Cyber Security

9 October 2009 Rogue 13 Comments

Antivirus application named Cyber Security  is fake software, so obviously it will not do what it claims to be.  It will be present on system even without actually installing the program. Malware authors utilizes a Trojan so that it will spread and infect as many computer as it can while it remains undetected. Cyber Security  tends to update itself once it resides on system that has Internet connection. Linking to a distant network will fetch more threats and malicious files, enough to do more harm. Disabling task manager makes Cyber Security  even harder to remove. Aside from that, control panel, folder options and registry editor are also disabled. All of these are purposely done to make manual removal of Cyber Security  impossible. Any process that belongs to antivirus application are in peril. Either ending it or put on hold makes the security program unusable.

You don’t need a program like Cyber Security to fix what you thought was annoyances caused by harmful virus. Because Cyber Security  is the virus itself trying to make you believe that it was useful software.  Not only that it is introduced on some web sites, but also endorsed on fake warning and messages. Removing Cyber Security  will result to a better computer operation. This is because there is no other virus present on the computer other than Cyber Security  itself.

Follow removal guides below and download recommended program to get rid of the malware and other types of threats inside the computer.

Screen Shot Image:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Cyber Security Removal Procedures

Cyber Security REMOVAL TOOL:
1. Download removal software and save it on your Desktop.
2. After downloading, double-click on to install the application.
3. Follow the prompts and install as “default” only
4. If it prompts to update the database after installation, please proceed.

5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished, click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart the computer.

Note: Cyber Security virus may prevent mbam-setup.exe from downloading and running. You can download and rename this program from a different computer before running it on infected system.

MANUAL REMOVAL PROCEDURE:
1. Press Ctrl+Alt+Del on keyboard to stop process associated to “Cyber Security”. When Windows Task Manager opens, go to Processes Tab and find and end the following process:
cs.exe, tsc.exe

2. You need to update your installed antivirus application to have the latest database.

3. Thoroughly scan the system and any detected threats must be removed. If removal is prohibited, it is best to quarantine the infected item. Manually locating and deleting of malicious files should also be performed. Please see files below that are related to Cyber Security Virus.

4. Registry entries created by Cyber Security must also be removed from the Windows system. Please refer below for entries associated to the rogue program.
- For Windows 2000/XP: Go to Start > Run, type “regedit” on dialog box then press Enter on keyboard.
- For Windows Vista/7: Go to Start > Search Program and Files, type “regedit” and press Enter.

5. Exit registry editor.

6. Get rid of Cyber Security start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. A windows containing System Configuration Utility will be launched. Go to Startup tab and uncheck the following Start-up item(s):
cs.exe, tsc.exe

7. Click Apply and restart Windows.

Technical Details and Additional Information:

Malicious Files Added by Cyber Security
c:\Documents and Settings\All Users\Start Menu\CS
c:\Documents and Settings\All Users\Start Menu\CS\Computer Scan.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Cyber Security.lnk
c:\Program Files\Common Files\CSUninstall
c:\Program Files\CS
c:\Program Files\CS\tsc.exe
C:\Program Files\CSec\
C:\Program Files\CSec\cs.exe
c:\WINDOWS\system32\iehelpmod.dll

Cyber Security Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “CS”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run “CSec”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\uninstall\CS
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}