Home Security Solutions

Home Security Solutions Description

Home Security Solutions is a fraudulent anti-malware scanner that detects nonexistent spyware in-between making requests for money to remove said infections. Purchasing Home Security Solutions is entirely-unnecessary for the well-being of your PC, and SpywareRemove.com malware experts instead recommend that you remove Home Security Solutions with a legitimately-functional anti-malware program. Because Home Security Solutions may attempt to block your PC security software under the pretense that these programs are infected or otherwise damaged, you should try to disable Home Security Solutions before you delete it; Safe Mode or equivalently-secure methods of accessing your OS are recommended.

Home Security Solutions: Another Iteration of Anti-Security Software Whether at Home or at Work

Home Security Solutions is a relatively-new version of other types of rogue anti-malware applications from a vast family of such programs named FakeScanti. Examples of Home Security Solutions’s many relatives include Security Guard, Rogue.Data Restore, Wireshark Antivirus, Wolfram Antivirus, Win 7 2012, Cloud Protection, BlueFlare Antivirus, AV Protection Online, Your PC Protector, AV Protection 2011, Super AV, AV Security 2012, Milestone Antivirus, System Protection 2012, Security Guard 2012, AV Protection 2012, OpenCloud Antivirus, AV Guard Online, Sphere Security 2012, Cloud AV 2012, Internet Security Guard, Sysinternals Antivirus, AV Security Essentials, OpenCloud Security, System Protection, AV Secure 2012 and Super AV 2013. Despite a new brand name and minor changes to its appearance, Home Security Solutions uses the same attacks that other types of fake anti-malware products in its subgroup utilize.

Common Home Security Solutions-based attacks that SpywareRemove.com malware researchers have noted include:

Fake scanner results that display wide ranges of high-priority infections – regardless of whether or not these PC threats are on your computer.
Fake popup warnings that contain similar types of fake information about the presence of trojans, rootkits, spyware or viruses.
Automatic start-up functionality that allows Home Security Solutions to launch whenever Windows starts and remain present in the form of a background process even if you attempt to close it.

Samples of some of the many alerts that Home Security Solutions dabbles in to create paranoia for its victims include:

Security Center Alert
To help protect your computer, Security Center has blocked some features of this program.
Name: Win64.BIT.Looker.exe
Risk: High

Security Center
Unauthorized remote connection!
Your system is making an unauthorized personal data transfer to a remote computer!
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
To protect your private data, please click “Prevent Connection” button below.

WARNING! 371 threats detected
Detected malicious programs can damage your computer and compromise your privacy.

It’s strongly recommended to remove them immediatly [sic]!
Potential risks: Infecting other computers on your network
Continue unprotected Remove all threats now

Insecurity Internet activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms and trojans without knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information. To get full advanced real-time protection for PC and Internet activity, register your antivirus software.

The Genuine Security That Will Kick Home Security Solutions Out of Your PC

Rogue security programs in the Home Security Solutions family have been known to be able to be registered by the following code, which is freely-circulated to allow victims of Home Security Solutions infections to disable this rogue anti-malware scanner: ‘U2FD-S2LA-H4KA-UEPB.’ However, registering Home Security Solutions is, ultimately, unnecessary for removing Home Security Solutions and under no circumstances is buying an activation key for Home Security Solutions ever recommended.

To stop Home Security Solutions’s fake warnings and any other types of symptoms that it may cause (such as browser redirects to its web page), SpywareRemove.com malware analysts recommend that you scan your PC for Home Security Solutions and related PC threats via appropriate anti-malware products. Disabling Home Security Solutions by registering it, rebooting in Safe Mode or using alternative methods to start Windows is recommended prior to attempting a scan, since an active Home Security Solutions may try to avoid deletion by blocking your program.

Home Security Solutions Automatic Detection Tool (Recommended)

Is your PC infected with Home Security Solutions? To safely & quickly detect Home Security Solutions, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Home Security Solutions What happens if Home Security Solutions does not let you open SpyHunter or blocks the Internet?

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	%AllUsersProfile%\Application Data\[5 RANDOM CHARACTERS]\HS[RANDOM CHARACTERS].exe	396
2	%AllUsersProfile%\[RANDOM]\	N/A
3	%AllUsersProfile%\[RANDOM]\3178.mof	N/A
4	%AllUsersProfile%\[RANDOM]\6113.mof	N/A
5	%AllUsersProfile%\[RANDOM]\14.mof	N/A
6	%AllUsersProfile%\[RANDOM]\46.mof	N/A
7	%AllUsersProfile%\[RANDOM]\HSE.ico	N/A
8	%AllUsersProfile%\[RANDOM]\HSESys	N/A
9	%AllUsersProfile%\[RANDOM]\Quarantine Items	N/A
10	%AllUsersProfile%\HSYITSQGE\	N/A
11	%AllUsersProfile%\HSYITSQGE\HSLGILTOGE.cfg	N/A
12	%UserProfile%\Desktop\Home Security Solutions.lnk	N/A
13	%AppData%\Home Security Solutions\	N/A
14	%AppData%\Home Security Solutions\Instructions.ini	N/A
15	%AppData%\Microsoft\Windows\Recent\DBOLE.dll	N/A
16	%AppData%\Microsoft\Windows\Recent\PE.sys	N/A
17	%AppData%\Microsoft\Windows\Recent\CLSV.tmp	N/A
18	%AppData%\Microsoft\Windows\Recent\gid.tmp	N/A
19	%AppData%\Microsoft\Windows\Recent\pal.sys	N/A
20	%AppData%\Microsoft\Windows\Recent\eb.dll	N/A
21	%AppData%\Microsoft\Windows\Recent\ppal.drv	N/A
22	%AppData%\Microsoft\Windows\Recent\SICKBOY.sys	N/A
23	%AppData%\Microsoft\Windows\Recent\delfile.dll	N/A
24	%AppData%\Microsoft\Windows\Recent\SICKBOY.drv	N/A
25	%AppData%\Microsoft\Windows\Recent\eb.sys	N/A
26	%AppData%\Microsoft\Windows\Recent\energy.dll	N/A
27	%AppData%\Microsoft\Windows\Recent\runddlkey.exe	N/A
28	%AppData%\Microsoft\Windows\Recent\snl2w.drv	N/A
29	%AppData%\Microsoft\Windows\Start Menu\Home Security Solutions.lnk	N/A
30	%AppData%\Microsoft\Windows\Start Menu\Programs\Home Security Solutions.lnk	N/A
31	%AppData%\Microsoft\Internet Explorer\Quick Launch\Home Security Solutions.lnk	N/A
32	%StartMenu%\Home Security Solutions.lnk	N/A
33	%Programs%\Home Security Solutions.lnk	N/A
34	%Desktop%\Home Security Solutions.lnk	N/A
35	%CommonAppData%\[RANDOM]\[RANDOM].exe	N/A
36	%CommonAppData%\[RANDOM]\HSS.ico	N/A
37	%CommonAppData%\[RANDOM]\[RANDOM].cfg	N/A
38	%AppData%\Home Security Solutions\ScanDisk_.exe	N/A

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.

The following newly produced Registry Values are:
HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\91\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Vid {137E7700-3573-11CF-AE69-08002B2E1262}HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes\URL http://findgala.com/?&uid=231&q={searchTerms}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = '1'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download\CheckExeSignatures "no"HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PRS http://127.0.0.1:27777/?inj=%ORIGINAL%HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\URL http://findgala.com/?&uid=231&q={searchTerms}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\89770803HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\lib/5.00231HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\UID 231HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRunHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun "1"HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HS2d7_231.DocHostUIHandlerHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin "2"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA "1"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Home Security Solutions
The following CLSID's were detected:
HKEY..\..\{CLSID Path} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}