Security Central

Updated: February 14, 2012 Rogue 24 Comments

Security Central appears to provide real-time protection once installed on the computer. But in reality, this piece is another creation of rogue developers who also produce XP Police Antivirus. Security Central is a reinvented version. This new variant is presented with a new graphical user interface and much more dangerous than its previous forms. Typically, Security Central virus is obtained when a result from fake online virus scanner site is executed. The action may download and installed the rogue application on visitor’s computer unattended. As soon as it reaches the system, it quickly modify Windows registry to give itself an unmanned start when Windows is begins to initialize.

Common symptoms of Security Central that are very visible may include the following:

  • Excessive pop-up alerts and warning messages.
  • Automatic virus-scan after Windows operating system is loaded.
  • Internet browser redirection where-in search result is pointed to unwanted web sites.

Furthermore, Security Central frequently issue a number of fake security report that aims to trick user and make them believe that system si severely infected. Sample message are:

Security Central Firewall Alert
Your computer is being attacked from a remote machine!
Block Internet access to your computer to prevent system infection.

Security Central
Your computer is under the infections threat. Run instant shield protection to safe your data and prevent internet access to your credit card information. Select this to run instant shield.

Security Central Firewall Alert
Warning
Keylogger activity detected!
Your account in social network is under attack. Click here to block unauthorized modification by removing threats (Recommended).

It is vital to remove Security Central virus immediately before any further damage can be performed on compromised system. Follow the procedures below to eliminate the malware together with files it has dropped on the computer.

Screen Shot Images:

 

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

[cf]regis[/cf] [cf]files[/cf]

How to Remove Security Central

Restore Windows Components

If "Security Central" enters your system, there is a big chance that Windows files, registry entries and other essential components are also infected. System Restore can reinstate clean system files by restoring the configuration to an earlier date. If you have a saved restore point before this virus infiltrates the computer, please restore Windows to previous settings.

Manual Removal Procedure

1. Press Ctrl+Alt+Del on keyboard to stop the process associated to "Security Central". When Windows Task Manager opens, go to Processes tab. Find and end this process.
(random characters).exe

2. You need to update your installed antivirus software. Please connect to the Internet and download the most recent database. This is a one-click process from your AV program’s console.

3. Thoroughly scan the computer and remove any threats found by your antivirus program. If delete option is not available, your best next choice is to quarantine the infected file. There is also a need to manually locate and delete malicious files. Please see the file section for items that are relevant to Security Central.

4. Next, you need to remove registry entries created by Security Central. Please refer to registry section to view entries related to the rogue program.
- (Windows 2000/XP) Go to Start > Run, type "regedit" on dialog box then press Enter on keyboard.
- (Windows Vista/7) Go to Start > Search Program and Files, type "regedit" and press Enter.

5. Exit registry editor when you are done.

6. Get rid of Security Central start-up entry by going to Start > Run, type msconfig on the "Open" dialog box. It will launch a new window containing System Configuration Utility. Click on the Startup tab and uncheck the following item.
(random characters).exe

7. Click Apply. You need to restart the computer.

Security Central Removal Tool

To remove Security Central from your computer completely, we suggest scanning it with Malwarebytes Anti-Malware. This is a free tool. Some Trojans will block the downloading of MBAM to avoid removal. If that happens, download the tool from a clean computer and rename the executable file before executing on the infected machine.

Alternative Removal Method for Security Central

Option 1 : Use Windows System Restore to return Windows to previous state

If Security Central enters the computer, there is a big chance that Windows files, registry entries and other essential components are also infected. System Restore can reinstate clean system files by restoring the configuration to an earlier date. The method also replaces compromised files with a clean version. If you have a saved restore point before Security Central infiltrates the PC, we highly encourage you to execute this procedure if none of the above works. You may proceed with Windows System Restore, click here to see the full procedure.

Option 2 : Security Central manual uninstall guide

IMPORTANT! Manual removal of Security Central requires technical skills. Deleting system files and registry entries by mistake may result to total disability of Windows system. We advise you to perform a backup of registry before proceeding with this guide.

1. Kill any running process that belongs to Security Central.
- Press Ctrl+Alt+Del on your keyboard.
- When Windows Task Manager appears, look for Security Central files (refer to Technical Reference) and click End Process.

End Task

2. Delete all registry entries that belong to this malware.
- Press [Windows Key]+R on your keyboard.
- In the 'Open' dialog box, type regedit and press Enter. This will open registry editor.
- Find and delete registry entries as mentioned in Technical Reference section below.
- Close registry editor. Changes made will be save automatically.

Run Regedit

3. Scan the computer with antivirus program.
- Connect to Internet and open your antivirus software. Please update to obtain the latest database and necessary files.
- Restart the computer in Safe Mode.
- Just before Windows logo begins to load press F8 on your keyboard.
- On Windows Advanced Boot Options, select Safe Mode and press Enter.

4. Delete all files dropped by Security Central.
- While still in Safe Mode, search and delete malicious files. Please refer to 'Technical Reference'. Make sure that you execute 'End Task' first before deleting the file. Otherwise, the system will not let you perform this action.

Technical Reference

Associated Files and Folders:
File Location for Windows Versions:
  • %UserProfile% for Vista/7 user is C:\Users\<Current User> for Windows Vista/7, for Windows XP/2000 this is C:\Documents and Settings\<Current User>.
  • %AppData% for Vista/7 refers to C:\Users\<Current User>\AppData\Roaming, while for Windows XP/2000 user it is C:\Documents and Settings\<Current User>\Application Data.
  • %Temp% refers to C:\Windows\Temp\.
Added Registry Entries: