HolidayBuyer's Guide

Spyware, Viruses, & Security forum

General discussion

How to remove Total Security (Uninstall Guide)

by Marianna Schmudlach / March 19, 2009 2:56 PM PDT

What this programs does:

Total Security is a rogue anti-spyware program that is a clone of Antivirus 360. This program is installed via Trojans that display fake security alerts about threats to your computer and then installs Total Security without your permission on to your computer. Once installed, Total Security will scan your computer and display a variety of infections that cannot be removed until you purchase the program. These infections, though, do not really exist and are being shown to scare you into purchasing the program. While running, Total Security will constantly barrage you with nag screens and fake security warnings about problems on your computer. Just like the fake infection results, these alerts are just a tactic being used to scare you into purchasing the program. Last, but not least, you will see a window labeled Total Security Protection Center that impersonates the legitimate Windows Security Center. This protection center states that your computer has no protection and recommends that you purchase Total Security. It goes without saying that you should not purchase anything from this company.

Read more: http://www.bleepingcomputer.com/forums/topic212436.html

Discussion is locked
You are posting a reply to: How to remove Total Security (Uninstall Guide)
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: How to remove Total Security (Uninstall Guide)
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Task Manager Up
by riverSL / September 10, 2009 4:36 AM PDT

But there are none of the processes you list to end showing in the processes window.

Collapse -
Are there any "other strange" processes?
by Marianna Schmudlach / September 10, 2009 5:42 AM PDT
In reply to: Task Manager Up

Must be, otherwise Malwarebytes AntiMalware would be able to run.

Collapse -
Thank You Marianna!
by riverSL / September 10, 2009 6:02 AM PDT

You were correct Malwarebytes AntiMalware did run as you said it would after the Task Manager was opened. Everythin seems to be fine now.

Thank You So Much!

River

Collapse -
Super !
by Marianna Schmudlach / September 10, 2009 6:24 AM PDT
In reply to: Thank You Marianna!

Glad you were able to run MBAM Happy


You Are Very Welcome and keep up the good work Happy

Collapse -
The Task Manager will not Open
by usckb8sgirl / September 16, 2009 3:46 AM PDT

I am having the hardest time with this virus. I am trying all the steps, but it just kind of froze my computer. Nothing will launch except for the Total Security program. Please help. I already downloaded and renamed iexplore.exe. It will not run. I downloaded the other program and nothing.

Collapse -
Nevermind...
by usckb8sgirl / September 16, 2009 4:33 AM PDT

I did it! Thank you sooooo much for the instructions. I feel like a huge weight has lifted off of me. I was worried for a second.

Collapse -
Great Job !
by Marianna Schmudlach / September 16, 2009 5:14 AM PDT
In reply to: Nevermind...

Super duper Happy

You Are Very Welcome.

Collapse -
Total Security HELP!!!!
by jckbre / September 18, 2009 3:31 PM PDT
In reply to: Great Job !

I cannot download anything as TS blocks firefox and IE from working. I tried to d/l to a flash drive and install procex from there and same result, blocked by Total Security. Help. I'm totally frustrated and need help ASAP. I tried to rename procexp on the flash but no matter what I call it TS kills it. Can't download cantt do anything. HElp.

Collapse -
add on
by jckbre / September 18, 2009 3:33 PM PDT

cannot get task manager to open either. TS blocks it too. What else can be doen?

Collapse -
update
by jckbre / September 18, 2009 4:04 PM PDT
In reply to: add on

got task mgr to open by re-booting and hitting ctrl shift esc as soon as things powered up. did not see tsc.exe or the other variants mentioned so I shut down everything that came close or looked weird. I was then able to run malware bytes. It is running now. Hopefully that works. Where does this stuff come from. This is my daughter's computer and I need to know so we can block sites etc.

Collapse -
Would Linux help?
by elderberry22 / September 19, 2009 12:30 AM PDT
In reply to: update

Excuse me for poking in here kind of off-topic, but would installing Linux help me avoid this kind of thing? I have this stupid Total Security thing on my laptop, and I probably will be able to proceed through the steps here to get rid of it. But I think I would like to just avoid it entirely in the future. I don't do anything with my computer but browse the internet. As far as I can tell from reading about it, Linux should be just fine for that. Thanks for any advice you can give me.

Collapse -
NAme change game
by dirtybudha / February 24, 2011 4:01 AM PST

A coworker's bf got on her laptop, XP Total Security. The name, when it runs, is flu.exe. Ironic, I know.

Tried to run the anti-virus they bought, didn't remove it. Windows defender won't come up, as the malware remover suggested is also blocked by the virus.

Gonna have to do a antivirus boot off of a CD. Hope that works.

Collapse -
Are You Asking For Help?
by Carol~ Forum moderator / February 24, 2011 5:00 AM PST
In reply to: NAme change game
Collapse -
Total Security
by AMcCoy09 / September 19, 2009 7:05 AM PDT

I'm battling this Total Security thing as we speak.. I've tried to boot in safe mode so I can run Malwarebytes, but it has done something and my computer won't boot in safe mode at all. It will only boot in normal mode, which enables the viruses to operate and do whatever they're doing.. I also can't get into Regedit to see what's in there.. Nor can I open Task Manager to open, so disabling it is impossible.... Any ideas on how to stop it..?

Collapse -
Total Security issues!!
by wbmason1 / September 19, 2009 12:21 PM PDT
In reply to: Total Security

I have done everything step by step as described above and when I run the malware software, it says there are no issues. Except when I restart the computer, there it is all over again. What am I doing wrong? This thing is driving me crazy!!!!

Thank you in advance for any and all help with this matter.

Collapse -
Total Security
by Jennyr_au1 / September 20, 2009 3:21 AM PDT

I'm the same.....loaded Malware....did the scan....all looked good...did the restart.....and bang.....there it is again... Is there something i missed???

Jenny

Collapse -
Please Try A Second Tool
by Grif Thomas Forum moderator / September 20, 2009 4:13 AM PDT
In reply to: Total Security

Download, install, update, then restart the computer into SAFE MODE.. Once there, run a full system scan using the free SuperAntispyware tool from the link below.. After that's done, after being sure Malwarebytes is fully update, while still in Safe Mode, run a second scan with Malwarebytes.

SUPERAntispyware Removal Tool

Hope this helps.

Grif

Collapse -
Total Security Removal Using Malwarebytes..?
by AMcCoy09 / September 20, 2009 4:20 AM PDT
In reply to: Total Security

That's exactly the same problem I'm having.. I run Malwarebytes, and it finds somewhere between 25 and 147 infected objects.. It removes what it can and needs to remove the rest upon restart.. Then when the computer restarts, something's still in control... Sometimes, when I'm able, I'll run Malwarebytes several times back to back..

Also, I notice that there are either several different Trojabs, or just one that's putting itself in several different places... One was listed in the Logfile 25 times... Does this sound normal..?

Collapse -
It Depends On Where Those Files Are Found
by Grif Thomas Forum moderator / September 20, 2009 4:52 AM PDT

Frequently, the infected files will remain in the C:\Windows\System Volume Information directory.. Since those are the "System Restore" files, they are locked by Windows and scanners generally don't remove them.

If that's the location where your infected files are being found, simply disable System Restore temporarily, then restart the computer and run another scan with Malwarebytes and SuperAntispyware.. Restart the computer and run scans till nothing shows up.. Once that's done, re-enable System Restore.

How To Disable System Restore

Hope this helps.

Grif

Collapse -
Total Security Removal
by wbmason1 / September 20, 2009 10:05 AM PDT

Hi Grif, thanks for the posts and suggestions but it still hasn't worked. =( The one thing I'm noticeing is that when I restart in Safe mode, Total Security doesn't run. It is only showing up when I start up normally. I've done the SUPERAntispyware Removal Tool, I've used the Malewarebyte's Anti-Malware, and now I've disabled System Restore, updated all of them, and restarted in Safe Mode. Ran the 2 programs in Safe Mode and neither of them find the program but as soon as I restart in normal mode, there it is again! I can't make it go away!!! I'm open to any other suggestions you or anyone might have.

Thanks again for all of your suggestions!!!

Collapse -
(NT) As Asked Before, Where Are The Infected Files Located?
by Grif Thomas Forum moderator / September 22, 2009 12:31 AM PDT
In reply to: Total Security Removal
Collapse -
Re: Total Security Removal
by wbmason1 / September 22, 2009 1:04 AM PDT

The file is located in C:\Program Files (x86)\TS.

When I try to delete the file it tells me I don't have permission to do it.

Collapse -
I've Never Seen Such A Folder Name
by Grif Thomas Forum moderator / September 23, 2009 1:38 AM PDT

There should be a C:\Program Files folder but I've not seen a C:\Program Files (x86)\TS folder.. If you've got both, then I'll guess the second one is there as part of the malware but that's something you'll need to determine yourself.

That said, although you haven't told us which operating system you're using, IF you're using Windows XP, your best bet will be to remove it manually by using the Windows XP Recovery Console.. Load the Recovery Console using the instructions in the link below, then delete it manually from the command prompt. If it's not preloaded on your system, you'll need the Windows XP disc to run it.

How to install and use the Recovery Console in Windows XP

Hope this helps.

Grif

Collapse -
It's Window's 64-bit Vista
by wbmason1 / September 23, 2009 1:49 AM PDT

If you're unfamiliar with 64-bit, that's probably why you didn't recognize it. I also found something called "DG.EXE" today, I have no idea what that is either. =(

Thank you for all your help!! It is greatly appreciated!

Collapse -
Google Shows That One As Dangerous
by Grif Thomas Forum moderator / September 23, 2009 11:19 AM PDT

See the link below:

A suggestion:

I've not run this tool on a 64 bit machine but have used it for both Vista and XP 32 bit computers. Please follow the instructions below for creating a running a Rescue Disc from Avira. It will allow you to boot to the disc and run a scan outside of Windows. You'll need to create the disc on a separate "clean" computer..

Avira Rescue Disc Link
http://www.free-av.de/en/tools/12/av...ue_system.html

- place the rescue disc in the infected computer and boot from it. (You'll need to have the BIOS settings so the DVD/CD-Rom drive boots first in the boot order.) When it loads, choose option 1 (Boot from Rescue CD)
- choose English language by using the mouse to select the British flag in the lower left corner.
- If the loading and scanning doesn't start automatically, (it should), then start the scan by click on the "Start Scanner" button at the bottom of the screen.
- If the screen goes black during the scan, you should be able to press the space bar to bring the scan back to view.
-Allow the scan to finish, it takes quite a while, and it should remove or rename the infected files.

After running the scan with the Rescue Disc, then restart the computer into Safe Mode and run Malwarebytes and SuperAntispyware to clean out any remaining junk.

Hope this helps.

Grif

Collapse -
AMcCoy09: Regarding your post in thread "Porn Virus" today..
by Carol~ Forum moderator / September 20, 2009 5:55 AM PDT

You wrote in a post in the thread titled, Porn virus please help! 10 minutes after posting here:

'I've found those same icons on my mother's computer.. She's 62 yrs. old and it's HIGHLY UNLIKELY that she'd be looking at porn..lol Her computer is infected with no telling how many Trojans and other problems. Malwarebytes will usually get rid of most of them, but they still seem to come back sooner or later.. She's on Cable internet, and I'm guessing that it's also why you can leave the computer one minute and it's fine, then turn it back on a little while later and it be full of viruses again.. Been fighting these things for about 3 weeks'

Is this the same problem? And the same computer you're having a problem with?

Carol

Collapse -
Porn Virus
by Pteruko / September 21, 2009 5:26 AM PDT

Re: AMcCoy09: Regarding your post in thread "Porn Virus" today..
by Carol~ - 9/20/09 12:55 PM In reply to: Total Security Removal Using Malwarebytes..? by AMcCoy09
You wrote in a post in the thread titled, Porn virus please help! 10 minutes after posting here:

"'I've found those same icons on my mother's computer.. She's 62 yrs. old and it's HIGHLY UNLIKELY that she'd be looking at porn..lol'"

Your mother may be addicted to Adam Lambert instead, lol!
I got this virus right after I went to "Mjsbigblog - a site about American Idol.

Collapse -
Porn Virus..?
by AMcCoy09 / September 21, 2009 7:28 AM PDT
In reply to: Porn Virus

Lol... Yeah.. Well with her, it's probably more like some cooking show site.. Think she watches Paula Dean all the time... Might've got it from her site...

Collapse -
Disabled Safe Mode, Task Manager, etc.
by Pteruko / September 21, 2009 4:47 AM PDT
In reply to: Total Security

The same thing was happening to me, could not open anything up. The fix for me was to press the Ctrl+Shift+Esc keys to get into Task Manager AS SOON AS my desk top appeared after I booted. It seemed to me that you had to move fast before the virus could load and freeze your computer. When I went to "End Processes", tsc.exe was not listed, so I just ended the ones that looked suspicious as quickly as I could. Sorry, I can't even tell you what their names were now, I was moving so fast. Evidently I selected the right one(s), because the virus warnings did not appear on my desktop. Then I ran a quick scan of Malwarebytes' Anti-Malware that caught it, followed by complete scan and anti-virus scan.
I am not a computer guru, but it worked for me. Hope it works for you!

Collapse -
Process to kill in Task Manager.
by Tampa_Native / September 21, 2009 9:16 AM PDT

For all of us that could not get the applications suggested to run at all, getting Task Manager to open ASAP and killing the process (as mentioned above) worked for me also. I was able to run Malwarebytes after quickly killing a process that appeared to be a series of numbers (may have included letters too), and was gibberish. I posted this as the other poster didn't get to identify which process to kill and unfortunately I wasn't able to give the exact name but compared to the normal and most other processes the ID I gave above should help. On my first attempt at killing random processes, I noticed that the one that was named with random numbers killed Task Manager, so after a reboot, I just waited for that one and killed it as soon as it appeared and it did the trick. I'm running Malwarebytes now and have 266 objects found.
Good luck to all, I hope this helps at least one other!

Popular Forums
icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

The Samsung RF23M8090SG

One of the best French door fridges we've tested

A good-looking fridge with useful features like an auto-filling water pitcher and a temperature-adjustable "FlexZone" drawer. It was a near-flawless performer in our cooling tests.