0

I got wacked with the spyware "Total Security" which shows fake scans etc. What legit remover-tool can I use to get this out? All AV scanners refuse to remove it.

  • Just out of curiosity, what AV software are you running? –  Aug 28 '09 at 22:04
  • 1
    Possible duplicate of [How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?](https://superuser.com/questions/100360/how-can-i-remove-malicious-spyware-malware-adware-viruses-trojans-or-rootkit) – Giacomo1968 Jul 29 '18 at 17:07

7 Answers7

1

Get a copy of Malwarebytes Anti-Malware from www.malwarebytes.org. Update its definitions and let it run a full scan. It has handled every fake anti-virus/anti-spyware app that I have thrown at it with no problems. Once you've got everything cleaned up, get a copy of Spybot Search & Destroy and use its immunize feature on a regular basis to help keep your PC protected.

TechParadox
  • 486
  • 3
  • 10
0

I'd also recommend installing at least one of the free anti-spyware tools in addition to av software. My own favourite is spybot search and destroy but other people prefer ad-aware. If possible set it to scan on a schedule otherwise run it manually at least once a week.

Col
  • 7,037
  • 21
  • 21
-1

Try this:

http://www.2-spyware.com/remove-total-security.html

Total Security manual removal:

Kill processes:

tsc.exe Sc2C21UvvM.exe

Delete registry values:

HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE

HKEY_CLASSES_ROOT\CLSID{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "1FD92E3F7C34799BFB075C41DA05D1FE"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"

Unregister DLLs:

winsource.dll

Delete files:

tsc.exe

Sc2C21UvvM.exe

winsource.dll

TSC.lnk

Help.lnk

Registration.lnk

Uninstall TSC.lnk

Delete directories:

c:\Program Files\TSC

%UserProfile%\Start Menu\TSC

c:\Program Files\Common Files\System\Uninstall

NOTE: If you're unable to do some of the steps above... boot up in SAFE MODE and try the steps again.

KPWINC
  • 532
  • 4
  • 5
-1

SmitFraudFix should take care of this.

-1

Have you tried Malwarebytes' Anti-Malware?

Try it if you didn't. Don't forget to manually update the virus database (it's only automatic for the paid version).

harrymc
  • 455,459
  • 31
  • 526
  • 924
-1

Malwarebytes' Anti-Malware is very good, so is SuperAntiSpyware (http://www.superantispyware.com). With it, you also have to update manually for the free version.

Niphoet
  • 755
  • 3
  • 9
  • 12
-2

You could try following the instructions on this page:
http://www.wiki-security.com/wiki/Parasite/TotalSecurity

It describes what the malware "Total Security" does, has tools to check if it has infected your computer, and instructions on how to remove it.