Search : in
By :

Total security VIRUS... cant do ANYTHING

Last answer on Nov 1, 2009 5:04:51 pm GMT jazz00, on Aug 15, 2009 2:15:26 am BST 
 Report this message to moderators

Hello,
having a problem with a friends computer.. got total security virus and now cant do anything.. downloaded malwarebytes at an earlier date re named and installed it won run.. cant run task manager get a msg saying "task manager has been disabled by your administrator" , cant run regedit, cant do system restore cant start in safe mode cant copy files to cd to back up cant connect to internet.... HELP PLZZZZ

Configuration: Windows XP
Firefox 3.5.2

Best answers for « total security VIRUS... cant do ANYTHING » in :
[Virus]Removing Total security Show [Virus]Removing Total security Symptoms Removing Total Security Total Security is a fake antivirus application that has for purpose to deceive persons into buying the program. Total Security is often downloaded from websites...
Online scan with Computer Associates ShowOnline scan with Computer Associates Via Internet Explorer and go http://www3.ca.com/securityadvisor/virusinfo/scan.aspx It is important that your browser support the use of activeX contents. Let antivirus update: Check in the...
Antivirus for mobile phone ShowAntivirus for mobile phone Intro Why? Is this necessary? Examples of viruses Some antivirus solutions F-Secure BitDefender Kaspersky Intro Nowadays many persons make use of their iPhone, BlackBerry and other PDAs to browse the...
Disabling security alerts under Vista ShowDisabling security alerts under Vista If you are annoyed by the multiple Security Alert message, you can specify in which cases these messages will appear. The trick requires a modification of the registry, then it would be wise to save...
The Nimda virus ShowIntroduction to the Nimda virus Le Nimda virus (code name W32/Nimda) is a worm which spreads by email. It also has four other ways to spread: The web Shared folders Microsoft IIS security holes File transfer At particular risk are users of...
SD Card (Secure Digital) ShowSecure Digital Secure Digital memory (known as SD or SD Card) is a type of memory card created by Matsushita Electronic, SanDisk and Toshiba in January 2000. Secure Digital memory is a memory specifically developed to meet new safety requirements...
The LovSan/Blaster virus ShowIntroduction to the LovSan virus Appearing in the summer of 2003, LovSan (also known as W32/Lovsan.worm, W32/Lovsan.worm.b, W32.Blaster.Worm, W32/Blaster-B, WORM_MSBLAST.A, MSBLASTER, Win32.Poza, Win32.Posa.Worm, and Win32.Poza.B) is the first...

1

Pcowboy, on Aug 15, 2009 4:51:27 am BST
  • +1

Its probably a rogue spyware or even an adware. you should run one of the following programs. scan your pc and remove the total security fake virus/malware
Malware Bytes
http://www.darfuns.com/download-malwarebytes/
Super Anti Spyware
http://www.darfuns.com/download-super-anti-spyware/

Reply to Pcowboy

2

David Smith 70, on Aug 17, 2009 4:49:36 pm BST

It is not that easy, I am working on a friend's computer with the same infection and Task Manager is disabled, Safe Mode leads to a Blue Screen Of Death, Malwarebytes is blocked, all AV I have tried (smitfraudfix, MS Process Explorer, etc) are blocked. New incarnation I think.

Reply to David Smith 70

3

Joe, on Aug 18, 2009 7:55:25 am BST
  • +11

Follow the Total Security removal instructions here:

http://www.geekpolice.net/...

Reply to Joe

4

Noni, on Aug 19, 2009 5:44:00 am BST
  • +1

The proper way to remove total security 2009 virus
http://www.darfuns.com/spyware-removal/total-secure-2009-sec­urity/

Reply to Noni

5

Ash, on Aug 20, 2009 5:55:10 pm BST
  • +1

You guys are all missing the point here. Malwarebytes and others are not allowed to be run. Regedit, msconfig, even task manager will not open either. In order to do anything, we need to kill the process and there does not seem to be a way to do it.

Reply to Ash

6

Samuelle, on Aug 20, 2009 10:56:34 pm BST

Hi,
Not sure if this will help, I have this problem at the moment and none of the removal step-by-steps have the right file names, but I'm lucky enough to be able to get into regedit and task manager. If you can get in to talk manager maybe through safe mode, the process on mine ran as an eight digit random number, so have al ook for one of those, and at leats you can stop the constant barrage of pop ups.

Reply to Samuelle

7

varjibedian, on Aug 22, 2009 12:30:29 am BST
  • +15

I just recovered from this thing myself. While you can't run any programs, you CAN run windows explorer. (not internet explorer, but the file explorer). Using this, I searched for all exe programs created on today's date - this lead me to the following folder:

c:/documents and settings/all users/application data/10176254

which is where the offending exe file lived. I couldn't delete the exe program, because it was already running, but I was able to rename the folder. Then I rebooted, and apparently the bad startup item couldn't find the exe file anymore, and I was able to run Windows system restore.

Everything appears to be ok now.

Hope this helps,
Varjibedian

Reply to varjibedian

16

gabbi, on Aug 30, 2009 5:39:55 pm BST
  • +2

Thank you so much for putting your answer up here, it was the only one that worked for me, everything else I couldn't do...task manager, safe mode boot, loading anti-virus! A BIG THANK YOU.

Reply to gabbi

27

Guzzi, on Sep 23, 2009 10:06:10 pm BST

It worked :-) :-) :-)

Reply to Guzzi

28

Eric stacy, on Sep 24, 2009 2:36:15 am BST

I am glad it worked for you.
Post an add on comment to this string so everyone can use this fix.
It was relatively easy to follow too.
Glad for you.

Eric Stacy

Reply to Eric stacy

31

adam, on Sep 26, 2009 6:17:57 am BST

Excellent post. I've been fighting this virus for 3 days and I tihnk I'm finally out of the woods.

Another tip. For those of you who can boot into safe mode, do so and then follow the instructions above. Once you've renamed the folder, run a malware bytes scan. This should delete the registry entries that the virus creates. There will be one file it can't delete though. Look for it in the log, the one for me was c:\windows\system32\randomname.dll - once you've located this, rename it. You won't be able to delete it.

Now reboot. The system won't find the dll or folder where the virus resides. Go delete the renamed folder in the application data folder and the renamed dll in the system32 folder. Run another full system scan and you should be fine.

This may help people like me who don't have a system reset point that's recent.

Good luck!

Reply to adam

34

inciter, on Sep 30, 2009 2:10:54 pm BST

LARGE~ SMILE~ Working on system again. What a PITA this one was... For those that cannot see the applications dir goto your tools and change to view hidden files,

Thaks Mate~

Reply to inciter

35

TVA, on Oct 4, 2009 1:11:55 am BST

OMG! Thank you soo much. I thought my desktop was screwed for sure... Good thing i have my laptop to find the solution. :)

Reply to TVA

38

hazzrobb, on Oct 10, 2009 8:29:11 pm BST

Varjibedian, you are a God to rank alongside Slim Jim Baxter. Have had the d**n thing twice now. First time took 4 days to fix (and I like to think I know what I'm doing). This took 10 minutes. Thanks again.

Reply to hazzrobb

41

 abby, on Oct 17, 2009 2:53:35 am BST

THANK YOU!!!!!!

Reply to abby

8

Naz, on Aug 22, 2009 2:55:45 am BST

FIXED!!!

Hi everyone,
I tried all the above instructions above and nothing worked for me. I tried another way and I was able to remove the darn thing.
You need two people in order to do this effectively, and my computer was NOT in safe mode. One person needs to hold down the ctr+alt+shift keys while the other person holds down the del+enter keys. When you hold down the ctr+alt+del keys, task manager comes up for a millisecond and you are not able to select total security and end the task.
What you need to do is be able to hold down and open task manager while at the same time pressing down the shift button in order to select “end task” and also press down the “enter” key in order to select and stop total security.
We did this about 20+ times and finally we were able to end total security.
Hope it helps.

Reply to Naz

9

Canam, on Aug 22, 2009 2:40:22 pm BST

I just got rid of this thing myself. Restarted in SAFE MODE WITH NETWORKING option. Another optin then comes up, "DO YOU WANT TO CONTINUE IN SAFE MODE OR RESTORE TO A PREVIOUS POINT". Just chose to restore to 2 days ago and voile, everthing back to normal and perfect.

Reply to Canam

10

JAMIE, on Aug 23, 2009 3:01:00 pm BST
  • +4

I read all of the above comments and none worked. although, i did use some help from varjibedian. i went to the folder c:/documents and settings/all users like he said but couldnt find any folders called "application data" so i went to tools then folder options and allowed myself to see all of the hidden folders. one of which was a random 8 digit number just like Samuelle says. so i went into task manager and saw the exact same number running already so i removed that process then tryed opening some programs to see if it would stop the annoying random pop ups and it had so i deleted the folder.
if it helps, the folder and process name was "17784534".

Reply to JAMIE

11

bobby, on Aug 23, 2009 4:32:16 pm BST
  • +2

Jamie is correct, i couldn't find application data either so i did what he said and it popped up. I found the 8 digit folder renamed it then restarted my computer, it now works perfectly. You can also delete the renamed folder. i decided to delete and system restore and it works perfect. THANKS FOR THE HELP!

Reply to bobby

12

total remover, on Aug 24, 2009 4:36:13 am BST

I had this same stupid virus.. looks like its even nastier than total antivirus.

i wasn't able to run anything (mbam, super anti-spyware etc) but i was able to run hijackthis v1.99 after i renamed it.

you can download version 1.99 from:

http://majorgeeks.com/HijackThis_d3155.html

You can then analyse the results on:

http://www.hijackthis.de/

This will tell you what to remove.

If you are still having troubles after all this or it is all too hard, then the best option is

http://www.fixedlikemagic.com/

definitely the easiest and most convenient form of professional help available.

Reply to total remover

13

Harry, on Aug 25, 2009 2:22:12 am BST

Total security is a fake antivirus application. I have searched in google by typing "Remove fake antivirus" and there is lot of solution there. I also searched "Total Security Removal guide", there is a lot of manual guide.

Reply to Harry

15

SiLeNCeR, on Aug 30, 2009 5:47:49 am BST
  • +3

Hi people im 12 year old and i just found out how to take off Total Security Off ur computer k........
1.go to my documents
2.go to LOCAL DISK (C:)
3.Open WINDOWS folder
4.Open System32
5.Find TskMgr ( taskmanager)
6.Change its name from Tskmgr to iexplore
7.Open Total Security Program
8.Open iexplore(taskmanager) and right click on Total Security and you'll find (Go To Procces)
9.u find the name of the program (18332654.exe)
10.get a paper and note down its name Then End Process
11.Go to Search->Files and Folders->Down u find ( More Advanced options) click on them all exept last one
12.type the name u noted (18332654.exe) and Search
13. You'll Find it then go to it and Delete it
14.open recycle bin and Delete it Off your computer
15.download AVG 30 day trial its so strong then (Scan Whole Computer)
16.Have Fun <3 u all :)

Reply to SiLeNCeR

17

Hiya, on Aug 30, 2009 11:32:37 pm BST
  • +1

Your so called help is much more complicated than other people on this site such as jamie He helped me lots and I I didn't need to use task manager at all

Reply to Hiya

25

Rajs, on Sep 22, 2009 8:33:49 pm BST

Hey SiLeNCeR,
You rock. Nothing else was working for me. But your little trick is finally letting me run few things.
Thanks a ton.
-R

Reply to Rajs

18

so3, on Aug 31, 2009 3:59:12 pm BST

The best Spyware software is "Spyware Doctor" and you can download from Jordysoft.net. I succeeded in removing many spyware.

Here is the link to the download page http://www.jordysoft.net

Reply to so3

20

chris, on Sep 15, 2009 9:34:01 pm BST

Thanks vardibejian - it worked!

Reply to chris

21

Misa, on Sep 19, 2009 7:18:26 am BST
  • +1

Renaming the 8-digit number's folder worked when nothing else would. Even after showing hidden folders the Application Data folder was not visible, but I had seen the strange 8 digit process running in the task manager before all hell broke loose and was able to search that name and find the folder and files. The number seems to be randomly generated on each person's computer. Thank-you so much, this advice saved my mom's computer!

Reply to Misa

22

Aim, on Sep 19, 2009 2:04:56 pm BST
  • +1

Thanks vardibejian !! Just followed your instructions.

Reply to Aim