System Security is the latest fake antispyware software.
You probably got infected with System Security through a Trojan posing as a video codec. Like other scamware, System Security tells you you’re infected with threats that don’t exist, and then demands you use System Security to remove them. Even if you see through the scam, you’re sanity is threatened by System Security popups.
Before you set fire to your PC, let me show you how to get rid of System Security for free.
GET RID of System Security
- Manually remove System Security with step-by-step instructions
- Download Spyware Doctor to automatically remove System Security
- You can download award-winning, anti-badware software SpywareDoctor to easily remove System Security. Want to know why I dig SpywareDoctor? Read my review.
Do You Have System Security?
When you’re infected with badware — whether it’s System Security, spyware, adware, a Trojan, or a virus — there are a few key symptoms. Have you noticed…
- Slow computer performance: It just takes one parasite like System Security to slow your computer dramatically. If your PC takes longer than usual to reboot, or if your Internet connection is unusually slow, you may be infected with System Security.
- New desktop shortcuts or switched homepage: Badware like System Security may change your Internet settings to redirect your homepage to another site. Badware can even add desktop shortcuts to your PC.
- Annoying popups: Badware can bombard your computer with popup ads, even when you’re not online. Through these popups, you may be tricked into downloading more spyware.
How to Remove System Security Manually
Before we get started, you should backup your system and your registry, so it’ll be easy to restore your computer if anything goes wrong.
To remove System Security manually, you need to delete System Security files. Not sure how to delete System Security files? Click here, and I’ll show you. Otherwise, go ahead and…
Stop System Security processes:
RemoveSystem Security register keys:
Delete System Security files:
%desktopdirectory%\ws\config.udb
%desktopdirectory%\ws\init.udb
%desktopdirectory%\ws\languages\english.lng
%desktopdirectory%\ws\languages\german.lng
%desktopdirectory%\ws\languages\spanish.lng
%programs%\system security\system security.lnk
Get rid of System Security folders:
Note: In any System Security files I mention above, “%UserProfile%” is a variable referring to your current user’s profile folder. If you’re using Windows NT/2000/XP, by default this is “C:\Documents and Settings\[CURRENT USER]” (e.g., “C:\Documents and Settings\JoeSmith”). If you have any questions about manual System Security removal, go ahead and leave a comment.
How Do You Remove System Security Files?
Need help figuring out how to delete System Security files? While there’s some risk involved, and you should only manually remove System Security files if you’re comfortable editing your system, you’ll find it’s fairly easy to delete System Security files in Windows.
How to delete System Security files in Windows XP and Vista:
- Click your Windows Start menu, and then click “Search.”
- A speech bubble will pop up asking you, “What do you want to search for?” Click “All files and folders.”
- Type a System Security file in the search box, and select “Local Hard Drives.”
- Click “Search.” Once the file is found, delete it.
How to stop System Security processes:
- Click the Start menu, select Run.
- Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC.
- Click Processes tab, and find System Security processes.
- Once you’ve found the System Security processes, right-click them and select “End Process” to kill System Security.
How to remove System Security registry keys:
Because your registry is such a key piece of your Windows system, you should always backup your registry before you edit it. Editing your registry can be intimidating if you’re not a computer expert, and when you change or a delete a critical registry key or value, there’s a chance you may need to reinstall your entire system. Make sure your backup your registry before editing it.
- Select your Windows menu “Start,” and click “Run.” An “Open” field will appear. Type “regedit” and click “OK” to open up your Registry Editor.
- Registry Editor will open as a window with two panes. The left side Registry Editor’s window lets you select various registry keys, and the right side displays the registry values of the registry key you select.
- To find a registry key, such as any System Security registry keys, select “Edit,” then select “Find,” and in the search bar type any of System Security’s registry keys.
- As soon as System Security registry key appears, you can delete the System Security registry key by right-clicking it and selecting “Modify,” then clicking “Delete.”
How to delete System Security DLL files:
- First locate System Security DLL files you want to delete. Open your Windows Start menu, then click “Run.” Type “cmd” in Run, and click “OK.”
- To change your current directory, type “cd” in the command box, press your “Space” key, and enter the full directory where the System Security DLL file is located. If you’re not sure if the System Security DLL file is located in a particular directory, enter “dir” in the command box to display a directory’s contents. To go one directory back, enter “cd ..” in the command box and press “Enter.”
- When you’ve located the System Security DLL file you want to remove, type “regsvr32 /u SampleDLLName.dll” (e.g., “regsvr32 /u jl27script.dll”) and press your “Enter” key.
That’s it. If you want to restore any System Security DLL file you removed, type “regsvr32 DLLJustDeleted.dll” (e.g., “regsvr32 jl27script.dll”) into your command box, and press your “Enter” key.
Did System Security change your homepage?
- Click Windows Start menu > Control Panel > Internet Options.
- Under Home Page, select the General > Use Default.
- Type in the URL you want as your home page (e.g., “http://www.homepage.com”).
- Select Apply > OK.
- You’ll want to open a fresh web page and make sure that your new default home page pops up.
System Security Removal Tip
Is your computer acting funny after deleting any System Security files? I recommend using a program like File Recover from PC Tools. File Recover saves deleted files that otherwise can’t be recovered by Windows operating sytem.
Want to save time finding System Security files? Download Spyware Doctor, let it find the System Security files for you, and then manually delete System Security files.
How Did You Get System Security?
Wondering how System Security ended up on your PC? If you’re infected with System Security or other badware, perhaps you were using…
- Freeware or shareware: Did you download and install shareware or freeware? These low-cost or free software applications may come bundled with spyware, adware, or programs like System Security. Sometimes adware is attached to the free software to “pay” developers for the cost of creating the software, and more often spyware is secretly attached to free software to harm your computer and steal your personal and financial information.
- Peer-to-peer software: Do you use a peer-to-peer (P2P) program or other application with a shared network? When you use these applications, you put your system at risk for unknowingly downloading an infected file, including applications like System Security.
- Questionable websites: Did you visit a website that’s of questionable nature? When you visit malicious sites that are fishy and phishy, badware may be automatically downloaded and installed onto your computer, sometimes including applications like System Security. I recommend you use Firefox web browser, if you don’t already.
Understanding System Security
If you’re infected with System Security, you should know what you’re fighting. I’ll explain some definitions related to System Security.
System Security May Be Rogue Anti-Spyware
Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value. Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application. Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes. While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself.
Often when you’re infected with rogue anti-spyware like System Security, you’ll see a false popup security alert like this:

Rogue Anti-Spyware Tactics
Typically, rogue anti-spyware such as System Security has one or more of the qualities listed below, which is why rogue anti-spyware is considered anti-spyware software of questionable value.
- False positives/fake alerts: Rogue anti-spyware may produce a large number of false positives or use fake alerts, noting that your computer is infected with spyware parasites or other threats that do not really exist.
- Copycat looks: Rogue anti-spyware may copy the look and feel of other legitimate or rogue anti-spyware applications. Often, rogue anti-spyware applications may appear as close clones of other rogue anti-spyware software.
- High pressure marketing: Rogue anti-spyware may use scare tactics or other aggressive advertising and marketing tactics to try to trick you into buying the rogue anti-spyware application. Often, rogue anti-spyware may produce false positives and fake alerts about your computer being infected.
- Poor detection/scan reporting: Rogue anti-spyware may produce poor reports when it scans your PC. For example, rogue anti-spyware may say your computer is infected 11 parasites, but not specify which spyware parasites or what type of parasites. Rogue anti-spyware may also report that your PC is infected with SafeAndClean, but not tell you which related files, DLLS, etc. were found on your computer.
- Weak scanning/detection: Rogue anti-spyware may not only poorly report on computer infection, but rogue antispyware may also poorly scan your PC. Rogue anti-spyware may skip over important folders and files of your computer that should be scanned to detect spyware.
Did System Security use these tactics to trick you into buying System Security?
System Security May Be a Trojan
Trojans install themselves secretly onto your computer, most often through your downloading a simple email attachment (often Trojans pose as harmless pictures). Most Trojans are able to gain complete control over your PC after installation. With this control, the Trojan and the hacker behind it may change your system settings, delete important files, steal your passwords, and watch your computer acitivity.
Infection Methods of System Security and Other Trojans
Most Trojans infect your computer by tricking you into launching an infected file. This poisoned file could disguised as a small file, such as a jpeg or other email attachment, or it might be downloaded via a website or FTP.
- Email: Your PC may be infected with a Trojan when you download infected email attachments, or sometimes even when you simply open an email. Many Trojans exploit security holes in Microsoft Outlook. You may be able to reduce your chances of getting infected by a Trojan by using a spam-blocking software.
- Websites: Your PC may be infected with a Trojan when you visit a rogue site. Many Trojans exploit security holes in Internet Explorer web browser so that by simply visiting a website you may unknowingly download a Trojan.
- Open ports: If your computer runs programs that provide file-sharing functions – such as AOL Instant Messenger (AIM), MSN Messenger, and more – you may open your computer up to vulnerabilities. Using file sharing through these applications may create a network that gives attackers the opportunity to remotely access your computer.

Traduzca al Español
Übersetzen Sie zum Deutsch
Traduisez au Français
Traduca ad Italiano
Vertaal aan het Nederlands
Μεταφράστε στα ελληνικά
Översätta till Svensk
ترجمة الى العربية
中文翻译
한국어에게 번역하십시오
日本語に翻訳しなさい
Traduza ao Português
Переведите к русскому
ok. i have a really easy way. I just use my
Window XP CD and restarted my computer all over. when u are done, the fake system will still there but it will dissaper in about a week
Someone please help me! It’s driving me crazy and I’m ready to pull out my hair. This stupid thing disabled almost everything: the internet, my AVG, superantispyware, etc. I can’t go into safe mode. I can’t even go into add/remove programs. I want to scream so bad. I don’t want to lose my files, my pictures, my itunes, etc. I’m not a computer whiz, so please put it into nice simple, VERY detailed steps.
It would be absolutely lovely to send me a nice long email. I will get down on my knees! I’m desperate.
meri.donut @ yahoo.om
Hey can anyone please help me. System Security isn’t letting me open ANYTHING nothing at all…plus i’m just a teenager idk what the hell i’m suppose to be doing…please help me..idk what to do..my mom thinks its a virus but nah its not lol…can someone please help…send me an email on more details please..
thank you that security program really sucks I was about to break my computer in two. your advice was great and removed that crap
have 2 agree with matt j. – anyone else have a solution ?
Is it possible that this virus is evolving or figuring out how its being killed and learning new tricks?? I’ve spent the last couple hours reading through this website and every single comment made and none of these things work for me! I have no folder named app. data and I can’t right click the shield icon. I’ve searched through my folders for the 8 digit number file to no avail, when I search for ‘System Security’ alot of files come up but none of them seem suspicious and I don’t want to delete anything I need by accident. When I try to system restore (even in safe mode) for some reason no dates come up for me to go back to, so I’m kinda stuck in the present on this thing. I’ve tried to run a full PC recovery and that doesnt work, it just reboots my computer and the virus comes back. If anyone has any new info that may help it would be much appreciated!
So… i have a problem. I am on a net book so no disk drive, and this damn thing installed itself when i wasnt even home lol. Any tips or advice?
I could be wrong, but I think the name in task manager is 14718124.exe, everytime I end that process, System Security goes away, at least for a while.
Hey i found the file but when i click on search i get greated with a load of boxes and cant get any of the search files cant open my virus scanner cant open task manager cant do anything really need help getting ride of this
What’s up everyone. I’ve had this system security crap on my computer now for about a week. I’m running an old computer with Windows 2000, believe it or not.
All of these instructions I’ve been reading on various websites, as well as the instructions some of you are suggesting, all seem to apply to XP and Vista users only. And every time I try to download some anti-virus or anti-spyware program I keep getting some error message towards the end. I beleive most of these anti-virus programs only work on XP and Vista computers only.
I’m having a hell of a time figuring out how to permanently get rid of this System Security crap on Windows 2000. Any help from any of you would be appreciated.
Ok, I’ve tried everything and I can’t get rid of this thing. I can’t download, open taskmgr, safemode and I don’ have any folder with 8#’s in the app folder. Does anyone have any suggestions
When I open up The Documents folder and click on all users folder there is no application data folder………… where do I find it ?
I just want to thank the angels on this website for helping me get rid of this insidious malware known as System Security, especially Kice, Mary, and Joetex. I am a complete computer imbecile and yet I got rid of it despite it shutting down most of my computer functions including system restore, ad/remove programs, CTRL ALT DEL, etc. Here is the solution in a nutshell and if it worked for me, it should work for you:
Hit Start. Go to Documents, My Documents. In the drop down menu, select C:. Click on the Documents and Settings folder. Click on the All Users Folder. Click on the Application Data folder. Inside that you should see a folder labelled with 8 numbers. Clicking on that should reveal the System Security Red Icon of Death. Aha! You’ve found it. Now drag that icon onto your desktop and copy that number. Now go to Search. Select “All files and folders.” In the first box specifying “all or part of the file name” type in that number. All System Security files with that number should appear. Delete them all. Hold on, you’re not done yet! You’ve still got to delete that Icon on your desktop but it probably won’t let you because its running. Reboot your computer. Before it has time to kick in/initialize, quickly delete the icon as soon as you see it. When that’s gone, you’re done. Begone System Security! What a relief! Anyone know their address and CEO btw?
This blocked me out of everything! I was able to finally make progress in Safe Mode. In Safe Mode, I was able to download Spybot and even run it! Spybot found and destroyed some items. Restarted computer and it was BACK!!! So in Safe Mode, I did a search and found the file with all the numbers. Did a search and deleted files. I also pulled the folder out onto my desktop and when I restarted in normal mode (as fast as I could), I deleted the folder off my desktop and it was gone! Thank you for all the advise. I used a few of the methods and nothing worked until I pulled the folder onto the desktop and the search. Not sure which really did it but I would recommend you use all the methods b/c this is a pain. To end, I just want to say up yours! to the jerks who created this program and thank you to the ones who said we wont take it laying down!!!!
I tried to remove the system security by running the task manager but would’nt let me into it saying that my task manager was a virus that i needed to remove…any help here?
This is really frustrating… considering the purchase of a bazooka. I open task manager while the computer is still loading its applications. When ’system security’ shows in the applications, I literally have a split second to try to grab it and throw in on the desktop… not fast enough. I don’t have an applications data folder in my documents and settings folder. I scanned it with AVG while in safe mode. When in normal mode, I had a couple minutes to try to get AVG running. Then a window popped up staying it was able to restore a security file. The DAMNED virus from hell had restored itself!!! I’m trying to not have to reformat the hard drive because it’s a friend’s computer. I’ve tried running it from a boot disk – won’t work. I’ve tried to run programs from a disk – won’t work. What do yall suggest?
ok i could not get on the net or start in safe mode i tried everything so had to start my comp from scratch so far so good
Thanks all you good guys and gals. Same with me. Could not use systems restore, add/remove, regedit, etc. to remove system security. But C:\Documents and Settings\All Users\Application Data revealed the code. So I entered the number in search and the evil files were revealed. Clicked delete and 3 of 5 were gone. Had to rename the remaining two – “pis” – and they were gone. Net community rocks!!!!
THANKS TO SOMEONE ON THIS SITE, I read earlier. I moved the folder of this f###g software to the DESKTOP and restarted my PC. Once my PC restarted and the window started, I removed (deleted) that folder immediately, so it could have not started yet. So far I am happy.
This program will not let me open AVG or download it. I had AVG on my computer at the time of the infection and it literally appears to have blocked my use of it and other programs.
Now what?
Hi everyone,
I am having troble removing this system security thing. Everytime I try to download something to get rid of it, it says a file is infected. How can I get rid of SS for free?
Marys solution pretty much worked ^.^
Wooh! So glad to hear it.
OH wow thanks i got rid of it
My XP was infected, and I followed an instruction posted on youtube. I was able to remove the program using taskmanager (showed up as a string of numbers). Before i continued (deleting programs), I had to leave for a while and pc was re-booted. This was mistake. This thing came back with vengeance. It killed all .exe progreams, including taskmanager. The only thing I could do was to copy files. I copied all my files and re-installed XP. The moral is.. do not reboot your computer before removing it completely. Good luck. We should catch this guy and hang. What a waste of people’s time.
I cannot even open the task manager or the dos prompt to try to remove System Security. What other options do I have?
ALso be sure you go to the program Add or Remove Programs.
Delete System Securites there…
This should be done F I R S T ……
Best of Luck to you ALL!
I was going through the ringer with this…I read all the comments. Very helpful. I think I found an easy way to get rid of this. Go to Start. Click on Search. All or part of the file put in the number 1. Go to the colored views box and click on ICONS. When it comes up look for the Shield Icon for System Securites. Right click on it and check out the information on the date, check out also the number it uses. Write it down. Now check the other files next to it. Anything with that series of numbers is TROUBLE for you. If you are able delete it there by right clicking on it. If not, send it to the desktop. Delete it there and send it to your trash can…
Now, check again by restarting your computer. Please go again to the Search. But this time search for that number that came up in your first search. Mine was 17380934. When I entered it, I found 3 of them. Just delete it there or send it again to the trash can. Have patience. And, when you have succeeded, think of me. I could use your ‘”good vibes”.
I see you as a winner against this insidious virus….
I am really frustrated with this System Security rubbish. I have Windows XP and I have tried find the files in Task Mgr, Config and searched the c drive. The system tells me it’s infected. Everything is infected.
How can I loacte the files and remove them because I think its learning how to stay within the PC.
Please help before I throw the PC out of a window……
Thank you
I want to reinforce what a few previous commenters said, combine their comments, and add some tips. (I thank you for all the great advice!)
THIS WORKS–All You need to do is this:
1) You can locate the folder that contains this virus at:
Documents and Settings> All Users > Application Data > ________
Find a folder named with a bunch of numbers (about 10 numbers). Open it and you’ll see a file that has the shield logo of System security.
2) Move the entire folder to the desktop.
3) You can try to delete it, but it probably won’t let you. So, what you need to do is restart your computer, Then Delete the folder immediately when you see it on your desktop, BEFORE the “security” virus kicks in.
(Tip: if you have lots of icons on your desktop, you may need to move them to a different folder (preferably on C drive) on your computer, because it takes up too much time to display every icon–and the virus might kick in first. For this reason, the fewer icons displayed the better.)
Tip: if you still can’t delete it, remember you can use DOS commands, too. If you know how, you can use the DIR, CD and DEL commands at the DOS prompt to locate and delete the folder.
4) Use Search and type in System Security to find the rest. Delete them and it should be gone.
Tips: To be on the safe side, run your regular anitivirus program. Be sure to Back Up your computer soon.
GOOD LUCK!
and my computer dosent have application setting or what ever
i dont have the document and setting like
josh said. help please!!!!!!
my email – tu_tuannguyen@yahoo.com
i have the same problem as MATT, please someone help us!
I am unable to open the task manager as every application I open is immediately hidden in the background and I can’t access it. Same goes for the internet; though I was able to access the internet through a backchannel only to discover it “jumps” to websites I am not even clicking a link to. How can I remove this without access to task manager or the internet? HELP
This is what you do:
1. Go to C:\
2. Go to Documents and Settings
3. Go to all users
4. Go to application data
5. The files are a bunch of numbers check the folder and you should see the logo
6. Move them to desktop, one probably wont be able to be moved
7. Restart your computer and delete the files on your desktop before system security starts
8. Then delete the remaining folder/file
9. Now you can use task manager, system restore,etc.
On Vista, boot into Safe Mode. Download Malwarebytes (free). Run Malwarebytes on pc. Do a full scan. May take half hour or more to complete. Select to remove all. Reboot.
@Jayhud: YES, this will definately work in safe mode !!!
yeah, manual removal worked for me. name was not “systemsecurity” but 8 numbers. the number of the folder and the .exe file changes, so you have to identify your combination first. its rather easy to find them out, just have a look at the folders in your app-data folder (eg “c:\Documents and Settings\All Users\Application Data\”). in my case there was a hidden (!!) folder named “14322504″. in it i found some language files and a 14322504.exe. then delete corresponding process, reg-key and files as in the article.
dd
My only problem is my machine is so busy I can’t get the task manager to come up or do anything. Will these steps work in safemode?
my computer is still messed from system security!!! It wont let me click on any icons. and when i try to go into safe mode, it wont let me. i need serious help!!! if anybody can help me, please contact me at chrissmith97@att.net. thanks.
My computer’s system are all infected.
even the task manager. please reply me
at tu_tuannguyen@yahoo.com
Here’s how i got rid of it.
Boot into ’safe mode’. Run ‘System Restore’ (went back a month). It’ll re-boot automatically, problem solved.
Hi guys!
This is how you get rid of the virus!
1. Kill the process, by pressing Alt+Cntrl+Del. The window flashes by really fast, so you have to be quick to end process.
2. Restore to an earlier system settings by going to system tools, then system restore. Choose an earlier date than when you got infected.
Good luck
o.k i’ve tired just about everything but nothing works! the system security keeps telling me everything is infected!! AND there are constant pop-ups! I can’t open up anything!!!! Please HELP ME!! PLEASE! i think i am going crazy! Please Help ME! PLEASE
As everyone else PC out of control. I managed to get control my XP Dell PC in safe mode start up only as admin user. Located some of the files listed and deleted + emptied recycle bin. Now I am able to control my PC but it has shut down the COM1 port so no ethernet etc. Device manager says OK but Intel sw mgr says disabled. I have reloaded drivers. Ethernet port is not a removeable card! XP System Restore does not work! Anyone got any ideas without backing up files and doing Manual Restore? Thanks in advance
Hey guys!!!! i can offer you a simple solution to the problem: go to the start menu, if u cant, start up windows in safe mode with networking. Then go to system tools, then system restore. If u know when system security entered ur computer, then restore to a day or two before that. eg: i got infected yesterday, so i restored to the 12th of june….then let the computer restart. After this, download the freeware Malwarebytes antimalware, and run a fll scan. go to the search, n type in System security, for local hard drives. then delete all files associated. After that, u should be done. if not, go to youtube. they have some excellent tutorials.
I don’t see applications data as a folder, this has messed up my little brothers computer and it nneeds to be fixed. I seriously need help getting rid of this and if anyone cud guide me thru email or text, whatever, I really need it gone
I had similar trouble with not having control of the infected pc. Could not get online to download anything or search for answers. The bad scareware even took over my corporate Symantec and disabled it. Used another pc and downloaded Malware bytes and found this fix helpful.
I searched for the files but no luck (after scanning with malware I noticed you might need to look for security system 2009.lnk). That was not fun but back to what helped me.
1. Download Malware bytes
2. logged on in safe mode with networking
3. Installed and updated Malware bytes and ran the program
4. Removed it all
5. Logged out and logged in normal (reboot)
6. Ran Malware bytes again (finally had control to do that without being in safe
mode)
7. Did a final Symantec corporate virus scan. All GONE!
UGH why do we have people that are so talented waste their time torturing us!
What I did to get rid of it was download Malwarebytes on another computer and put it onto a blank disc and then download from there onto the infected computer in safe mode. Had to do that because it wouldn’t let me download any anti-malware programs off the Internet. But I’m having a problem now that it’s supposedly gone. Everytime I click on a link in Google, it brings me to a different search engine or a site that’s trying to sell me cars or something. What’s up with that? I literally can’t get around on the Internet now because of that…
i have the same problem as everybody else; not being able to open any programmes.
this seems to be working for me so far:
i booted in safe mode & ran AVG (this was the only programme that worked for me, it wasn’t able to run a proper scan but it did run something called a ‘command line scan’ which didn’t remove the virus but did get rid of the annoying desktop background problem).
i then ran a search for ’system security’, it found 3 files all of which i deleted.
then i opened /documents and settings/application data (i had to type in ‘application data’ manually, the folder didn’t appear in my documents & settings folder) and deleted any file/folder that was just a string of numbers (the numbers i had were different to those in the above guide, & it didn’t display the ’shield icon’, however on mouseover it did say ’system sec industries’ or something similar).
then i rebooted in normal mode, i still couldn’t use MBAM/Spyware Doctor, but AVG worked, i’m running a full AVG scan now & it’s picking up a fair few files, so i’m hoping this gets rid of the last of it.
This is how i removed it:
Documents and Settings> All Users > Application Data > ________
The should be a folder named with a bunch of numbers. Open it and If it has the shield logo of System security then you found it. Move the folder to the desktop. Restart the computer and remove it as soon as the computer starts (and before the program starts).
Hello. I had the same problem(s) as of yesterday, spent hours trying to find a way to delete it. What finally worked for me was going to bleepingcomputer.com and downloading Malwarebytes. The problem is that the malware wont let Malwarebytes install, so you need to stop the malware process from running. Is tricky when everytime you try control alt delete it only flashes and goes away. I tried Control shift escape over and over until I could get an idea of what was running. The malware was the top one on the list on my computer (Make sure you don’t delete a system process). The next trick is stopping it quickly. What I did is over and over I would click the process as quickly as possible and then the end process button, and there was a quick warning flash about ending an active process (I think, flashed too fast to read). If you are real quick and keep trying you can click the end process and then the YES button on the warning that pops up. That is what I was finally able to do, and then once the process stops, you can finish installing Malwarebytes and it will find and remove the software. The people responsible for this malware should be made to Pay!!!! I spent hours on this…..
I tried to removed them manually, but I didn’t find any Trojan related stuff in processes within Task Manager (Ctrl+ Shift+Esc). What should I do??
I can’t download anything, i cant restart in safe mode, i can’t open task manager, and I have no idea what files to look for in a search. System Security is on my computer and I have no way to delete it. These instructions are unclear to me. Please help.
I gave up and the darn thing simply dissapeared. Anyone else?
Definately follow the move to desktop trick. Have been removing this kind of stuff for ages for click happy friends and all the usual methods failed. it stopped all antivirus, antispyware, task manager, safe mode even!
nice that a simple trick like this works so well.
This is a real bugger of a file. The program would not allow me to remove it from the folder, I could not even get task manger to come up.
Basically I booted into ’safe mode’ logged in as Administrator. There was no folder for Administrator, so it was not a system wide problem, which was good. I did a search for the file number. I found a link in my ‘Prefetch’, deleted that.
Then went to: HKEY_LOCAL_MACHINE>software>microsoft>windows>currentversion>run> and deleted it there.
Then I went to the account that was infected while still in ’safe mode’ and deleted the folder and the ‘regedit’ links.
This fixed the problem.
^Read this to kill it, I’m going to stop commenting for awhile. Welcome to those I helped and thank you for making this site.
Read the comments made above, find its files and move them to desktop and delete it right as you log in before it runs. The info on this site will tell you where to find them. The root of it should be at…
Documents and Settings> All Users > Application Data > ________
The should be a folder named with a bunch of numbers. Open it and If it has the shield logo of System security then you found it. Move the folder to the desktop and use search and type in System Security to find the rest. Delete once you log in and it should be gone.
I’ve got one for you. Got this System Security on one of my computers and it will not let me run anything. Keeps giving me the message that the files are infected. Even tried copying different spyware and malware software onto a cd and trying to run it, but still won’t allow any programs to run. How do I get rid of it?
^someone listened ^_^
Drag program files to desktop. (find them by right clicking on System Security icon to properties) Drag files to desktop after deleting what you can. Reboot and delete files before they initialize. Worked for me
0.)Locate your real windows cd. (or an old xp disc your not using). You will need this for the next few steps..
1.)Find a brainy friend/spouse(unless that’s you..)
2.)Ask them to make a ‘BARTPE’ cd with superspyware/malbyte/adaware ’slipstreamed’ onto said BARTPE disc. I would recommend some kind of ‘ISO image editor’
3.)Boot with the cd. This will isolate your tools from the infected system, yet will allow you to scan/remove/delete without the malware stopping you.
4.)Rejoice in the fact that you are now 1 step ahead of the jerks who make scareware like systemsecurity.
if you can’t do this, well.. there are ‘torrent files’ that are pre-made BARTPE ‘ISO’ files, but… that’s a grey line legally.. do so at your own risk…
If you are having trouble with System security 2009 I found a way to kill it. My trial Spyware Doctor did not find it but the removal info on this site was helpful. its root is in the application area. I couldn’t delete its folder while it was up so I moved it to the desktop and restarted my computer. In the few seconds before it runs and freezes you up, quickly delete that folder. the file name for mine was a bunch of numbers and had the image icon in it.
Same thing here, Can’t do anything! Any program I try to open brings up a pop-up, telling me that I can’t open the file, because it’s infected.
Dee, mine is exactly the same as yours. How can we follow the instructions, if I can’t even get to a start menu bar. I can’t Ctrl Alt Del. I can’t click on Run to get to task Mgr. I have no icons, just my old desktop, I worked for 3 hours last night, and just shut it off, I’m so scared I’m gonna lose all my files! I’m at work trying to find help now. If anybody has another fix for our problems, please let me know!
My infection is so bad I cannot open the Task Manager, Control Panel, Internet Explorer, or any other program or file that would give me the ability to remove this thing. None of the instructions on any of the sites I found worked because of this. any suggestion on whatelse i can do before i take it to the shop to get serviced?
wow it poped up agen and agen leve me alone dam thing!
thanks alot, i know it not a big file so you cant find it on a search and remove thing so you need to click serch and tipe in system secrity and delet all the files you find and thanks soo much i was buging me for days(well it was 5 hours or so) and some how it ceeps downoading it self back in to my comeputer dam it
OK Update
Someone told me if I deleted this key in my registery
HKLM/Software/Microsoft/Windows NT/Current Version/Image File Execution Options/explorer.exe
then the PC would boot correctly so I went into safe mode and let it boot as much as it would hit cntr alt del and it brought up the task manager then under I selected run a tash and pick regedit 32 under windows/system 32 and deleted that key shut down reg edit re-booted and AVG got the malware and deletng that key took the PC out of Debugging mode.
OK I got the system security virus and like others it would not let me open anything.
Read several comments here saying AVG removed the virus.
Booted in Safe Mode With Networking and d/led AVG and installed it. It did a scan and seemed to find lots of files when it was finished I attempted to reboot and now I can’t get the program to reboot win xp or into any version of safe mode except camand prompt?
Please help
Hi all, Yes it is a terrible problem but it can be fixed. Simply use your system restore to fix it. disable your internet connection and restart – this allows you to work on the machine as a stand alone and head for system restore. download Spybot search and destroy and run before start up. Once done all should be well….gl
Same as everybody else. I can’t download any of the programs to remove System Security and I can’t even launch the taskmaster or system recovery. The manual steps don’t work either. I don’t know what files are valid and what files are part of this crap. I have been told to just start over, but I don’t have the disks to start over.
Help
This thing won’t allow me to pull up my “System recovery” HELP!!!!!
I can’t download antivirus sofware…..PLEASE Help!
The fastest and easiest way to get rid of this mess is to use your PC’s system recovery discs and go back to a day or two before the virus hit. My infection was so bad I could not open the Task Manager, Control Panel, Internet Explorer, or any other program or file that would give me the ability to remove this thing. None of the instructions on any of the sites I found worked because of this. Good luck!
……..I am going crazy with this VIRUS!!!!! I can open up the internet at start up but then it won’t let me open up anything!!!! I have tried a ton of stuff but I CAN’T OPEN UP ANYTHING without it popping up a message that I need to activate my anti-virus . Somebody has to have an idea on how to terminate this crap.
I have run into a major problem with System Security after running Malwarebytes and supposedly deleting this pest. Upon rebooting my computer, the shortcut was gone, but System Security was still live and active on my computer. Now, I can’t open any of the functions which are supposed to help me get rid of it. No Malwarebytes…no ComboFix…No Windows Defender…Every time I attempt to open a function or application…This evil System Security program replies : “Application cannot be executed. The file is infected. Please activate your antivirus software”. I am losing my mind trying to find a way to stop this program. What should I do now?…I’m stumped..
I am trying to get rid of this Secruity Sytem too…..It is so frustrating cause I can pull up anything…does anyone have any suggestions at all….I have downloaded Norton and the Windows defender however this stupid spyware will not allow it to come up……..HELP!!!!!!!!!!!!
I have the same problem as Jamie. It won’t let me open any programs or connect to the internet. What do I do?
System Security will not allow any programs to open, so I cant download anything to get rid of malware, it wont allow me to access registry info or anything. Screen pops up for splt second and is gone. Help!
this is enough to drive u crazy im so tired of this garbage popping up on my computer im going to try and do the steps u all suggested to me about killing the germ that want go away
It worked! Thanx!
Our Windows XP operating system was infected with the adware “System Security”. To get rid of it we downloaded the free program “Windows Defender” from the microsoft website. Once the program finished downloading we had it run a system scan. It found the “System Security” files – marked them as high risk and asked us if we wanted to “remove all” which we did and have not had a problem with “System Security” since.
i didnt wanna pay so i didnt unload and hated the spyhunter i feel like it’s the same with security system.. i tried system restore but it didnt worked , it was grayed out and infected by security system..i deleted the file by following the steps mentioned but it keeps coming back still when i turn the pc on..i fought for 3 days but didnt give up. i downloaded the AVG free 8.0 and scanned the security system file appearing in my desktop and program files and voila it gave me the exact location…it was a folder in the application date usually named by numbers so you wont noticed it and when i opened the folder, i found “system security.exe” it wont even allow me to delete it at first to i ended all process and applications in task manager and disconnected from the net and deleted the shit…i was successful…i had to restart my pc thrice to make sure it doesn’t come back…it’s gone for good..thanks AVG!
futher more to my feed back, Anti virus, tou are a genius…
ABSOLUTE GENIUS. I have battled for days with Sustem security and started to get really anxious.
Thanks to everyone with suggestions, and the creator of this site. good ridence to System security!!!
Follow the ThEAnTi ViRuS instructions posted on 2/18. I did it the first time and I selected the 6 the last bold date and it did not delete it. Then I did it a second time and deleted the first bold date 1 and it worked for me! I was praying the entire time! Yes, God is good! I was going crazy:)
Copy and paste:
If you have XP then i can help well it mite work for Vista but i had system security stuck on my comp. And what I did was go to the start menu, all programs, accessories, system tools, system restore. And from there you click the first one selected that says “restore computer to an earlier time” (before you go system security) then like it says select a bold date. then hit next and just follow it through. So at the end your comp. should go to shut down mode and it will restore then and restart and your comp should be fine! Well let me know if that helps any of you wahoo’s out there.
Your instructions worked great for XP and I finally got rid of that system security nightmare.
Thank you so very much, you’re a lifesaver!!!!!!
If you have XP then i can help well it mite work for Vista but i had system security stuck on my comp. And what I did was go to the start menu, all programs, accessories, system tools, system restore. And from there you click the first one selected that says “restore computer to an earlier time” (before you go system security) then like it says select a bold date. then hit next and just follow it through. So at the end your comp. should go to shut down mode and it will restore then and restart and your comp should be fine! Well let me know if that helps any of you wahoo’s out there.
even i removed this malacious system security but i am getting error message as resycled\ntldr.com is not a valid win32 application when i try to open a local drive. also my cookies are getting infected.please help me.
just download AVG takes a while to check system but no more system security.
i can not figure this out i am so upset that my computer is infecticted with the garbage please if someone could explain to me alot more in dummy terms and in better details i may figure it out i have tryed everything. please and thanks in advance.
I found System Security in one of my customers PC (XP) and the behavior were just like described in your Threat Level – Extreme Danger! Even Windows System Restore function was blocked. Could not install Superantispyware – error message, I tried to restore system from outside, via Winternals ERD Commander. Result – ‘c\windows\system32\config\system’ file destroyed (rootkit?). Then I copied necessaries data and formatted the disk.
I wish you luck, but I doubt if there could be any success removing that threat manually.
I am having the same problem as I cannot find system security in my task manager (looks to be using a code). Please help the constant pop-ups are sending me over the edge. Thanks
I removed system security by following the steps but I am still getting infections in my cookies when I am on the internet? Did I miss something in the removal? Any help please????
i wanna stab the guy that created System Security. The only problem i have with the instructions above is what to replace %desktopdirectory% with. So far thats the only roadblock i have come into. If you could help me it would be greatly appreciated. Thanks
Doesn’t work.
I do not know what file names, etc to remove to get rid of System Security application. Please help
Hi, Mike
Check out the boxes above the detailed removal instructions, so you can see waht System Security files to remove.
Let me know how else I can help.
Best,
Kris
thank you so much
i thought i have to bring it to store and format my precious computer
Is there a reason you didn’t include the NAME of the program files or the registry items for System Security in your instructions? They’re very clear, except they miss this incredibly important detail.
I’ve looked through my Add/Remove program, i’ve searched all files and folders for 2 hours, and i can’t tell which system security in my task manager it is, most just say system or system idle. Please help if you can.