• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

My AntiSpyware

Free antispyware software, Online Scanners, Instructions on how to remove spyware and malware.

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools
Home › Rogue Anti Spyware › Tutorials - HowTo › How to remove Volcano Security Suite (Uninstall instructions)

How to remove Volcano Security Suite (Uninstall instructions)

Myantispyware team October 27, 2009     2 Comments    

Volcano Security Suite is a new rogue antispyware program from the same family as Windows System Defender and Windows Enterprise Defender. It is installed from fake “Free Spyware Scanner” that displays that your computer is infected with variety of threats and that you must install the software to clean your computer. The software is a trojan that will install Volcano Security Suite and create numerous files with random names that are made to appear as infections, but are in reality harmless.

Once Volcano Security Suite is installed, it configures itself to run automatically every time, when you start your computer. Once running, Volcano Security Suite will begin to scan the computer and list previously created files as infections to trick you to buy the paid version of the software. All of these infections are fake, so you can safely ignore them.

VolcanoSecuritySuite
Volcano Security Suite

While Volcano Security Suite is running, it blocks Task Manager and legitimate antivirus and antispyware programs (Kaspersky Antivirus, DrWeb, AdAware, McAfee, Norton AV, …). Your computer will display fake warning and fake security alerts from your Windows task bar. Some of the alerts:

System alert
Potentially harmful programs have been detected on your
system and need to be dealt with immediately. Click here to
remove them with Volcano Security Suite.

Warning! Your computer is infected
Warning! Found!
Threat detected:
File name: LEGACY_TRUSTWARRIORSVC

Volcano Security Suite can be safely removed from your computer along with any other trojan infections if the proper steps are taken. Use the free instructions below to remove Volcano Security Suite and any associated malware from your computer.

More Volcano Security Suite screen shoots



Symptoms in a HijackThis Log

O4 – HKLM\..\Run: [Volcano Security Suite] “C:\Documents and Settings\All Users\Application Data\1dc89\VSeda.exe” /s /d
O4 – HKCU\..\Run: [avgsys] regedit /s “C:\DOCUME~1\comp\LOCALS~1\Temp\664655.reg”

Use the following instructions to remove Volcano Security Suite (Uninstall instructions)

Download HijackThis from here and save it to desktop.

Doubleclick on the HijackThis.exe icon on your desktop for run HijackThis. HijackThis main menu opens.

Click “Do a system scan only” button. Look for lines that looks like:

O4 – HKLM\..\Run: [Volcano Security Suite] “C:\Documents and Settings\All Users\Application Data\1dc89\VSeda.exe” /s /d
O4 – HKCU\..\Run: [avgsys] regedit /s “C:\DOCUME~1\comp\LOCALS~1\Temp\664655.reg”

Place a checkmark against each of them. Once you have selected all entries, close all running programs then click once on the “fix checked” button. Close HijackThis.

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for Volcano Security Suite infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.

VolcanoSecuritySuite_remover
Malwarebytes Anti-malware, list of infected items

Make sure that everything is checked, and click Remove Selected for start Volcano Security Suite removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Volcano Security Suite creates the following files and folders

%UseProfile%\Application Data\Volcano Security Suite
C:\Documents and Settings\All Users\Application Data\VSSSys
C:\Documents and Settings\All Users\Application Data\1dc89\VSeda.exe
%UseProfile%\Application Data\Volcano Security Suite\cookies.sqlite
%UseProfile%\Desktop\Volcano Security Suite.lnk
%UseProfile%\Start Menu\Volcano Security Suite.lnk
%UseProfile%\Start Menu\Programs\Volcano Security Suite.lnk
%UseProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Volcano Security Suite.lnk

Volcano Security Suite creates the following registry keys and values

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Volcano Security Suite

Rogue Anti Spyware Tutorials - HowTo

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

2 Comments

  1. pissed of customer
    ― November 8, 2009 - 2:54 pm  Reply

    Thanks to this website for helping me sort this problem out with volcano.
    Afghan fucking puffs if i had it my way i would get newk the lot of um, no fucking about – saying they want $40 to sort when its a fucking conn, you conning dirty cunts, they only want the money to buy more weapons and explosives to shoot our soldiers. WELL IT AINT FUCKING HAPPENING. BYE

  2. charles
    ― November 26, 2009 - 5:50 am  Reply

    Thank you guys, the volcano thing was giving me a hard time

    Charlie Boy South Africa

Leave a Reply Cancel reply




New Guides

Defense-fordesktop.com Click Allow Scam
Defense-fordesktop.com Virus Removal Guide
Searches.today Google Search results
How to get rid of Searches.today redirect from Chrome, Firefox, IE, Edge
Helllomedias.com Click Allow Scam
Helllomedias.com Virus Removal Guide
AccessibleSearchGuide mac app adware
How to uninstall AccessibleSearchGuide app/extension from Mac (Virus removal guide)
Link 2captcha Virus Click Allow Scam
Link 2captcha Virus (removal guide)

Follow Us

Search

Useful Guides

browser redirect virus
How to remove Browser redirect virus [Chrome, Firefox, IE, Edge]
How to remove browser hijacker virus (Chrome, Firefox, IE, Edge)
Managed by your organization chrome virus
Chrome Managed by your organization malware removal guide
DNSChanger
How to remove DNSChanger malware virus [Updated Apr. 2018]
How to reset Internet Explorer settings to default

Recent Posts

How to remove Windows System Defender (Uninstall instructions)
How to remove ShieldSafeness (Uninstall instructions)
How to remove SoftStronghold (Uninstall instructions)
How to remove Internet Antivirus Pro (Uninstall instructions)
How to remove SoftVeteran (Uninstall instructions)

MYANTISPYWARE.COM

  • About Us
  • Contact Us
  • Privacy Policy

NEED A HELP ?

If you're seeing unwanted pop-ups or ads in your web-browser, you might have an adware installed on your computer. Use the following guide to stop pop-up ads and remove malicious software. Or ask for help here.

Links

  • Downloads
  • Instructions
  • Questions and Answers
  • Free Malware Removal Tools
Copyright © 2004 - 2022 Myantispyware.com - Free antispyware programs and Spyware Removal Instructions.