System Security Antivirus
System Security Antivirus is a bogus security software that when installed on computer will display numerous alerts and advertisements stating that computer is infected with virus, adware and spyware. System Security Antivirus will prompt to remove these threats by going to their online payment website and purchase the registered version first before it can proceed with the removal. If you think that by proceeding with this advise, your computer can be free from threats the you have been misguided. Rogue programs like System Security Antivirus was created to pretend like a legitimate program and later convince users to acquire their paid licensed version. This will mean a monetary benefit to developers who keeps on infecting the Internet with various fake security programs.
Some of the most displeasure that System Security Antivirus can cause to an infected computer is to block Internet access, disabled antivirus program and redirecting Internet search to another unwanted and compromised web pages. This way, any attempt by user to remove System Security Antivirus will be prevented. Add remove/program is also not capable of removing this malware because no entry was created. To remove System Security Antivirus completely, run an updated legitimate anti-virus and anti-malware program and delete all infected files it detected.
| Type | Rogue |
| Sub-Type | FakeAV |
| Aliases | |
| OS Affected | Windows |
| Detected By | MalwareBytes |
What are the Symptoms of System Security Antivirus Infection?
Similar to other fake security programs, this one will pop-up different alert messages and fake virus detection.
Windows Security Center recommends you to install System Security Antivirus.
Windows Security Center
Virus (Trojan.Win32.Kido.a) was found on your computer!
Click ‘OK’ to install System Security Antivirus.
It will modify Windows Registry and add the following entries:
- HKEY_CLASSES_ROOT\CLSID\{D5DF7C9D-6069-4552-8B0C-D02A912FC889}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5DF7C9D-6069-4552-8B0C-D02A912FC889}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “System Security Antivirus”
The threat will drop the following malicious files:
- c:\Documents and Settings\All Users\Application Data\System Security Antivirus
- c:\Documents and Settings\All Users\Application Data\System Security Antivirus\Languages
- c:\Documents and Settings\All Users\Application Data\System Security Antivirus\config.udb
- c:\Documents and Settings\All Users\Application Data\System Security Antivirus\init.udb
- c:\Documents and Settings\All Users\Application Data\System Security Antivirus\System Security Antivirus.exe
- c:\Documents and Settings\All Users\Application Data\System Security Antivirus\Languages\English.lng
How to Remove System Security Antivirus Manually
1. Restart your computer in SafeMode
- After Power-On the computer, just before Windows start, press F8
- From the selections, Select SafeMode
2. Remove Registry entries that the threat added. You MUST BACKUP YOUR REGISTRY FIRST.
- Click Start > Run
- Type in the field, regedit
- Navigate and look for the registry entries mentioned above and delete if necessary
3. Delete malicious files that the threat added:
- Base on the given location above, browse and delete the file
- If no location is given, click Start>Search> and search for the files.
- If cannot be deleted, press Ctrl+Alt+Del to access Task Manager, see if the file is running in the process. If it is, select the file and click End Process. Perform file delete again.
4. Scan computer with Antivirus Program
- Update antivirus program
- Scan computer and delete all detected threats.
How to Easily Remove System Security Antivirus
1. Print this procedure as we need to close all running programs later.
2. Download AntiMalware Application here and save it to your Desktop.
3. Close all open applications.
4. Double-Click on the downloaded mbam-setup.exe to start the installation. If unable to execute, infections on computer is preventing it from running, rename the file mbam-setup.exe to anything (like myfile.exe)
5. Run the installation on the default settings. No changes are necessary.
6. Just before completing the installation, make sure that the following are marked check.
- Update the program
- Launch the program
7. The tool will run and update itself after installation. Close it after the update.
8. Restart your computer in SafeMode
- After Power-On the computer, just before Windows start, press F8
- From the selections, Select SafeMode
9. Click on the icon and start to Perform Full Scan to begin scanning your computer for System Security Antivirus related files.
10. After scanning, a message will appear stating that the scan is completed successfully. Click OK.
11. Click Show Results and detected threats will be displayed.
12. Make sure that all threats are marked check, then click Remove Selected to begin removal of the malicious files.
13. Exit AntiMalware Apps and restart your computer.
14. System Security Antivirus and all its files are now removed from your computer. To guard your computer from this threat and avoid future infections, you may want real-time protection from a full version of anti-malware program..
VSCAN7 Attention! Your web page request has been cancelled.