Oct 22

Security 2009 ( also known as Security2009 ) is corrupt anti-spyware software that is secretly installed by trojans. Once inside, Security 2009 falsely claims in its pop up messages that a full version of its program will remove all of the unwanted spyware from the computer.

Risk Level : High ( Dangerous )

Note :- To safely & quickly detect Security 2009, We highly recommend you to use the Removal Tool for Security 2009.

Download – Removal Tool for Security 2009

Screenshots:

Security 2009

Security 2009 Screenshot

Symptoms of Security 2009

Pop up balloon warning messages claiming that your PC is infected.

  • "Critical System Error",
  • "Your computer is infected",
  • Hijacked homepage to obscure webpage.
  • Flashing icons appear on your system tray (Near of your system clock).

Manual Removal Process: ( How to get rid of Security 2009 )

Search and kill the following processes (Learn Here)

Security2009.exe, Security2009[1].exe

Remove Security 2009 .exe & dlls files (Learn Here)

Security 2009 « Delete this folder first
C:\Program Files\Security2009\Security2009.exe
C:\Program Files\Security2009\Security2009.url
C:\Program Files\Security2009\uninst.exe
C:\Program Files\Security2009\Lang
C:\Program Files\Security2009\Lang\English.ini
C:\Program Files\Security2009
C:\Program Files\Security2009\blacklist.txt
C:\Program Files\Security2009\msvcp71.dll
C:\Program Files\Security2009\msvcr71.dll
C:\Program Files\Security2009\sdev.sgn

%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Security2009 1.32.lnk
%UserProfile%\Desktop\Security2009.lnk
%UserProfile%\My Documents\Security2009
%UserProfile%\My Documents\Security2009\SDBHO.dll
%UserProfile%\My Documents\Security2009\sdcfg.dat
%UserProfile%\My Documents\Security2009\Logs
%UserProfile%\My Documents\Security2009\Quarantine
%UserProfile%\Start Menu\Programs\Security2009
%UserProfile%\Start Menu\Security2009 1.32.lnk
%UserProfile%\Start Menu\Programs\Security2009\Security2009 1.32.lnk
%UserProfile%\Start Menu\Programs\Security2009\Security2009 Website.lnk

Remove/Modify corrupt Registry Values (Learn Here)

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SpyProtector
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Spy Protector
HKEY_CLASSES_ROOT\CLSID\{107A1D63-2EAA-4694-8ABA-EC209C630D83}
HKEY_CLASSES_ROOT\CLSID\{CBE202A6-3B75-4189-B161-9B4DF370BEE9}
HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\Spy Protector
HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\Spy Protector
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\srcss.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CBE202A6-3B75-4189-B161-9B4DF370BEE9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Spy Protector”


Download – Removal Tool for Security 2009

Leave a Reply

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word