Total Security. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - -   Also known as TotalSecurity, Total Security 2009 | Type: Rogue Antispyware
12

Total Security is a rogue anti-spyware application that displays false scan results to convince you that your computer is infected with malware. The rogue program is a clone of another fake spyware remover called System Security. Usually, Total Security is installed through the use of Trojan viruses that display fake security alerts about various infections and security problems. Eventually, TotalSecurity access the system without user’s knowledge and permission. On the other hand, the rogue can be also downloaded and installed manually, but this is less common situation.

Once installed, Total Security performs fake system scan and displays various infections that cannot be removed until you first purchases the program, because trial version is supposedly unable to remove those infections. Actually, these infections do not really exist and are being shown only to scare you hopping that you will buy a license of Total Security 2009. The rogue may also display the Total Security Protection Center window which is very similar to legitimate Windows Security Center notifications. What is more, Total Security terminates popular anti-malware applications when users try to perform system scan. To make things worse, TotalSecurity will constantly display fake security warnings. You may see fake alerts with the following text:

“Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files.Your private information and PC safety is at risk. To get rid of unwanted spyware and keep your computer safe you need to update your current security software. Cleck Yes to download official intrusion detection system (IDS software)”

Fake firewall alerts may also appear.

“Total Security Firewall Alert
Total Security firewall has blocked a program from accessing the Internet
Chrome Internet Browser is infected with worm Lsas.Blaster.Keyloger. This worm is trying to send your credit card details using Chrome Internet Browser to connect to remote host.”

It is obvious, that this parasite should be removed as soon as possible. Please use the removal guide below to remove Total Security manually from the system.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Total Security you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Total Security. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Total Security snapshot
Total Security

Total Security manual removal:

Kill processes:
tsc.exe

Sc2C21UvvM.exe

[RANDOM NUMBER].exe



Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun"[RANDOM NUMBER]" = "%UserProfile%Application Data[RANDOM NUMBER][RANDOM NUMBER].exe"

HKEY_LOCAL_MACHINESOFTWARE[RANDOM NUMBER]"pc[RANDOM NUMBER]ins" = "1"

HKEY_LOCAL_MACHINESOFTWARE[RANDOM NUMBER]

HKEY_CURRENT_USERSoftware1FD92E3F7C34799BFB075C41DA05D1FE

HKEY_CLASSES_ROOTCLSID{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "1FD92E3F7C34799BFB075C41DA05D1FE"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"



Unregister DLLs:
winsource.dll

Delete files:
tsc.exe

Sc2C21UvvM.exe

winsource.dll

TSC.lnk

Help.lnk

Registration.lnk

Uninstall TSC.lnk

[RANDOM NUMBER].exe



Delete directories:
c:Program FilesTSC

%UserProfile%Start MenuTSC

c:Program FilesCommon FilesSystemUninstall

%UserProfile%Application Data[RANDOM NUMBER]

%UserProfile%Application Data[RANDOM NUMBER]pc[RANDOM NUMBER]ins

About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author


  • Guest

    this total security has taken our computer hostage

  • james

    to any of you whose process explorer was denied and declared 'harmful' by TS, rename it “winlogon.exe” and run it, and then continue the process of removing it

    hope i helped

  • LIz

    total security won't let me open task manager and it doesn't appear in my program files! it won't let me install any other anti virus or even windows defender. I don't know what to do! I can't get rid of it!

  • Guest

    we tried renaming process explorer to “winlogon.exe” and it still won't open. Do you have any other suggestions?

  • Guest

    go into safemode with networking (restart computer and press F8 while booting) the perform a system restore to a point where you know it wasnt bothering you yet and then download the remover, that is what i just did and it worked

  • Guest

    I have tried to do this several times and each time my computer says that it cannot be restored to the specific System Checkpoint I picked. Help!

  • Guest

    HELP. it's on my main desktop computer. i can't get it off the machine. each time i select my spyware blaster or firefox to download this software or add/remove programs, it does not let me execute any files. in plain layman terms, how do i remove it? i need help quick. thanks.

  • Guest

    When I arrived at work today, this piece of crap was running. I started in safemode, ran regedit, navigated to HKLMSoftwareMicrosoftCurrentVersionRun and deleted the key for 11062814. After I did that the machine booted up properly, and I was able to run Spybot S&D. Hope this helps.

  • DavidSmith70

    No longer works as of Aug 17 2009, STOPzilla installation is blocked, as is Task Manager, Safe Mode, Malwarebytes, smitfraudfix, etc.

  • Guest

    This is too confusing and not helpful. For example, the guide for unregistering DLLs tells me to enter the location of the DLL. I can't do that if I don't know the location and it cannot be found by searching files and folders. FAIL.

  • rodi

    If Task manager is disabled then download and run this file:
    2-spyware.com/download/task-manager-fix.reg

  • Guest

    total secut=rity blocked any program that tru to uninstall it and i just can not hadle it

  • Guest

    Rename the program to free your computer

  • Radu

    My girlfriends laptop has been recently overrun by this stupid spyware…I have tried to remove it by the methods suggested but to no avail…every time I try running a program it says that the program has been infected and that it does not work…someone Help please! 🙁

  • paby

    reboot the computer loading windows then at loading up items from taskbar simply access direcltly to taskmanager do not let em run.access directly fast to taskmanager and end proccess the random numbers like this 37362821.exe!

  • Guest

    Download Process Explorer. Rename Procexp.exe to iexplore.exe and run the program. Find tsc.exe and terminate this process.

  • Guest

    reboot the computer loading windows then at loading up items from taskbar simply access direcltly to taskmanager do not let em run.access directly fast to taskmanager and end proccess the random numbers like this 37362821.exe..

  • paby

    reboot the computer loading windows then at loading up items from taskbar simply access direcltly to taskmanager do not let em run.access directly fast to taskmanager and end proccess the random numbers like this 37362821.exe..

  • paby

    reboot the computer loading windows then at loading up items from taskbar simply access direcltly to taskmanager do not let em run.access directly fast to taskmanager and end proccess the random numbers like this 37362821.exe..

  • Guest

    my laptop had total security on some how but it is blocking me out of every thing wont let me in task menue control panel or on the net pls help

  • Guest

    deleting 11622504.exe and terminate the process did it for me

  • Guest

    where are you finding the files that need to be deleted?

  • Guest

    Total Security took over everything, the task manager, system restore, run , ie nothing is working! Please help!

  • Guest

    Do as paby says! Works great!

  • Guest

    right, the spyware doctor did not work for me. what worked was: rename the program in the TSC folder from TSC to something random and it will become automatically uninstalled!! SHAZAM!

  • Guest

    i have done the suggestions..why the total security doesn't removed yet?

  • Guest

    Total Security & related co. should be heavily fined for these practies.

  • Guest

    i dont have any of those processes, files, or registry values, not from deleting them, i just dont have them, but total security is still on my computer, how? and how do i get rid of it then?

  • Guest

    i dont wont this scaneerprogram

  • Guest

    Go to Start Menu>Search>For all Files and Folders
    Then type: 10470934.exe and when the computer finds it, delete it, and then remove it from the recycle bin.
    I did that and Total Security was gone

  • Guest

    je desire me desinscrire car ces une erreur que je reçoit celà. merci

  • mr. whatzitooya

    I was wondering if this is free

  • Swede

    Suddenly it disappeared. After a week of disaster. I had tried everything. They're playing with us. Destroy them!

  • Guest

    Still not sure what to do, since I can't acess the internet on the infected computer. I've tried Process Editor, but that fails to even start. What should I do?

  • Guest

    ii hate this SECURITY SYSTEM. this SUCKS.

  • Guest

    this system SUKCS.

  • Guest

    Is the random number you have to look for any random number? I have two numbers in the processes but I don't know which one to end.

  • Guest

    Spybot(last ver: 1.6.2,updated) removes it, hope this helps.
    no problems.

  • Guest

    Thanks Paby. Gettig into task manager at load up b4 total loaded was the answer.
    Ended process of the random numbers worked. Thank again

  • Guest

    I deleted the TSC software and not more scan and pop-up window BUT my IE still got “BLOCK” message!!! ;( what else should I delete. I don't have the random number .exe on my Window Task Manager .. under other name?

  • Guest

    1. start the computer in safe mode (press F8 to select safe mode when the computer boot)

    2. run msconfig and restore to a checkpoint date before the infection date.
    it works.

  • Guest

    this is no better than totql security itself, for it to actually work, i need to pay

  • Alex

    Automatic Total Security removal tool works. I had to run it in safe mode.

  • Guest

    Push CLTR + SHIFT + ESC and Close program tsc.exe … Next use Freeware program : Total Uninstall ..

  • Guest

    You can also restore your computer to an earlier date which is what I did to get rid of this annoying thing

  • Guest

    Total security will not let me run in safe mode, wont let me kill the process, cant do anything. Anything I click on that might help me it shows up for half a sec and than dissappears. Please help.

  • Guest

    total security can be removed by deleting the entire folder name TS in Program Files.
    then delete it in the ADD/REMOVE in Control panel. Hope this help. thank you.

  • Guest

    It may also be in random letters

  • me

    annoying. use onecare.live.com to cure

  • Guest

    tsc.exe ,Sc2C21UvvM.exe , [RANDOM NUMBER].exe from he task manager.
    from program files total security.
    and go to regedit and ctrl+f and type tsc.exe and delete it

  • Guest

    thanks a lot
    great info

  • Guest

    thanks for posting this it probably saved my computer

  • ImSoiljaBoy

    I Know This One Enter This Code Into REg.
    Next It wILL Reove iT
    WNDS-S0DF5–GS5EO-FG14S-2DF8G
    TRY IT!!!

  • Guest

    automatic removal does not work. noway to run the exe due to total security blocking all exe's.

  • Guest

    your manual removal doesNOT work as total security will NOT allow ANY executables to run such as taskmanager, regedit, cmd.exe etc. so now what??????????????????

  • Guest

    I can't get the download posted above to work. TS blocked all exe's. I dunno how to start the manual removal. Can someone help with the manual removal directions????

  • Guest

    …including the task manager…

  • Guest

    is this free or just another attempt to get me to buy something?

  • Guest

    reference to comment 16 – THIS WORKED FOR ME. THANK YOU 16. by . 2009-09-17 07:09:05

    Push CLTR + SHIFT + ESC and Close program tsc.exe … Next use Freeware program : Total Uninstall ..

  • Guest

    That stupid shit blocket all of my applications!!I hate it so much!!!thanks cause it closed all processe…

  • Guest

    And i could even install removal program…Feel like i'm gonna have to do it manually….

  • Guest

    all remarks as:
    run safe mode;
    run ctr/shift/delete
    controlpanel
    = bullshit; this programm do not activitate this programms; or you dont have the answer or the trojan has been developped but old method does not work;
    still waiting good suggestions

  • ITSuperman

    For those who still have trouble with this Adver tool .

    Goto C:program filescommon filesuninstall (double click on the uninstall shortcut)

    Watch this troublemaker go away….

    Hope this helps = )

  • NGN

    Total Security keeps saying that FILE.exe is infected. I can't use MBAM, or download PC Tools. It won't let me rename any files either.

  • Guest

    You are invating my privicy!!!!!!!!!!!

  • Guest

    I do not want your product please remove it immediate.

  • Judith

    Thank you so much, i wasn't able to open anything but internet and itunes.

  • Guest

    Had no tsc.exe on my machine. Had random#.exe and jqs.exe instead hope this helps. I can shut it down and used mbam but it comes back everyday and I have to repeat the process. Rootkit revealer showed nothing it keeps reinstalling. Help!

  • Charlie from NV

    i try to delete some files from the registry, my computer crash, it wont come back to my desktop, WTF is going on??? this troubleshooting is FAKE!!!

  • Guest

    i wanna say thanks for the info. i some how got infected with total security for about 1 week now. i hope this will help remove it

  • Guest

    Hello, I don't remember putting total security on my computer. I put in the activation key that came and it did not work. It showed that I updated in (/2009)
    Please looki into this matter and let me know what I must do.
    Vivian Braxton

  • Guest

    how to delete total security from our pc

  • Louis

    Malwarebytes, google it, a quick scan, and delete it, after that no more traces of it

  • Louis

    I saw someone recommending other antispywares, but some postings say it won't help. Malwarebytes will do it easily, I guess whoever did it is very happy we buy their antispyware softwares because of it

  • Ann

    Malwarebytes will be enough, a quick scan, even on free version, but I just bought it as it seemed to be just great. Take care of p2p, and music downloading in the future

  • James

    Hello the way you have got my posted your done my computer I would not use your software if it was free and you were paying me to do it.

  • chris

    got rid of this thing by stopping random #.exe via task mgr at startup and then deleting every file i could find with that same number, but my spyware programs are still disabled. suggestions?

  • <Guest>chris

    got the program itself off my computer via stopping random # .exe with the task manager at start up & then running a search of every file with that # and deleting it, BUT my all spyware & virus programs are still disabled. suggestions?

  • Guest

    16. by ITSuperman. 2009-09-28 06:09:33

    For those who still have trouble with this Adver tool .

    1) Goto OR RUN C:program (2) filescommon (3) filesuninstall (double click on the uninstall shortcut)

    Watch this troublemaker go away….

    Thank u ITSuperman 4 tip.
    Hope this helps = )

  • Guest

    anyone have luck getting their money back???

  • Guest

    cant get money back, tehy actually charged me again and said it was a credit. now in the hole 99.85 X 2 can anyone help

  • Guest

    Total Security Removal

    Step 1 – Kill Processes – Not active?
    Step 2 – Registry Keys do not exist
    Step 3 – No such DLL

    This is not accurate

  • Guest

    Total Security removal instructions may not work for some of you just because virus constantly changes and files may be different. But in most cases Total Security files should be the same as written above.

  • Guest

    i bought this product and my internet security recognized it as a virus/trojan. how can i get my money back?

  • bob

    thanks man i love you