Total Security 2009 magically appeared on my computer overnight. It has currently taken over my computer’s background with a lovely message of “Warning! Your’re in danger! Your computer is infected with spyware!” I think the your’re was my first clue that something could possibly be amiss. So I wanted to run Norton to see what had happened. Sadly, my expired subscription to Norton Internet Security had finally caught up with me – or so I thought. It attempted to open task manager to see if I could find the Total Security process to stop it. But it blocked task manager from opening. I also attempted to select Add/Remove Programs from the Control Panel. Control Panel opened but TS blocked Add/Remove Program from opening. I attempted to restart in safe mode, but windows would come to a blue screen that said something about a virus – it wouldn’t stay open long enough for me to read. It would then go back to the mode selection screen…the only workable option was to start windows xp normally. I right clicked the Total Security 2009 icon and selected properties. I then selected “find target…” I attempted to delete the files here. It would not allow me to delete the .exe incarnation of Total Security. So I renamed the file to totalsecurity.exe so that I could find it easier later. I tried to restart my computer again in safemode. It would not work, but when I started in normal mode, the Total Security desktop icon was not operational. The program did not start. I then took the opportunity to download Avast as I had been meaning to for sometime. I restarted the computer and Avast did its boot scan. A few items were found and deleted. However, when windows loaded Total Security was once again in play. I opened the avast Anti-virus. It tested the operating memory/startup items and found something but before I could discover what, the computer crashed. Any help here would be greatly appreciated. The newest incarnation of Total Security is “document and settings/all users/application data/11618284/11618284.exe” and there are a couple of other small files with it.
I just had avast scan the above mentioned folder and it can back clean. ???
install, update, run quick scan. fix all found items, reboot if necessary. if total security doesn’t allow the installer to run, try renaming the file.
after reboot, do a full system scan. fix all found items, reboot if necessary.
turn off and on system restore :
Turn OFF System Restore.
* On the Desktop, right-click My Computer.
* Click Properties.
* Click the System Restore tab.
* Check Turn off System Restore.
* Click Apply, and then click OK.
Restart your computer.
Turn ON System Restore.
* On the Desktop, right-click My Computer.
* Click Properties.
* Click the System Restore tab.
* UN-Check Turn off System Restore.
* Click Apply, and then click OK.
The latest, reliable, “Removal Guide” for “Total Security” is at http://www.bleepingcomputer.com/virus-removal/remove-total-security
starting with “Automated Removal Instructions for Total Security using Malwarebytes’ Anti-Malware” . Since the Task Manager has been “disabled”,
the “process” starts with using the FREE “Process Explorer”, to “kill” some or
all of the following :
tsc.exe .
Sc2C21UvvM.exe .
[RANDOM NUMBER].exe . a bunch of numbers with an .exe at the end.
After this has been done, then hopefully the FREE Version of Malwarebytes
Anti-Malware will be able to get rid of the Rest !?
Anyway, do you have multiple computers connected on the same wireless(Wired also) network as the infected computer is on? If so, DISCONNECT ALL INFECTED COMPUTERS IMMEDIATELY!
I finally had the time to download the malwarebytes program. It worked fine. I did the quick scan, it found some problems, I resolved them, it wanted to reboot, I said sure, and now my laptop restarts to nothing more than my background image. There are no desktop icons, no start bar at the bottom of the screen. I could see my mouse pointer and that’s it. I waited for a good fifteen minutes to see if anything would eventually happen, and nothing. I tried ctrl+alt+del to no avail and eventually resorted to a hard shut down. Windows XP still won’t go to safe mode and loads once again to just my background image and a helpless little mouse pointer.
I don’t remember seeing that as one of the file names. My wife’s laptop (which I’m using at the moment) can burn CDs. Just not sure what my laptop’s doing and if it will read the boot CD.
OK this file is big Print these instruction out so that you know what you are doing. This shoulkd give me the information to figure out what is wrong and mayhap fix it
Two programmes to download
First
ISOBurner this will allow you to burn REATOGO-X-PE ISO to a cd and make it bootable. Just install the programme, from there on in it is fairly automatic. Instructions
Second
[*]Download reatogoBuilder.iso and burn to a CD using ISO Burner. NOTE: This file is 292Mb in size so it may take some time to download.
[*]When downloaded double click and this will then open ISOBurner to burn the file to CD
[*]Reboot your system using the boot CD you just created.
[*]Your system should now display a REATOGO-X-PE desktop.
[*]Double-click on the OTScanItPE icon.
[*]When asked “Do you wish to load the remote registry”, select Yes
[*]When asked “Do you wish to load remote user profile(s) for scanning”, select Yes
[*]Ensure the box “Automatically Load All Remaining Users” is checked and press OK
[*]OTScanIt should now start. Change the following settings
[*]Change Drivers to Non-Microsoft
[*]Under Additional Scans check the following: []Reg - Shell Spawning
[]File - Lop Check
[]File - Purity Scan
[]Evnt - EvtViewer (last 10)[*]Copy and paste the contents of the following into the Custom Scans area.
[*]Press Run Scan to start the scan.
[*]When finished, notepad will open with the scan results. Save the file to a USB drive
[*] Please post the contents of the OtScanIt.txt file in your reply.
Hi all :