Personal Security is a misleading anti-spyware application that displays fake security alerts/pop-ups and reports false system security threats or infections to scare you into thinking that your computer is infected with malicious software. PersonalSecurity is a clone of widely spread Cyber Security and Total Security malware. The rogue program simulates a system scan and asks to pay for a full version of Personal Security in order to remove non-exist infections. In fact, the reported security threats or infections are actually either non-existing/harmless files or legitimate software. This malware will likely block real security software to protect itself from being deleted. Most importantly, do not purchase this bogus application and uninstall Personal Security from your computer as soon as possible.
[Figure 1. Personal Security graphical user interface]
Personal Security must be manually installed. Its distribution channels include e-mail, malicious or hacked Web pages, peer-to-peer networks and etc. The scammers also use social engineering to distribute Personal Security infection. Please note that Personal Security disguises itself and usually comes as flash player update/video codec or other supposedly useful software. You shouldn’t install anything from suspicious websites. Otherwise, you can infect your PC with Personal Security or other malware.
To make this scam look more realistic, Personal Security impersonates Windows Security Center. It states that your computer is not protected and that you should activate PersonalSecurity to ensure full system protection. As you may know, the legitimate one does not promote particular anti-virus software. That’s the main difference. The rogue application displays the same infections on every computer randomly. If your computer is infected, you will likely see one of the following: Zlob.PornAdvertiser.ba, Trojan.BAT.Adduser.t, Spyware.IMMonitor, Win32.Rbot.fm, Infostealer.Banker.E, Spyware.IEMoster.d, Trojan.Tooso, Trojan.MailGrabber.s, Trojan.Alg.t, TrsutedAntivirus, SecurePCCleaner, Spyware.007SpySoftware, Spyware.KnownBadSites and etc.
To make things even more complicated, Personal Security will hijack Internet Explorer and displays fake notifications [Figure 2] about possible threats or unsafe websites.
[Figure 2. Personal Security – fake IE warning]
The fake warning states:
However, that’s not all. You will be also flooded will fake security alerts about serious security and privacy issues. Personal Security will displays a fake screen saver that looks like Blue Screen of Death window and stat that SPYWARE.MONSTER.FX_WILD_0x00000000 infection crashed your PC. More fake security alerts read:
If your computer is infected with Personal Security, please use the removal guide below or an automatic removal tool and remove Personal Security from the system manually for free. Do not purchase it! If you have already purchased it, contact your credit card company and dispute the charges. Last, but not least, run a full system scan with a legitimate anti-spyware application to remove the remains or additionally installed malware.
Personal Security manual removal:
Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet Settings5.0User Agentpost platform "WinTSI 01.12.2009"
C:Program FilesCommon FilesPSecurityUninstall
C:Documents and SettingsAll UsersStart MenuPSecurity