System Security 4.52
System Security 4.52 is a variation on the dangerous rogue spyware remover System Security (also known as System Security 2009 and System Security 4.51). Typically installed onto a computer once a fake video codec has been installed onto your system, System Security 4.52 ends up killing all .exe processes, leaving your PC without fully operational and functional processes. This is accompanied by bogus scan reports and false security notifications stating that your computer is infected with imaginary parasites, prompting you to purchase and download System Security 4.52 to combat these threats. Do not be fooled. Remove System Security 4.52 as soon as possible.
File System Modifications
- The following files were created in the system:
# File Name 1 00184705.exe 2 00607031.exe 3 01560265.exe 4 02686578.exe 5 03326093.exe 6 03380828.exe 7 06837430.exe 8 1003720520.exe 9 10239374.exe 10 10639534.exe 11 11120624.exe 12 1126514300.exe 13 11447194.exe 14 1255330437.exe 15 13059684.exe 16 1327825314.exe 17 13496218.exe 18 1354455340.exe 19 13779354.exe 20 14147964.exe 21 1431998300.exe 22 14610250.exe 23 1462403437.exe 24 14865934.exe 25 14894324.exe 26 14945624.exe 27 1550536869.exe 28 1573468717.exe 29 1591300478.exe 30 1610380076.exe 31 16692344.exe 32 16723754.exe 33 16846714.exe 34 1690486455.exe 35 1714292029.exe 36 17236094.exe 37 1725032906.exe 38 172939276.exe 39 1743310514.exe 40 1767930182.exe 41 17722954.exe 42 18058594.exe 43 18563124.exe 44 19329203.exe 45 19353904.exe 46 19378284.exe 47 1940874419.exe 48 1947101902.exe 49 1977868703.exe 50 19815934.exe 51 1986350760.exe 52 19916874.exe 53 1[1].exe 54 202150970.exe 55 2029503323.exe 56 2030350728.exe 57 2084498445.exe 58 2113272685.exe 59 240844061.exe 60 25238076.exe 61 281681216.exe 62 28823330.exe 63 29192498.exe 64 370382475.exe 65 372561511.exe 66 375534146.exe 67 380679599.exe 68 3DF7076F.exe 69 431192516.exe 70 432632312.exe 71 438978017.exe 72 498278020.exe 73 500153984.exe 74 52796787.exe 75 549344438.exe 76 554845319.exe 77 564DB681.exe 78 613622941.exe 79 650526885.exe 80 695276073.exe 81 699415262.exe 82 788573529.exe 83 800990911.exe 84 801085450.exe 85 90188702.exe 86 90249366.exe 87 90649526.exe 88 91457186.exe 89 9179499.exe 90 93069676.exe 91 931330021.exe 92 936453029.exe 93 93789346.exe 94 94157956.exe 95 94875926.exe 96 94955616.exe 97 96484328.exe 98 96733746.exe 99 96856706.exe 100 97246086.exe 101 973260134.exe 102 99363896.exe 103 99388276.exe 104 99825926.exe 105 99926866.exe 106 adobe_flash[1].exe 107 AdobeFlash[1].exe 108 adv111[1].exe 109 AdwarePro.exe 110 AdwarePro_Setup[1].exe 111 AntivirusXP.exe 112 ayscjcts.exe 113 bd3q0qix.exe 114 bnmio.exe 115 card[1].exe 116 cogad.exe 117 cvucujahoza.dll 118 ert51791.exe 119 gr[2].exe 120 Hyves_Browser.exe 121 Hyves_Browser_Instalation.exe 122 i386si.sys 123 iehelper.exe 124 iehelpers[1].exe 125 iemodule.dll 126 ieupdates.exe 127 iii[1].exe 128 imod3.dll 129 install[1].exe 130 install[2].exe 131 ldycgadzmr.dll 132 load[1].exe 133 loader[1].exe 134 mupd1_2_1165664.exe 135 new23[1].exe 136 new26[1].exe 137 ntos.exe 138 Omahonafazeq.dll 139 oqarib.dll 140 ParisHilton[1].exe 141 SetupAntivirusXP[1].exe 142 setupapi.dll 143 SSEngine.dll 144 StartApp.exe 145 svchost.exe 146 swapdm.dll 147 SystemSecurity.exe 148 TckBX673.exe 149 Test.exe 150 torbjne.exe 151 TubePlayer.ver.6.exe 152 usp10.dll 153 uxeqipuzimocin.dll 154 vamsoft.exe 155 vvunbwrhxa.exe 156 winafoe.exe 157 winkfmc.exe 158 winlogin.exe 159 winscenter.exe 160 ~tmpa.exe
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\cogadHKEY..\..\..\..{RegistryKeys}Adware ProAntivirusXPMICROSOFT\WINDOWS\CURRENTVERSION\RUN\AntivirusXP.exeMicrosoft\Windows\CurrentVersion\App Paths\AdwarePro.exeMicrosoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\AntivirusXPMicrosoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\System SecurityMicrosoft\Windows\CurrentVersion\Run\00206953Microsoft\Windows\CurrentVersion\Run\02215359Microsoft\Windows\CurrentVersion\Run\1690486455Microsoft\Windows\CurrentVersion\Run\281681216Microsoft\Windows\CurrentVersion\Run\359F5809-00B8-4455-A73A-9EA62A51101BMicrosoft\Windows\CurrentVersion\Run\370382475Microsoft\Windows\CurrentVersion\Run\973260134Microsoft\Windows\CurrentVersion\Run\AdwareProMFCTMicrosoft\Windows\CurrentVersion\Run\MmexofumutokaraMicrosoft\Windows\CurrentVersion\Run\SystemSecurityMicrosoft\Windows\CurrentVersion\Run\kxvaHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 10239374HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 10639534HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 11120624HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 11447194HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 13059684HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 13779354HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 14147964HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 14865934HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 14945624HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 16692344HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 16723754HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 16846714HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 17236094HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 17722954HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 18058594HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 18563124HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 19353904HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 19378284HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 19815934HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 19916874HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 699415262HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 90249366HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 90649526HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 91457186HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 93069676HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 93789346HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 94157956HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 94875926HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 94955616HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 96733746HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 96856706HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 97246086HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 99363896HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 99388276HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 99825926HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 99926866HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}AdwareProHyves BrowserSystemSecurity2009
Is there other ways to remove this? The SS 4.52 is blocking every attempt to uninstall it such as Command Prompt, Add/ Remove programs and your Spy Hunter. I think the creator of SS 4.52 is aware of your website. It wont let me install Norton or AVG anti-virus either.