By George Norman
Added on 19 Feb 2010(1059 Views)



classification: Rogue AntiSpyware Programs
PC Security 2009, a rogue antispyware program, is usually distributed by malware that installs the rogue on your system without your consent. The rogue’s installer also sets it up so that the rogue will automatically run at startup. This means that you will boot up your computer one day and come face-to-face with PC Security 2009 – each time you boot up your computer, the rogue will be there to “greet” you.
By “greet” I mean it will use various scare tactics on you. The goal of these scare tactics is to trick you into thinking your system is infected. Once you’re duped into thinking your computer is infected, PC Security 2009 offers to remove said infection from your system – but only if you purchase a PC Security 2009 license first. Pay and you will fall victim to this rogue scam. You will be paying for a fake security software solution in order to remove a made-up infection.

The scare tactics that PC Security 2009 include the following:
  • Fake system scans that detect a whole bunch of infected files. These files were created by the PC Security 2009 installer; they are harmless.
  • Phony security alerts like the ones below:

Trojan Detected!
A piece of malicious code was found in your system which can replicate itself if no action is taken. Click here to have your system cleaned by PC Security 2009.

Privacy is at risk!
Attention, keylogging and intercepting scripts were detected. Your private data may be disclosed to third parties. Click here and PC Security 2009 will remove the infection.

Privacy alert!
Your system was found to be infected with intercepting programs. These can log your activity and damage your privacy. Click here for PC Security 2009 spyware removal.
  • A fake Windows Security Center window will appear and advise you to purchase a PC Security 2009 license.
  • The rogue will hijack your browser.


Automatic removal guide
Step 1. If you have a printer, make sure to print out this tutorial. If you do not have a printer, save this tutorial, go out to a copy center and print it out there. If you do not have a printer and do not want to go out, then use the pen and paper method: grab a pen and a piece of paper and write down the instruction presented in the steps below. In the process of eliminating PC Security 2009 from your machine you will need to shut down the browser. And since this will also shut down the tutorial, you need to know what you should do next.

Step 2. You will have to install Malwarebytes’ Anti-Malware. In this regard you need to download the software’s setup executable. Just click this link and save the .exe file on your computer (preferably on your desktop).

Step 3. Double click the Malwarebytes’ Anti-Malware setup executable. It should be on the desktop under the name mbam-setup. This will launch the installation process. If you already know how to install a piece of software, proceed to step 4. If you do not know how to do this, we’ll walk you though it all:



- The Select Setup Language window should have popped up. By default, the language in which the software will be installed is set to English, but you can change this. The software provides support for 30+ languages. After selecting the language of your choice, click OK. It would be best to just leave it set to English though.



- The Malwarebytes’ Anti-Malware Setup Wizard will now popup. Just click Next.



- You will be presented with the License Agreement. Click I accept the agreement and then click Next. If you do not accept the agreement you will not be able to continue.



- Keep clicking Next until you get to the Ready to install window. Now click Install. After the installation process completes click Finish. Do not uncheck the boxes next to Update Malwarebytes’ Anti-Malware or Launch Malwarebytes’ Anti-Malware.















Step 4. The Malwarebytes’ Anti-Malware application will launch automatically. The Perform quick scan option should be checked by default – if it isn’t then check it and then click Scan. You are well advised to close all running apps before clicking scan. This will ensure the scan for PC Security 2009 will complete swiftly.



Malwarebytes’ Anti-Malware will start scanning your files for signs of PC Security 2009. This may take a while, so be patient. It all depends on how powerful your computer is and how many files Malwarebytes’ Anti-Malware has to scan.



When the scan for PC Security 2009 is complete you will be presented with a notification box. Click OK to close the notification box and go to the main Scanner screen. Click Show Results and you will be presented with a list of all the infected files Malwarebytes’ Anti-Malware has detected.





Step 5. Click Remove Selected and Malwarebytes’ Anti-Malware will remove all the infected files it has detected. It may be necessary to restart your computer in order to remove some of these files. After Malwarebytes’ Anti-Malware is done removing all the infected files, it will open Notepad and present the scan log to you. You can review the log at your leisure – save it If you want.



Step 6. Close Malwarebytes’ Anti-Malware and you’re done. No traces of PC Security 2009 should be left on your computer.

Manual removal guide

Stop and remove the processes:

PC_Security2009.exe
qyciq.exe
imevata.exe
sibajisehe.exe


Access the Windows Registry Editor and delete the following registry keys:


HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall/PC_Security2009
HKEY_LOCAL_MACHINE/SOFTWARE/PC_Security2009
HKEY_CURRENT_USER/Control Panel/don't load "scui.cpl"
HKEY_CURRENT_USER/Control Panel/don't load "wscui.cpl"
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run "PC Security 2009"


Locate and delete the following files:


c:/Program Files/Common Files/edydule.db
c:/Program Files/Common Files/sisejemaqy.pif
c:/Program Files/Common Files/wepyta._sy
c:/Program Files/PC_Security2009
c:/Program Files/PC_Security2009/AVEngn.dll
c:/Program Files/PC_Security2009/htmlayout.dll
c:/Program Files/PC_Security2009/PC_Security2009.exe
c:/Program Files/PC_Security2009/pthreadVC2.dll
c:/Program Files/PC_Security2009/Uninstall.exe
c:/Program Files/PC_Security2009/wscui.cpl
c:/Program Files/PC_Security2009/data
c:/Program Files/PC_Security2009/data/daily.cvd
c:/Program Files/PC_Security2009/Microsoft.VC80.CRT
c:/Program Files/PC_Security2009/Microsoft.VC80.CRT/Microsoft.VC80.CRT.manifest
c:/Program Files/PC_Security2009/Microsoft.VC80.CRT/msvcm80.dll
c:/Program Files/PC_Security2009/Microsoft.VC80.CRT/msvcp80.dll
c:/Program Files/PC_Security2009/Microsoft.VC80.CRT/msvcr80.dll
c:/WINDOWS/bezyneluri.dll
c:/WINDOWS/hitamoja.db
c:/WINDOWS/jagavodo._dl
c:/WINDOWS/uwojevuk.reg
c:/WINDOWS/xyqimomyte.inf
c:/WINDOWS/system32/_scui.cpl
c:/WINDOWS/system32/exeneqaze.vbs
c:/WINDOWS/system32/ezecep.scr
c:/WINDOWS/system32/loturyk.db
c:/WINDOWS/system32/sibajisehe.exe
c:/WINDOWS/system32/xyluny.dat
c:/Documents and Settings/All Users/Application Data/hipeh.vbs
c:/Documents and Settings/All Users/Application Data/imevata.exe
c:/Documents and Settings/All Users/Application Data/juvugyx.sys
c:/Documents and Settings/All Users/Application Data/tihavodyru.dl
c:/Documents and Settings/All Users/Documents/emytijy.bat
c:/Documents and Settings/All Users/Documents/etycipifez._sy
c:/Documents and Settings/All Users/Documents/uzasezo.bat
%UserProfile%/Application Data/ciwizatyvo.vbs
%UserProfile%/Application Data/equcetovyf.scr
%UserProfile%/Application Data/huwo.lib
%UserProfile%/Application Data/netekoh.pif
%UserProfile%/Application Data/Microsoft/Internet Explorer/Quick Launch/PC_Security2009.lnk
%UserProfile%/Cookies/qyciq.exe
%UserProfile%/Cookies/tufubyvyv.inf
%UserProfile%/Desktop/PC_Security2009.lnk
%UserProfile%/Local Settings/Application Data/dofevura.ban
%UserProfile%/Local Settings/Temporary Internet Files/ehyzubi.ban
%UserProfile%/Local Settings/Temporary Internet Files/teqiqu.dl
%UserProfile%/Local Settings/Temporary Internet Files/xujite.vbs
%UserProfile%/Start Menu/Programs/PC_Security2009
%UserProfile%/Start Menu/Programs/PC_Security2009/PC_Security2009.lnk
%UserProfile%/Start Menu/Programs/PC_Security2009/Uninstall.lnk


Unregister the following DLL libraries:

bezyneluri.dll
msvcr80.dll
msvcm80.dll
msvcp80.dll
pthreadVC2.dll
AVEngn.dll
htmlayout.dll


Block access to the domain(s):

pcsecurity-2009.com
pcsecureredirect2.com
pcsecassal.com
kuxx.info




Don't forget to:

Tags:

Link to this article:



Add comment:
Name(Required)
Email(Required - Never shown)
Website(Optional)
Comment(Required):

Insert the following code:
Removal Guide Articles
How To Remove XP Micro Antivirus
If you did not manually install XP Micro Antivirus and ...
19 Feb 2010
How To Remove Software Antivirus
Software Antivirus, unlike what the name may suggest, is not ...
19 Feb 2010
How To Remove WiniFighter
The irony here is that the name WiniFighter would lead ...
19 Feb 2010
How To Remove PC Security 2009
PC Security 2009, a rogue antispyware program, is usually distributed ...
19 Feb 2010
How To Remove Security Essentials 2010
The people with malicious intent that put out the ...
18 Feb 2010
How To Remove Personal Anti Malware
Personal Anti Malware, a rogue security software application, is usually ...
18 Feb 2010
Recommended Tools

Top Downloads