Total Secure 2009

Viruses and worms
1

I picked up some Fake Antispyware last night-it identifies itself as Toal Secure 2009. I get numerous popups warning of security problems, hackers, viruses etc. I am unable to access my homepage, or many pages as I am diverted to fake security pages. When I finally decided to follow the instructions to download it Avast stops the download and identified it as Win32:Fraud Tool IU. Unfortunately Avast does not remove whatever I have, nor did Spybot. I have not actually donloaded the Total Secure 2009, but I am so vigorously directed to it I am unable to use the internet. A Google search about it is difficult, as I get some fake results in Google, which directs me back to it. (So it seems). I do not knwo where to go to find a way to remove it.

I am not a computer expert but I can follow directions. How can I remove this?

2

Hi Seabass,

First try a boot time scan with avast! Right click the scanner screen, select ‘schedule a boot time scan’ and reboot when requested.

Try the usual free adware/spyware scanners.

Ad-Aware Free
SUPERAntiSpyware Free
Malwarebytes’ Anti-Malware

Download, install and update the programs. Disconnect from the internet (pull the plug) before running scans in Safe Mode if possible.

Always select the option to quarantine any malware found rather than delete it, then you will be able to restore files or registry entries wrongly identified as malware- a rare but not unknown event for any malware scanner.

3

:slight_smile: Hi :

Sounds like you have what is commonly called a “Rogue” Program and the
PRIMARY program to deal with it is Malwarebytes’ Anti-Malware that has
already been recommended ; IF this program does NOT “solve” the situation,
then it is advisable to use one of Malwarebytes “Other” programs, namely the
FREE “Rogue Remover” .

4

I take it from the comments that Spybot isn’t up to speed on things like this Rogue program?

5

As already advised use either MBAM or another alternative is SmitfraudFix.exe.Here are detailed instructions and downloads

http://www.bleepingcomputer.com/malware-removal/remove-total-secure-2009

6

Unfortunately that appears to be the case nowadays, current option that is clearing most of the problems is MBAM and SAS

7

It completely depends on the version of the infection
I use MBAM first but both Spybot and A-Squared have found infections recently missed by MBAM
There may also be Zlob components in some versions
VUNDO infections also
Hijack This is valuable but does not catch everything- just because ANY of these scanners show clean does not mean that you are
a rootkit scan is also advisable
Avast has one Many also recommend Trend Micro’s for a second opinion
pleast post full logs not just comments on findings (except edit out cookies from Spybot and SAS)
DO NOT DISABLE RESTORE just ignore baddies in RESTORE till you’re clean
you MAY delete temp files with ATF cleaner or CCLeaner

8

Well, MBAW found trojans, but didn’t stop Total Secure 2009, and a boot time scan by Avast didn’t help, but the Smitfraudfix did the trick. Thanks to all comments.

9

nice work
Ya just never know what’s going to work unless you can id the infection ahead of time
post up a hjt if you wish
did you run the trend micro rookit tool in case there is a hidden re-instaler?
see the stickie at the top of this forum

yours is the second thread in the last couple of days where MBAM fdid not catch one of the infections
now that the fire is out you could try a couple of the other scanners and see if they find any fragments/ traces or hopefully not something else. SAS updates several times a day and Spybot on wednasdays so wait till wed for spybot if youchoose to go tht route
have you run secunia software inspector?