Total Security 2009
What is Total Security 2009
Total Security 2009 is a rogue software. A rogue software application designed to trick users into buying a fake product by using scare tactics. It will bombard you with pop ups in order to try and scam you out of money. This infection can come into after fake video codec installation/adult sites that usually comes with malware.
Aliases : Total Security virus, Total Security 4.52
Infection Type : Rogue Software
Risk Level : Dangerous
System Affected : Windows Operating Systems
Download Removal Utility for Total Security 2009
General Symptoms
- Displays fake warning messages and “Security Center Alert ” popups alerts.
- Flashing icons appear on your system tray (Near of your system clock).
- Hijacked homepage to unknown webpage.
Image of Total Security 2009
Important
If you are unable to run our software in normal mode then please start your computer in SAFE MODE and then run our suggested software to remove the Total Security 2009 Virus.
Manual Removal of Total Security 2009
Still Have Problem? Post the HijackThis log in the forums [ Click Here ]. Our expert team will evaluate and identify your problem and respond you shortly.
_ex-08.exe, sys32_nov.exe, regedit.exe, _ex-68.exe, 9129837.exe, ikowin32.exe, jmncixi.exe, sdra64.exe, annbrfoz0.exe, 12678594.exe, totalvirusprotection.exe
Get rid of Files and Folder ( Help )
C:\WINDOWS\_ex-68.exe
C:\WINDOWS\_ex-08.exe
C:\WINDOWS\9129837.exe
C:\jmncixi.exe
C:\Windows\System32\sdra64.exe
C:\Windows\System32\tajf83ikdmf.dll
C:\WINDOWS\System32\winsource.dll
C:\WINDOWS\system32\sys32_nov.exe
C:\WINDOWS\system32\regedit.exe
C:\Documents and Settings\UserName\Local Settings\Temp\annbrfoz0.exe
C:\Documents and Settings\All Users\Application Data\12678594\12678594.exe [ similier like this ]
C:\Documents and Settings\UserName\Start Menu\Programs\Startup\ikowin32.exe.
C:\Program Files\TotalVirusProtection
C:\Program Files\TotalVirusProtection\TotalVirusProtection.exe
C:\Program Files\TotalVirusProtection\TotalVirusProtection.xml
C:\Program Files\TotalVirusProtection\Uninstall.exe
C:\Program Files\TotalVirusProtection\WebMonitor.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Total Virus Protection.lnk
%UserProfile%\Desktop\Total Virus Protection.lnk
%UserProfile%\Start Menu\Programs\Total Virus Protection
%UserProfile%\Start Menu\Programs\Total Virus Protection\Total Virus Protection.lnk
Delete following folders ( Help )
TotalVirusProtection,
12678594
Delete Registry Values ( Help )
HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE
HKEY_CLASSES_ROOT\CLSID\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “1FD92E3F7C34799BFB075C41DA05D1FE”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
Download Removal Utility for Total Security 2009
Related Files
Other Removal Source, Check Below Links 
August 23rd, 2009 at 5:09 pm
thanks for this nice article.
I found mostly file but when i tried to remove, my computer said used by another person or program. So I download your suggested tool to remove it and I thinks so it worked perfectly, because no more total security virus popups and any kind of alerts.
thank you so much.
August 24th, 2009 at 2:32 am
However, in fairness the manual removal instructions do appear to have worked perfectly for me, so full marks for that.
August 24th, 2009 at 5:37 am
i could not find a single file stated.. this software better work
August 30th, 2009 at 10:53 am
I downloaded the tool but it seems the infection is so far advanced, i can’t even open it to use it! it’s exasperating.
September 16th, 2009 at 4:21 pm
I seem to be experiencing the same problem as Kay. Any suggestions?
September 17th, 2009 at 8:27 pm
The trick is to hit control alt del really soon after startup and go to task manager and delete the “randomnumber”.exe process really quick. Then do a system restore to an earlier date.
September 18th, 2009 at 6:07 am
If you have trouble opening and running programs to remove the virus, end the tsc.exe process from your task manager first, then run the program.
September 20th, 2009 at 12:15 am
I am experiencing the same problem as Kay and Aric, opened task mgr really quickly, but didn’t see “randomnumber.exe” or “tsc.exe” as any processes. I downloaded the tool onto a thumb drive, brought it over to the infected computer, but it won’t let me run it. I can’t get online, or open any of my anti-virus programs. Are there any other names for the processes?
September 21st, 2009 at 1:52 pm
OK IT WORKED IN SAFE MODE. PRESSING F8 WILL ENTERED U IN SAFE MODE.
I WAS ABLE TO RUN REMOVAL UTILITY. THANKS FOR WONDERFUL INFORMATION…………………. THANKS AGAIN
September 23rd, 2009 at 12:01 am
I removed a version of this trojan from a client’s computer yesterday, and there was no winsource.dll file. In its place was the iemodhelp.dll, which is the file that blocks sites in your web browser. I was only able to fully delete it in safe mode. It is located in C:\Windows\System32. Before you delete it you should unregister it by going into the command prompt and navigating to the folder where it is located and typing in “regsvr32 /u iehelpmod.dll”.
September 24th, 2009 at 3:58 am
Only a few of the instructions above worked for me. I tried to install the spyware doc in safemode and use the program but I did not have wireless access so it would check for a new version and was stuck. I was able to (in safe mode) type msconfig. Then unchecked the box with the program that had the numbers and the one that said totalsecurity. I looked for everything the article said and only these things below I was able to find.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
After I restarted and everything was ok. I was able to start the scan with the pctools and it found the infections.
Thanks for all the help either way!
September 27th, 2009 at 3:07 pm
Good baseline info. I went into safe mode & then loaded the software. It appears that all is clear. Thanks for the help!