Do you have pop-ups or your computer infected with trojan or spyware ? Learn how to ask us for help, click here!

How to remove Total Security 2009 (Uninstall instructions)

Total Security 2009 also know as Total Security is a rogue antispyware program, new version of System Security scareware. This fake antispyware software uses fake security alerts, false positives, prevent execution of any programs in order to trick you into buying the software. Total Security 2009 is distributed through the use fake online malware scanners that tells you that your PC infected with a lot of infections and that you must install the program to clean your computer. Once installed, the program configures itself to run automatically every time, when you start your computer. Once running, Total Security 2009 starts scanning the computer and found a lot of trojans and spyware, but all these infections do not exist on your PC, so you can safely ignore them.

Total_Security
Total Security (more screen shoots 1, 2, 3, 4, 5, 6, 7, 8, 9)

Total Security 2009 blocks the ability to run any programs, including Malwarebytes Anti-Malware. The following warning will be shown when you try to run any program:

WARNING!
Application cannot be executed. The file mbam.exe is
infected.
Please activate your antivirus software.

While Total Security is running your computer will show false security alerts and nag screens:

Total Security Warning
Intercepting program that may compromise your privacy and
harm your system have been detected on your PC.
Click here to remove them immediately with Total Security

Total Security
WARNING 38 infections found!!!

Ignore all fake security alerts and use the following Total Security removal instructions below in order to remove this infection and any associated malware from your computer for free.

Symptoms in a HijackThis Log

O4 – HKLM\..\Run: [10530004] C:\Documents and Settings\All Users\Application Data\10530004\10530004.exe

Use the following instructions to remove Total Security (Uninstall instructions)

Download HijackThis from here, but before saving HijackThis.exe, rename it first to explorer.exe and click Save button to save it to desktop.

Doubleclick on the explorer.exe icon on your desktop for run HijackThis. HijackThis main menu opens.

Click “Do a system scan only” button. Look for lines that looks like:

O4 – HKLM\..\Run: [10530004] C:\Documents and Settings\All Users\Application Data\10530004\10530004.exe

Place a checkmark against each of them. Once you have selected all entries, close all running programs then click once on the “fix checked” button. Close HijackThis.

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for Total Security infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

Total_Security_mbam
Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start Total Security removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Total Security 2009 creates the following files and folders

%UserProfile%\Start Menu\Programs\Total Security
C:\Documents and Settings\All Users\Application Data\10530004
%UserProfile%\Start Menu\Programs\Total Security\Total Security 2009.lnk
C:\Documents and Settings\All Users\Application Data\10530004\10530004
C:\Documents and Settings\All Users\Application Data\10530004\10530004.exe
C:\Documents and Settings\All Users\Application Data\10530004\pc10530004ins
%UserProfile%\Desktop\Total Security 2009.lnk

Total Security 2009 creates the following registry keys and values

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\systemsecurity2009
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\10530004

August 15, 2009 on 11:03 am | In Rogue Anti Spyware, Tutorials - HowTo | 55 Comments |


55 Comments »

RSS feed for comments on this post.

  1. These fargin’ Bastages thought they could hijack my machine? Thanks to the good folks here, Im sailing the seas of the internet again.These instructions are well written hence, easy to follow. And worked like magic. When is first did a google search, your site took me right to this off the top. The Print screens were very helpfull in determining the kind of crud i had. BYTE ME Total Security Iceholes!!! Thanks a’million to all of you that put this show together!!

    Doug Anderson
    Washington State

    Comment by Doug Rocker — August 16, 2009 #

  2. Brilliant. Had Total Security trojan (a real pain in the arse) and following your easy instructions was successful in giving it the boot.

    Thankyou.

    Keith
    Western Australia

    Comment by Keith Woolfenden — August 16, 2009 #

  3. Total Security 2009 is A TOTAL PAIN IN THE @$#! What they are doing is just plain wrong. If you have this parasite of a program leech on to you I highly recommed the folks here at Malwarebytes to fix your frustrations. Thank you for a straighforward solution to this mess.

    Comment by David — August 17, 2009 #

  4. Thanks to the instructions here i got this little sod off my computer. ME 1 Totalsecurity 0.

    Comment by Robin J — August 17, 2009 #

  5. Tried everything….. Hiijackthis is saying

    Comment by Herman — August 17, 2009 #

  6. I was happy that there was a website to show how to uninstall Total Security however, what I need to download to fix this issue, Total Security will not let me.I can’t get into control panels add remove program either.Any suggestions?

    Comment by michele — August 17, 2009 #

  7. I can’t get passed running the exporer.exe Total Security won’t let the next step pop up HELP!

    Comment by michele — August 17, 2009 #

  8. FINALLY!!!
    Did everything here and the Total Security trojan crap was taken off my laptop.
    I AM FREE AGAIN.

    Thank You,
    Alon
    Israel

    Comment by Alon — August 18, 2009 #

  9. the MBAM hangs, it goes 2 secs and instantly goes 8 then the program does not respond any more.

    Comment by augustus — August 18, 2009 #

  10. All of the Total Security removal procedures I have found, including the above, require downloading this file or that via the Internet. Unfortunately, Total Security is preventing me from accessing the Internet, Malwarebyte, CCleaner, etc…..so I can’t download programs like HijackThis. Next?

    Comment by Steven — August 18, 2009 #

  11. Excellent !! Thanks for this powerful help !! This is a great tool to quit that thing !!
    Thanks thanks thanks !!
    Elias
    Mexico City

    Comment by Elias — August 18, 2009 #

  12. Thank you so much this one really worked for me when i had tried so many others and was on the brink of crying. lol

    Comment by Eva — August 18, 2009 #

  13. I helped a friend of mine to remove Total Security using your instructions. Worked like a dream. Thank you.

    Comment by Liam Edwards — August 19, 2009 #

  14. that works

    Comment by Ergo — August 22, 2009 #

  15. Bravo Malwarebytes, a great job indeed !

    Yet this procedure above may be the only efficient killer for „Total Security 2009”, at least if it is the version, which is hiding itself behind filenames consisting of randomly generated numbers.
    Only one very important addition : As „Total Security 2009” virus is blocking the internet but is not blocking external drives, you should ask a friend to download the files onto a pendrive. If you plug this pendrive into the infected machine, you can open and run them from the pendrive, just as descibed above.

    Nevertheless, the big shame on the antyvirus/antyspyware industry is the following:

    SHAME-1
    You can find dozens (if not hundreds) of descriptions in the internet about how to remove „Total Security 2009”. Be very careful and don’t pay a single penny, because most of those descriptions are just hidden advertisements, which will drive you to an antivirus software site (you name, you have it !), from where you can download the „latest of the best” for only 29,95 or so. Make sure not to be a sucker and be very careful about your credit car data, because most of these „latest-of-the-bests” cannot do anything with „Total Security 2009”, so you just spend your money and suck. (I hired from friends and tested 3 antivirus/antispyware programs, each promising to be the best ).

    This is crazy, but SpywareDoctor went even further: they give you a dowloadable version free. It will run and find quite a few malware (I guess on any computer!) and recommends to remove them. When you click the remove button, a popup would tell you that the free version is only for scanning, but if you want full product feature, you have to buy the full version „here”. But you want a solution, not a sales offer, right?

    SHAME-2
    I have two separate shields running in my computer at a time, one is to protect me from viruses, the other is to protect me from spyware and other malware. The antivirus software is the product of one of the market’s biggest names, specialized in antivirus and other security software for long. The anti-spy shield is a multiple-award winning product , claiming to be the best on earth. One of them keep on reporting to me every day the „now I am protected against 1,2 million+ malwares).
    Contrary to this, when „Total Security 2009” came to my machine, those two active shields could only say „welcome on board”), very „politely” gave way to the roug (and not even recognizing it ever since.).

    How can I trust those – and other – AV softwares?

    Comment by djpese — August 23, 2009 #

  16. Steven, try to use Safe mode with networking to download HijackThis and MBAM.

    Comment by Patrik — August 23, 2009 #

  17. djpese, anyway you should have:
    good antivirus, use a free AVG or Avira
    good antispyware (free SpyBot, for example)
    firewall
    use an alternate browser (Firefox or Opera)

    Comment by Patrik — August 23, 2009 #

  18. Will Hihackthis run will this piece of sh*t spyware is running? I can’t get anything to run.. the obvious recs on stopping it through taskmanager and install/remove apps don’t work as the malware is forces window closures on both.

    I tried malwarebytes anti-malware (without hijackthis) and i finally got it to install via safemode, but when running – it starts to scan and then closes on me… an dthen I can’t re-run the program. Tried re-install and re-run about 5 times without success. Any help will be greatly appreciated??

    Comment by HateTotalSecurity — August 24, 2009 #

  19. To all those who keep saying they cannot access the internet to get the programs working, if you are already infected, the only way to do anything is to shut down and restart windows in SAFE MODE. You can use the driver mode and use Mozilla Firefox in safe mode to access the internet. It will let you get what you need. I dont know how you are even reading this if you are infected – I couldnt get anything to work until I rebooted in safe mode.

    Comment by maddly — August 25, 2009 #

  20. i am thankful for this guide.. thank you for everything

    Comment by cassandra — August 25, 2009 #

  21. Thanks . Yes Just a simple logic so all executables files working. Rename anything ( the file you want to help you) to explorer.exe and the road open for everything. I rename proccessxp program ( for win proccesses) to explore.exe and working. I close then the bad proccess and I can feix free with any available anti… program.
    Thanks again..

    Comment by giorgos — August 26, 2009 #

  22. Total Security is very pain….I agree.
    By following the instructions, it really works to get rid off this nuisance. Many thanks for sharing useful knowledge.

    Comment by scruffy — August 27, 2009 #

  23. When i launch Malwarebytes every thing works perfect but after 5-7 seconds the program closes automaticly! So i cant do a scan! Plaese help me out!

    Comment by Carlo — August 27, 2009 #

  24. Carlo, try perform a scan in Safe mode.

    Comment by Patrik — August 27, 2009 #

  25. Guys – i have wasted so many hours i cannot tell you – this is the only thing that works.

    Thanks you so much for this – awesome!!

    Mickey

    Comment by Mickey — August 27, 2009 #

  26. Malwarebytes does not finish the scan. In fact, as soon as it starts it stops. Obviously this thing has mutated again and will not allow Malwarebytes to run. Any other suggestions? All the registry info is incorrect. This program no longer uses the registry keys that have been posted for removal. HELP!!!!!

    Comment by Phil — August 28, 2009 #

  27. Phil, ask for help at our Spyware removal forum.

    Comment by Patrik — August 29, 2009 #

  28. Thank you very much.Your easy guide help me to tackle this damn’ “Total Security 2009 “.I tried a lot of methods,but non of them cam help me.Anyway,THANK YOU!!
    Melissa
    Hong Kong

    Comment by Melissa — August 29, 2009 #

  29. Thanks, it worked for me! I downloaded the files on another computer and burned it on a cd to run it on the infected computer.

    Comment by Kim — August 29, 2009 #

  30. I had the same problem as far as trying to stop the processes. TS disables task manager. I downloaded a similar application (free!!)called process explorer from technet.microsoft.com/en-us/sysinternals/bb896653.aspx. It is a souped up Task Manager application. Once downloaded, rename procexp.exe to iexplorer.exe (or explorer.exe) to run it. Check at the bottom portion for the processes and stop any tsc.exe processes. My laptop did not display the tsc but had a long string of numbers: 14040934. I stopped this process (you have to do it fast, or TS will disable process explorer) and was able to run MalwareBytes and SuperAntiSpyware. They both found TS, quarantined and removed them, but my problem is that TC is not removed. I’ve ran multiple scans, which temporarily removes the virus, but after the reboot, it morphs into something else. The numbers for TS keep changing. After 14040934 was deleted, I thought I had gotten rid of the problem, but TS came back and when I checked the process, it is now 21443763. Each time I delete it, it keeps coming back. Can anyone please help? Thanks in advance for all your help.

    Comment by Ageel Shatry — August 31, 2009 #

  31. Rebooting in safe mode does not still doesn’t let me use the internet. I downloaded hijackthis on a thumb drive and opened it on the infected computer and it scanned for about 5 seconds, but then it closes completely. I don’t even have time to check any lines. Is this supposed to happen?

    Comment by Duckie — August 31, 2009 #

  32. Ageel Shatry,looks like your computer also infected with a trojan that reinstalls the rogue. Ask for help at our Spyware removal forum.

    Comment by Patrik — September 1, 2009 #

  33. Duckie, you have renamed HijackThis.exe to explorer.exe before running?

    Comment by Patrik — September 1, 2009 #

  34. FYI to all. I believe that a lot of the confusion here is that there are multiple versions of this TS program out there, but in appearance they are very similar. Over the past few weeks, I have had the opportunity (unfortunately) to deal with 3 different versions. The first 2 versions are very similar and the recommendations here can truly help to resolve the issues. The primary difference between the first 2 is the Task Manager files being used differ between tsc.exe and a random string of numbers followed by .exe.
    The newest version is extremely difficult to get rid of. I have been trying for a full day now and have not yet succeeded.
    Renaming a file to iexplorer, or explorer does not work with the new version. The program renamed may run one time for a few seconds, then will shut down before enough time is needed to run any antivirus software mentioned above. It does not matter whether you are in SAFE MODE or not. Often, after running the program once, and the virus shutting it down (regardless of the name), the program will produce an error when trying to re-open it. The error is a statement that the drive, folder, or file is not accessible and may be due to insufficient user privileges.
    The error is received regardless of the file location (c Drive, Desktop, etc…).
    Also, this new version is affecting my computer IN SAFE MODE, as well as in standard. Including pop-ups, etc. And yes, I am very familiar with Safe Mode.
    And is you do figure out a way to get the software running (I did get lucky once, but not sure how) the virus reinstalls itself after rebooting.

    Complete manual instructions will likely be needed for this new version…

    Comment by Ryan — September 1, 2009 #

  35. The error is a statement that the drive, folder, or file is not accessible and may be due to insufficient user privileges.

    Probably the computer also infected with a trojan (braviax) that replaced ntfs.sys file. Ask for help at our Spyware removal forum. Also you can try to restore it (ntfs.sys) using Windows Recovery console.

    Comment by Patrik — September 2, 2009 #

  36. Thanks!!! It really works!

    Comment by Mayo — September 2, 2009 #

  37. I can’t get passed running the exporer.exe Total Security won’t let the next step pop up… help mee plzzz

    Comment by Gorkem — September 2, 2009 #

  38. Gorkem, try rename HijackThis.exe to iexplorer.exe. If it does not help you, then ask for help at our Spyware removal forum.

    Comment by Patrik — September 2, 2009 #

  39. thanks a lot!

    Comment by Janz — September 4, 2009 #

  40. I think i successfully removed total security with this great guide, but i can still not use internet or the task manager.

    What should I do?

    Comment by nisse — September 6, 2009 #

  41. Hey, I got this virus about three days ago and searched everywhere for a fix – heaps of sites selling stuff to fix it and many were in fact false. This site was the best and so easy to follow – thanks to the people who put this on – really appreaciated it – and I am no whiz on a computer. Fully recommend this guide for removal of TotalSecurity2009 – it really works!

    Comment by TalliJim — September 9, 2009 #

  42. Your program worked great! Thank you!!!! I will be purchasing your product when I have some change to throw your way, unless I can find a way to donate.

    Comment by eggmeat — September 13, 2009 #

  43. Thanks a lot!!

    the guide is very clear and the pics really helps me a lot(as i’m not familiar with any software and setup steps).

    Before I follow the instructions mentioned here,
    ,i did try lots of solution guides from the internet.Those solutons,however,did not work. And it just waste my time!

    Finally , god bless me,,i find out this program and delete the #$%^&Total security!It saves me!!

    =]

    Comment by Anna Chung — September 14, 2009 #

  44. These instructions are great but please update them to include how to find and strangle the people responsible for Total Security

    Comment by Kahryl — September 18, 2009 #

  45. perfect, thank you, no more Total Security, the only thing appears on the add/remove programs menu no matter what.

    Comment by Alucero — September 18, 2009 #

  46. Alucero, see Microsoft instructions to remove that item from the menu.
    http://support.microsoft.com/kb/314481

    Comment by Tom — September 20, 2009 #

  47. ik heb t programma gedownload hihgjackthis om totale veiligheid te Kunnen uninstallen maar vind de lijn 04-hklm/../run: [105300004 ]…… niet.wat moet ik doen?? helpen!

    Comment by raes angelo — September 21, 2009 #

  48. I can’t understand the portion of the instruction “Look for lines that look like:

    O4 – HKLM\..\Run: [10530004] C:\Documents and Settings\All Users\Application Data\10530004\10530004.exe

    What precisely am I looking for? My machine is infected, but the scan revealed no lines that look like above.
    Thanks. Second time I’ve tried to comment since I cant apparently copy the characters correctly.

    Comment by Barbara Smith — September 24, 2009 #

  49. Thank you! This worked perfectly for me! Now how can I prevent this from happening in the future? It seemed to happen after installing Spybot Search and Destroy and using the immunize feature.

    Comment by Junebug — September 24, 2009 #

  50. Barbara, ask for help in our Spyware removal forum.

    Comment by Patrik — September 24, 2009 #

  51. thank u. thank u.. thank u…

    Comment by will — September 25, 2009 #

  52. what happens to the explorer.exe file? I removed total security with no problem (thanks to these great instructions) but now I have a error message at shutdown related to explorer.exe and I am wondering if it is the masked hijackthis.exe causing me grief now. It is no longer on desktop and does not appear when I do a search either.

    Comment by noazmom — September 25, 2009 #

  53. noazmom, make a new topic in our Spyware removal forum.

    Comment by Patrik — September 28, 2009 #

  54. I managed to find total security files and deleted them but I am left with the personal security which I cannot remove from control panel and keeps popping up and shutting down my computer. How do I get rid of this please

    Comment by Brid — December 4, 2009 #

  55. Brid, follow the personal security removal instructions.

    Comment by Patrik — December 4, 2009 #

Leave a comment

XHTML: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>


My Anti Spyware - Free antispyware programs and Spyware Removal Instructions.