Severity scale  
  (72/100)

System Security 2011. How to Remove? (Uninstall Guide)

removal by - -   Also known as SystemSecurity 2011, SystemSecurity2011,System Security 2012 | Type: Rogue Antispyware
12

System Security 2011 is a rogue anti-spyware program that blocks genuine antivirus products and displays fake security alerts to trick you into thinking that you are infected with viruses. This rogue anti-spwyare is from the same family as AV Protection Online and Guard Online. It's promoted via hacked websites, fake virus scanners and trojans. Trojans can enter the system through software vulnerabilties. Once installed, System Security 2011 mimics real security products and performs fake system scans. After the fake scan, it states that your computer is infected with at least 6 viruses and one of them is very dangerous Zeus keylogger that can steal your credit card details. To make this worse, it constantly displays fake security alerts saying that your computer is under attack and not protected against emerging security threats.

Windows Security Alert
To help protect your computer, Windows Firewall has blocked some features of this program.
Do you want to keep blocking this program?
Name: Zeus Trojan
Publisher: Unauthorized
Security Warning
There are critical system files on your computer that were modified by malicious software.
It may cause permanent data loss.
Click here to remove malicious software.

Another very annoying thing about this rogue is that System Security 2011 blocks task manager and other programs to protect itself from being deleted. It simply displays a fake security alert saying that this program is infected.

Warning!
The file "firefox.exe" is infected. Running of application is impossible.
Please activate your antivirus software.

And probably the biggest problem of all is that System Security 2011 can install a rootkit on your computer. This rootkit can block malware removal tools and redirect your search results to malicious or adware websites. However, our System Security 2011 removal tool will help you to remove rootkits and rogue anti-spwyare program from your computer. If you have already purchased this fake program, contact your credit card company and dispute the charges. Then use the removal instructions below.

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall System Security 2011. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall System Security 2011. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
Plumbytes
We are testing Plumbytes's efficiency (2011-11-04 18:53)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2011-11-04 18:53)
Hitman Pro
Webroot SecureAnywhere AntiVirus
System Security 2011 screenshot
System Security 2011 snapshot

System Security 2011 manual removal

Kill processes:
[random].exe
csrss.exe
conhost.exe
Delete registry values:
HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run
?€?gTZqjYCkIrOyAuS8234A=%SystemRoot%\system32\[random]?€?
HKEY_LOCAL_MACHINE\software\microsoft\Windows\CurrentVersion\Run
?€?conhost=%AppData%\Microsoft\csrss.exe?€?
HKEY_LOCAL_MACHINE\system\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings
?€?ProxyEnable=00000001?€ณ
HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings
?€?ProxyEnable=00000001?€ณ
HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings
?€?ProxyServer=http=127.0.0.1:53717?€ณ
HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
?€?DefaultConnectionSettings=3C0000000B0000000?€ฆ?€?
HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
?€?SavedLegacySettings=3C0000006B0000000?€ฆ?€?
HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
?€?%RANDOM%=%AppData%\csrss.exe?€?
HKEY_CURRENT_USER\software\Microsoft\Windows NT\CurrentVersion\Windows
?€?Load=%SystemRoot%\system32\lvvm.exe"
HKEY_CURRENT_USER\software\Microsoft\Windows NT\CurrentVersion\Winlogon
?€?Shell=explorer.exe,%AppData%\conhost.exe"
Delete files:
%SystemRoot%\system32\[random].exe
%SystemRoot%\system32\[random].exe
%AppData%\[random]System Security 2011.ico
%AppData%\conhost.exe
%AppData%\csrss.exe
%AppData%\E84E.1B6
%AppData%\ldr.ini
%AppData%\[random]\
%AppData%\[random]\
%AppData%\[random]\
%AppData%\Microsoft\csrss.exe
%UserProfile%\Desktop\System Security 2011.lnk
%Temp%\4F.tmp
%Temp%\53.tmp
%Temp%\54.tmp
%Temp%\55.tmp
%UserProfile%\Start Menu\Programs\System Security 2011\
%UserProfile%\Start Menu\Programs\System Security 2011\System Security 2011.lnk

Geolocation of System Security 2011

Map reveals the prevalence of System Security 2011. Countries and regions that have been affected the most are: India and United States.

Information updated:

Comments on System Security 2011

0
0
MacGyv
Just wanted to post and pay it forward so to speak, I tried some instructions for the removal of this virus, I had no luck.
I then tried some freeware called Combofix, then used Malewarebytes and this virus was GONE!!!!

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)