to txt to. restart it should work but just follow what vict and fai did. THANKS GUYS! dont forget to delete it after you restart. btw allw as done in safemode

What a peace of work that virus is. I was able to get to my control panel and set up a back up restore point to get online,down loaded software removel tool ,cleaned every thing up works great I went ahead and bought the full version.

Victorious, I just want to say Thank You very much. I’ve tried so many methods and when I did it the way you did - it worked. Thank you again. I was getting ready to go out of my mind tryin to get rid of that virus.

OUCH!!!!!
I did everything that everyone has posted, but still having no luck.
This thing has got me good. I can only open a few things in safe mode. I can not open the malware in any form (safe,windows,memory stick) it works on my labtop though.
when starting in normal it use to pop up the system security thing right away…….now it doesn’t do that…..it will just free.
And it won’t even give me a date for a system restore….that is apperently unavailable. I’ve read everywhere on the web about this, and right now seems to me I have the worst of it so far.
I’m really stuck, can anyone help??

Thank you I used this software - it worked…

THANK YOU VICTORIUS!! This was the most insidious malware I’ve encountered—disabling system restore, Control-Alt-Delete, Windows Update, and Norton. I could not launch the mbam.exe file because no .exe’s could be launched. I did exactly what Victorius said and it worked! Thanks again!!

Thanks Victorious!
Yours was the only solution for me.

im sure this is good but the system security i have is pot of control everything and anything i try to do to delete it it somehow stops it i really need help very very badly it is destorying my computer help!!!!!!

Thanks Victorious and others,

That worked. Once the files were renamed, I could delete them, then run a number of other tools to clean out the remaining traces.

W.

Thanks, great advice and programme. What a litle bugger system security is!

Hi Guys

Wow!!!!

Faiza’s way of removing out this bugger worked well and thanks to him it is the simplest just copied below the same.

A.O.A guyzzz.…!!!
hav gvn u this suggestions, havn u guyz tried dat….no need for internet or any thing elz or not even need to download any software…but for XP or SP pack 2 users…..
”
1) Right click on the shortcut of dat “system security” on desktop.
2) Click “shortcut ” the properties n copy the target. . (n Haan!! if u couldn’t fynd shortcut just try to check in”C:Documents and SettingsAll UsersApplication Data” path….)
3) Open dat path..
4) Click on “tools” on menu bar of folder n den “folder options”
5) Click on the “view” tab…n den uncheck the “Hide extensions for known file type”.
6) u’ll fynd unknwn mst prob 2 folders(naming 16223 etc) in which will b exe,zip n some other xtension files..
7) Just rename dere xtensions to .txt, even to .zip folder too..
8) N den restart ur pc..n delete all ov the stuff u changed in .txt
n den scan ur pc datz it…
”
have good time

ONLY worked with Vic’s way. Thank You

My son’s computer has the issue. Tryed renaming folder’s. I believe one was missed by his step dad. The virus deleted windows. The computer is a millenium edition xp dell. It disables any program being opened. Task manager, add and remove programs, etc. Any ideas. I have no idea whether it was my 15 year olds fault or another. I have six kids, and this is the second computer loss this week. The other is a temporary until a relatively cheap laptop charger can be found. We have been hit hard by the recession, and I would be greatful as what to do to fix this. Please, Anyone, help. This is super frustrating, because I could not afford virus software let alone paying the scam artist right now. I have been working my fingers to the bone. Please help me, and thankyou to the person who does.

Thanks VICTORIOUS, I have been fighting with this virus for days and had tried everything possible. It had locked me out of absolutely everything. NO SAFE MODE, No CTRL ALT DEL, Could not run any programs or scanners even when renamed, I could not even get in to change the settings to view hidden folders to even look for numbered folders. I finally removed the hard drive and slaved it to another computer and then followed VICTORIOUS’s instructions to change the numbered.exe file to .txt. I then placed the drive back into the original computer and was able to now scan with Malwarebytes and Defender. WOW, this one was nasty…. And it keeps getting smarter. Thanks to all

Thanks a Million VICTORIOUS!

I really didn’t have an idea what i was up against and through research i then understood. When i saw a few people thanking ya for the suggestion I decided to try it myself and it worked INSTANTLY. To the others that may use the suggestion I hope it works and follow it exaclty how it’s stated. I hope the best. Once again thanks again.

please help me im trying to open my melware and i cant it tell me that i cant open the applicatin and my virus is system sicurity

VICTORIOUS! THANK YOU, BUT I COULDNT CHANGE THE FILE FROM EXE TO TXT. SO I WENT TO THE PROPERTIES OF THEM AN CHANGE THEM TO READ ONLY AN NOW MY COMPUTER WORKS… AGAIN THANK YOU, I THOUGHT MY COMPUTER WAS DOOMED..

I’ve tried everything but I cant even get into Windows now…

First tried what Victory said, but this didn’t work out, so I looked up the “Prefetch” folder and renamed every file in this folder to .txt

After that I tried to reboot but now I can’t even start Windows anymore…
Tried the safe mode but that didn’t work.

Could somebody PLEASE help me, I’ve got a lot of mp3’s and pictures on my computer which I don’t want to loose…!!

SUCCESS!!!
I followed the exact instructions and it worked on my first scan. Thank goodness. That’s a nasty little bugger that scared the bejeezes outta me. It took over my computer at about 11 pm and now here I am at 5 am typing this with a clean computer. Some Friday night eh?

Thanks Webmaster and Malwarebytes !!! Kiss my #%$ Security System Virus !!!

Chalk one up for the good guys.

All I did was this….

Start your machine. Immediately when you see your background and no icons have shown up yet (while windows is still loading stuff) hit Ctr-Alt-Dlt. Click on the Image Name heading. This should list all programs alphabetically. As soon as to see the file 133#### (or whatever it is called….mine was a number string that started with 133) at the top, select it and end process. Go to the folder “C:Documents and Settings/All Users/Application Data/133#####”. Delete the entire folder and then empty the recycle bin. Restart your PC

Worked for me.

My Brother had this malware/virus problem on his computer, i am the families computer tech so i did some research, after reading all these entries (and God love some of you i just feel sorry for) if you don’t know what you’re doing or do not have an experienced computer tech in you family DO NOT try to fix this sort of problem yourself, turn off the pc and look up solutions or call your ISP, secondly for God’s sake DO NOT open files from ppl you do not know, be smart and cautious on the internet and Lastly invest the money in a quality anti-virus / antispyware program all these “FREE” programs remind me of the Saying “you get what you pay for” so if you value your data invest in a quality program, i use Norton 360 myself and haven’t encountered any problems (knock on wood) also invest in a slave drive USB/eSata drive even a Large Thumb / Flash Drive and BACKUP your prized and valued data onto a secured drive. and lastly i walked my brother through

VICTORIOUS! says:
May 25, 2009 at 6:07 am

suggestion (listed above) and it has worked so far, afterward don’t forget to delete the files and empty recycle bin, reboot and run a quality anti - -virus/malware/spyware program. good luck.

My cousin got this prgram as a virus from a website and the first thing I tried to do was install malwarebytes but apparently the virus she got prevents her from installing any new programs, or running an install wizard of any kind. it won’t let her use firefox, instead it opens internet explorer when she clicks it. Could someone help plz?

I tried Victorious’s solution, but it only worked halfway. I changed those files to .txt files, rebooted, deleted them, rebooted again. The “System Security” popups did not appear anymore, neither did the taskbar icons and their annoying popup bubbles or the scary black screen that said I had been infected with spyware. But I still cannot open Malwarebyte’s Anti-Malware. I click it and nothing happens. I tried this in Safe Mode as well. I cannot go online, either, I suspect the virus is blocking my internet connection. I also tried System Restore, and it’s still saying that I have no restore points.

Also, when I reboot to normal mode now, I get Microsoft Error Report boxes that say “ViewMgr encountered a problem and needed to close.” and “ihaupd32.exe has encountered a problem and needs to close.” I don’t know what any of that means but they did not appear before I had the virus or even before I followed Victorious’s steps. Please help.

Here’s what I did to fix it:

What seemed to work for me was just going to C:\Documents and Settings\All Users\Application Data and deleting the folder titled “13…..” I also deleted the files marked on the day I got the malware in C:\windows\prefetch, and I ran and updated Malwarebytes Anti-Malware. It was only after I deleted the folder that everything was back to normal.

Hope it helps. It does seem like what works for one person won’t necessarily work for another.

I tried following Victorious’s steps, which worked only to a point. After following Victorious’s steps, the pop-ups and warning bubbles no longer appeared on my desktop, and my background no longer turned black with red letters. However, I am still unable to open nearly everything. I have no Internet access, my System Restore still has no restore points, and most importantly, I still cannot open Malwarebyte’s Anti-Malware. So my computer is basically still crippled, and the only good thing is that those fake virus scan windows are not popping up any longer.

I was looking through my C drive, and at the bottom are a bunch of .exe and other files that look kind of suspicious. They were created the day I got the virus, with names like lmkgwrym.exe, evdcq.exe, errigh.exe, luqkal.exe, mcogk.exe, nnphrv.exe, ohhvpdqo.exe, qeabenoy.exe. Two of them (lmkgwrym.exe and qeabenoy.exe) have the description of “Free Software Promotion.” Should I delete these files?

And any other help would he appreciated. I’ve tried virtually all instructions above and am at the situation I am right now.

Facebook could be the cause, because I disable the anti virus thing when I go there to get the site to work. How many of you use Facebook, or have kids that use it?

OK, so I used the rename the files bit but the hidden folders the people mentioned were no where to be found. I deleted the stuff that was there and rebooted- I can run everything now, but a Microsoft error report keeps cropping up about 3 secs after I close the last one.

All is says is The system has recovered from a serious error.
A log has been created.
Send, Don’t Send

How do I get rid of that? Is there still bits of virus on my comp. causing this? I dl’ed Windows Defender, hoping that helps- and I agree with the guy that said that the creators should be attacked by predator drones.

Faiza’s directions worked beautifully! Since I was unable to go to Control Panel, System Restore, etc. this was the only way to get the program to stop running. now that I am able to get online I will download the malware program. Thanks again, Faiza!

It worked great for me I ran the scan in Safe-mode with networking to prevent the virus from stopping the set up. Give that a try!

I used the solution that Faiza posted. It worked!!!

My computer was infected with the same virus. It has disabled my antivirus and everything else.
The solution was: First disable system restore!! as this virus uses system restore to pop up again and again…
Restart the computer in safe mode (by pressing F8 key during startup repeatedly) and running avg antivirus scan. after the scan completes and delets the virus.. goto control panel> add remove program> uninstall system security software from there.
Then goto program files and delete the folder named 12346 something.. i dont remember
then goto temporary folder and delete everything in it.
also type “msconfig” in run command and disable a program named 12346 something from startup!!

here you are with complete recovery..
Please rescan your computer in normal mode with avg free antivirus.. other antivirus may also work but i am having this one only!!

regards
Muza
15-JULY-2009

After somethime system recovery virus may change the file names so be aware!!!

I think i have an updated form of this virus, i have tried everything i can think of to get rid of it, i cannot install software or disable my system restore if i try i get this “Windows cannot open file, Rundll32.dll”

Everytime i try to open system properties

After having read most of the comments and tryed almost everything in desperation, I used Malwarebites on safe mode, it detected all the malware installed by codecwmv-3.5.exe and quarantined it.
It’s necessary to delete all files including the initial file with Codedwmv that is not detected as Malware.

I advise you to not make a reboot but to turn off computer, wait a few seconds (30s) and then restart again.

This Trojan creates a file on Recycle started with an S followed by a series of numbers and does not allow us to delet it unless you change propreties on the folder.

It calls several files on start up that are located on Windows/system32 namely AVR09.exe; Winupdate.exe; winhelper.dll and uses the fake Critical_warning.html as desktop image.

It changes also all parameters on registry from 0 to 1 in order to hyjack some utilities like regedit, msconfig and others that became unavailable, and also configures the files to start on begining.

Malwarebytes indicates the full key when detects it.

Hope that this helps someone in dispair.

Regards

I was able to get some programs up and running but it wont let me run any spyware scanners, it shuts em down

remove esse virus pra mim

Victorious! I want to give you a shout out. After trying everything else short of flinging my desk top out of the second story window and setting fire to it…you came up with a simple solution and it was amazing how easy and fast it worked.

I have an XP and I have avira virus and malwarebytes anti malware as well as superanti spyware. I run these programs regularly. I can’t tell you how I got the System Security virus or whatever it other than by trying to earn money by doing surveys at a particular website. I’ve had nothing but problems. Last night, the computer started acting funny such as when I would click on a certain site it would redirect me elsewhere. So I just got annoyed and shut it down.

This morning around 6ish I got up and turned the computer on. All of a sudden I’m hit with this blue background with writing and in my icon at the lower right hand corner the black and yellow icon kept popping up every minute telling me it was cleaning my pc as it was infected and wanted me to pay 50 something dollars to pay to get rid of it.

The first thing I did was control panel and delete the program. I did this but it still existed. Then I tried to run my malwarebytes program. It was running fine when all of a sudden the screen turned black and it restarted. I tried to run it again after it started back up, but it would not let me. The System Security (SS) claimed it blocked access. I tried the Virus software and the SS said the same thing about that. In fact, it started going through a list of my programs claiming it would not let me open any of them. I even tried Task Manager but the few ways I tried would not let me.

I tried to run in safe mode. F8 but it would not work for me. It was as if everything was disabled. Then I went online looking for answers. Most every website stopped working for me and gave me an Internet Error. This little demon worked fast. In a matter of 5 hours, I was at my wits end thinking I lost everything.

Until…I read Victorious idea. Just find the SS which wasn’t difficult at all and rename the exe to txt. That was it. Simple and beautiful. I deleted it all and rebooted. It was gone. :)

My comp is back working great. I ran all of my software and it’s clean.

Thank you, thank you, thank you. :)

i really like the software thanks! teh leet!

this programme wont download ie only 99% downloads so cant run it, i need help fast! system security 4.52 has taken over my computers windows xp

ps i tried SAFE MODE ie pressing key F8 and it dod not make me safe..it didnt work

This virus has completely hijacked my system. I can’t see anything on my deskstop. No icons, no start button. Just the Windows XP logo on the bootm right side. Tried rebooting in Safe Mode, with or w/o Networking, also tried Safe Mode to open to the last configuration that worked. Nothing. IT is blank!!!

Can’t do any of the suggestions recommeded since I am not able to go anywhere on the computer. Help!

So I tried everything on here and I got it to stop popping up. But now I can’t scan my computer because when I try using safe mode a bunch of lines saying “multi disk…windows/system32″ show up. Then under normal startup i get notifications that I have corrupt files and it says to run chkdsk. Then my screen turns completely black after a few minutes and I have to manually restart the computer. I tried system restore but for some reason there are no restore points. PLEASE HELP!!

My computer caught a trojan virus that my Windows Defender picked up right away. I had my Windows Defender scan my computer several times and each time I found a trojan and removed it. After about 3 scans, my Windows Defender can’t find any malware, but I’m still having problems with my computer:

-My background has changed to all blue, no image, text or anything, just all blue.

-When I right-click the background, go to Properties, then Desktop, it says that my background image is “critical_warning.html”. I can’t change the image at all.

-My Task Manager is disabled and I can’t enable it.

Other than that, nothing else seems to be wrong. I’ve tried all of the suggestions listed above, but none of them work. I haven’t fully tried Victorious’ method because I don’t know how to view my hidden folders.

Can anyone help?

Hi,

I had the system security virus. I renamed the application to .txt and it worked fine. To view the hidden files, go to tools, folder options, view and tick show hidden files and folders.

I deleted the numbered folder and all is ok. Thanks Victorious.

Andy.

thank you for your article. i find it after to 1 month… good evening.

thank you for your article. i find it after to 1 month… good evening.your

Thanks to Victorious and the others who simply said to find the offending file and rename. I did it by right clicking on the system security icon on my desktop and then clicking properties. Then I clicked on find target and that took me right to 2 files. I changes the names and file extensions and rebooted and everything seems fine. Lucky for me this was only on my child’s computer so I had mine available to search for remedies.

So once this nasty ba^*&()rd is out, what is the recommendation for a security suite? I try to do the one stop shop kinda thing if possible.
Thanks

Duh. Shoulda mentioned that I bought Norton 360, but am having second thoughts since like many of you it did me no good on this one.

Could not remove System Security by running anti-virus or spyware software. Could not access any applications, except for Internet Explorer and My Computer from my desktop.
Downloaded this product, ran it in safe mode on Windows XP and rebooted.
My Windows XP is now working normally!

THANK YOU!

That was the nastiest POS I’ve ever had to dealt with. What seems to have worked for me was downloading Malwarebytes and then rebooting in safe mode. Run the program in safe mode and then restart your computer normally.

hay dose anyone know how to do this for free if so could you e-mail me plz

I was just sick when this hit my computer,I did everything that I knew to do and nothing worked.I had it for 3 days and last night I made up my mind that I was going to fix it some how.I put it in safe mode by shuting it down and tapping F8 while it was coming on,I highlighted safe mode then clicked on restore,checked calendar to an earlier date and when it was done doing it’s thing it was fixed.I installed an anti virus.Hope this helps someone!!!

Needed a 2nd computer to get it, but Malwarebytes’ Anti-Malware installed/run in safe mode did the trick.
Thanks.

The MalwareByte’s Anti-Malware works great! I was struggling for last 3 days with my infected desktop to get rid of the System Security virus. Tried so many freeware solutions without much success. Then I came across this Webpage..followed the steps, and it worked beatifully. Thanks.