Security Center (Fake)

22 May 2011 Rogue 1 Comment

Security Center is a potentially unwanted program or also called by security experts as rogue. Reckless users may download this software by visiting contracted web sites. Attackers put up these web sites to spread Security Center virus. It contains a Java Script file that applies a drive-by-download method to each visitor. Fake online virus scanner pages will initiate a virus scan on visiting computers and instantly detect certain kinds on threats. Next, it will advise to get the trial version of Security Center. Once this program is loaded on to the computer, it will alter system settings so that it will run every time you start Windows. Having an entry on the registry will allow the malware to load and take control of the computer. It will end certain process belonging to security software, thus the malware will not be detected and remain hidden on the system.

It has been stated before that rogue programs like Security Center are made in the sole purpose of fooling computer users. It then pushes them to pay for the licensed version of the program. Fake security software is meant to detect threats that do not really exist on the system. In this process, victims will be easily misguided to obtain the paid version and it means revenue for the developers. So instead of following the rogue program’s procedure, immediately download a trusted anti-malware program and run a thorough scan of the computer. You must remove every threats detected by our suggested tool.

Screenshot Image:

Alias: Security .Center

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Security Center Removal Procedures

Manual Removal:
1. Press Ctrl+Alt+Del on keyboard to stop process associated to “Security Center”. When Windows Task Manager opens, go to Processes Tab and find and end the following process:
(random characters).exe

2. You need to update your installed antivirus application to have the latest database.
3. Thoroughly scan the computer and any detected threats must be removed. If removal is prohibited, it is best to quarantine the infected item. Manually locating and deleting of malicious files should also be performed. Please see files below that are related to Security Center Virus.
4. Registry entries created by Security Center must also be remove from the Windows system. Please refer below for entries associated to the rogue program. [how to edit registry]
5. Exit registry editor.
6. Get rid of Security Center start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. A windows containing System Configuration Utility will be launched. Go to Startup tab and uncheck the following Start-up item(s):
(random characters).exe

7. Click Apply and restart Windows.

Security Center Removal Tool:
In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected machine.

Using Portable SuperAntiSpyware:
To thoroughly remove the virus, it is best to do a separate scan of another security program so that other infected files not detected by anti-virus application can be remove as well. Click here to download and run SAS Portable Scanner.

Technical Details and Additional Information:

When Security Center virus is installed, it will continously pop-up fake alerts as an scare tactics to mislead victims:

Security Center
External software tries to control variety of your system files. This may lead to breaking of some data in your system. Click here to protect remote access to your PC & delete these programs.

Security Center
Spyware.IEMonster process is found. The virus is going to send your passwords from Internet browser (Explorer, Mozilla Firefox, Outlook & others) to the third-parties. Click here for further protection of your data with Security Center.

Security Center Firewall Alert
Suspicious activity in your registry system space was detected. Rogue malware detected in your system. Data leaks and system damage are possible. Please use a deep scan option.

Malicious Files Added by Security Center:
c:\Documents and Settings\All Users\Application Data\.dat
c:\Documents and Settings\All Users\Application Data\.ico
c:\Documents and Settings\Bleeping\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Center.lnk
c:\Documents and Settings\Bleeping\Desktop\Security Center.lnk

Security Center Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”