Home Malware Programs Rogue Anti-Spyware Programs System Security 2009

System Security 2009

Posted: April 1, 2009

System Security 2009, a clone of System Security, is a rogue anti-spyware program that displays notifications of imaginary security risks in an attempts to get you to purchase the full version. Once you click on the fake message, it will take you to the System Security 2009's website where you will be prompted to purchase its full version. In reality, System Security 2009 program is not going to clean your computer from spyware but might actually expose you to more security threats.

System Security 2009 may be difficult to remove manually, and will continue to try to recreate itself without your knowledge or consent.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Documents and Settings%\All Users\Application Data\00308937\00308937.exe
    2 %Documents and Settings%\All Users\Application Data\00308937\config.udb
    3 %Documents and Settings%\All Users\Application Data\00308937\pc00308937ins
    4 %UserProfile%\Desktop\System Security 2009.lnk
    5 %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk
    6 %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\Software\00308937HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "00308937"HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SystemSecurity2009

11 Comments

  • Karthik says:
    April 28, 2009 at 7:48 am

    Somehow, I managed to identify and kill processess belongs to System Security 2009. Thank you so much for your service.

  • linda croke says:
    May 21, 2009 at 6:58 am

    Should have a totally free removal tool for this program since it is using system security 2009 logo.

  • RONNN says:
    June 14, 2009 at 3:48 pm

    GOT RID OF IT YAY!!!!! HERES HOW.
    START IN SAFE MODE. (F8 WHEN STARTING COMPUTER) GO TO START (BOTTOM LEFT) PROGRAMS, MAINTENCE, HELP AND SUPPORT, AND RESTORE YOUR COMPUTER TO A EARLYER DATE!!!!! AT 3 OR MORE DAYS, DEPENDING ON HOW LONG YOUVE HAD THE DAM VIRUS. THEN RESTORE IT , IT WILL TAKE YOUR PC BACK TO THE WAY IT WAS JUST BRFORE YOU GOT THE VIRUS. AND YOU WILL KEEP ALL YOUR PICS AND DOCUMENTS EVERYTHING IS GREAT, YAY! I WAS SCARED, BUT I KILLED IT. F*CK THE SYSTEM SECURITY!!!!

  • Paul says:
    June 14, 2009 at 10:34 pm

    System Security Is So Bad On My Computer That When I Attempt To Remove It Using Both Manual And SypHunter Mehods. It Will Not Allow Me To Access The Task Manager, Or System Restore, Or My Actual Virus Software. When I Try To Download SpyHunter At the end i click Run and nothing happens. I Dont Know What To Do?

  • Pamela says:
    June 19, 2009 at 3:49 am

    This system security just came and took over my computer i already have a security on my computer its webroot security so i hope it stop it want let me play any of my games or go on the internet i just want my computer back the way it was Thanks Mrs. Pamela Celestine

  • Karl Attard Bason says:
    July 2, 2009 at 11:34 am

    Would like to thank you for this posted information...just to let you know that the software has changed its filename to 17318364.exe but the rest is how you say.

    Thank You
    Karl Attard Bason

  • Richard Gawne says:
    July 10, 2009 at 2:58 pm

    This is what I did..

    I started Windows in Safe Mode. I used MSCONFIG, clicked the STARTUP TAB to disable the programs I did not reconize (at system startup). Note the file location for reference later.

    I rebooted the computer, & the the virus did not load anymore - disable the correct exe files (generally number.exe).

    I restarted my computer and then used a removal tool to delete the files or manually delete them using your written location reference.

  • Janet says:
    July 14, 2009 at 5:49 pm

    This info is good, BUT, System Security will not allow me to open task manager or registry editor. Plus, there is no folder named "System Security 2009" ~ is didn't turn up in the search, but I did find the path from the shortcut: C:\Documents and Settings\All Users\Application Data\11888284\11888284.exe

    This malware will not all me to "Run" anything ~ it won't even allow me to delete it. Whoever created this malware needs to go to prison! I'm looking for work and this program is preventing me from doing job searches! I'm out of work and cannot to afford to purchase this product for it to remove this fugly program.

    There must be some way to track down the culprits ~ they want us to purchase their malware, so there must be some way to track where the payment is going to. They need to go to prison for this! Now is not the time to hamper people from using the Internet, the economy is making things very stressfull for everyone.

  • Huss30 says:
    July 17, 2009 at 1:37 am

    these are good instructions but the virus i have is a system security 2009 virus but it doesnt allow task manager or allow me to get to the registry and i cant boot in safe mood.

  • Al Pell says:
    July 18, 2009 at 1:01 pm

    I hope it worked!

  • Frank says:
    August 2, 2009 at 4:23 am

    ***************SOLVED!!!****************************
    "If you locate the file with the shield icon in your system. ussually in the C:/program data\ folder. You can rename the systems security folder and program to 2222. This will interupts it’s pathways for running when you reboot the PC. As a result you will then be able to download and use removal programs or manually remove it. This was how I solved not being able to run any exe files for removing it or going to the CMD or Taskmgr."

Loading...