Severity scale:  
  (71/100)

Total Security. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - -   Also known as TotalSecurity, Total Security 2009 | Type: Rogue Antispyware

Total Security is a rogue anti-spyware application that displays false scan results to convince you that your computer is infected with malware. The rogue program is a clone of another fake spyware remover called System Security. Usually, Total Security is installed through the use of Trojan viruses that display fake security alerts about various infections and security problems. Eventually, TotalSecurity access the system without user’s knowledge and permission. On the other hand, the rogue can be also downloaded and installed manually, but this is less common situation.

Once installed, Total Security performs fake system scan and displays various infections that cannot be removed until you first purchases the program, because trial version is supposedly unable to remove those infections. Actually, these infections do not really exist and are being shown only to scare you hopping that you will buy a license of Total Security 2009. The rogue may also display the Total Security Protection Center window which is very similar to legitimate Windows Security Center notifications. What is more, Total Security terminates popular anti-malware applications when users try to perform system scan. To make things worse, TotalSecurity will constantly display fake security warnings. You may see fake alerts with the following text:

“Security Monitor: WARNING!
Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files.Your private information and PC safety is at risk. To get rid of unwanted spyware and keep your computer safe you need to update your current security software. Cleck Yes to download official intrusion detection system (IDS software)”

Fake firewall alerts may also appear.

“Total Security Firewall Alert
Total Security firewall has blocked a program from accessing the Internet
Chrome Internet Browser is infected with worm Lsas.Blaster.Keyloger. This worm is trying to send your credit card details using Chrome Internet Browser to connect to remote host.”

It is obvious, that this parasite should be removed as soon as possible. Please use the removal guide below to remove Total Security manually from the system.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Total Security you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Total Security. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.
Press mentions on Reimage
Total Security snapshot
Total Security

Total Security manual removal:

Kill processes:
tsc.exe

Sc2C21UvvM.exe

[RANDOM NUMBER].exe



Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun"[RANDOM NUMBER]" = "%UserProfile%Application Data[RANDOM NUMBER][RANDOM NUMBER].exe"

HKEY_LOCAL_MACHINESOFTWARE[RANDOM NUMBER]"pc[RANDOM NUMBER]ins" = "1"

HKEY_LOCAL_MACHINESOFTWARE[RANDOM NUMBER]

HKEY_CURRENT_USERSoftware1FD92E3F7C34799BFB075C41DA05D1FE

HKEY_CLASSES_ROOTCLSID{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "1FD92E3F7C34799BFB075C41DA05D1FE"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"



Unregister DLLs:
winsource.dll

Delete files:
tsc.exe

Sc2C21UvvM.exe

winsource.dll

TSC.lnk

Help.lnk

Registration.lnk

Uninstall TSC.lnk

[RANDOM NUMBER].exe



Delete directories:
c:Program FilesTSC

%UserProfile%Start MenuTSC

c:Program FilesCommon FilesSystemUninstall

%UserProfile%Application Data[RANDOM NUMBER]

%UserProfile%Application Data[RANDOM NUMBER]pc[RANDOM NUMBER]ins

About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Gabriel E. Hall
About the company Esolutions