Security Solution 2011

By Domesticus in Rogue Anti-Spyware Program

Threat Scorecard

Threat Level:	100 % (High)
Infected Computers:	125

First Seen:	May 24, 2011
Last Seen:	January 10, 2022
OS(es) Affected:	Windows

Security Solution 2011 Image

Security Solution 2011 is a clone from the MS Removal Tool family of rogue security programs. These fake security applications are usually distributed by Trojans, such as the Zlob Trojan or the Fake Microsoft Security Essentials Alert Trojan. Security Solution 2011 is part of a scam that targets inexperienced computer users to try to steal their money. ESG PC security advisers strongly recommend removing Security Solution 2011 with a fully-updated anti-malware application. Security Solution 2011 contains components that may make its removal difficult. In these cases, ESG malware analysts recommend rebooting Windows in Safe Mode.

Table of Contents

How the Security Solution 2011 Works?

The Security Solution 2011 scam is similar to scams that are commonly carried out by most rogue security programs. This kind of scam has three main steps:

Infiltrate the victim's computer. First of all, Security Solution 2011 needs to be downloaded and installed onto the victim's computer. There are many ways in which Security Solution 2011 may do this, but the most common is through the aid of a Trojan. Trojans associated with Security Solution 2011, such as the Zlob Trojan or the Fake Microsoft Security Essentials Alert Trojan, will usually display a fake error message claiming that a virus was detected on the victim's computer. Then, the Trojan will prompt the computer user to download Security Solution 2011 to fix the nonexistent virus. If the victim agrees, Security Solution 2011 will be downloaded and installed.
Enforce the illusion that the victim's computer is severely infected. Security Solution 2011 creates a large number of problems on the victim's computer, in order to make the victim panic. Some of these problems include slowness, instability, frequent crashes, blocked access to executable files, frequent error messages and blocked access to the Internet browser. Security Solution 2011 also reinforces this illusion by displaying constant fake security alerts and a fake scan showing a large number of nonexistent virus problems on the victim's computer. Due to the changes that Security Solution 2011 makes to the Windows Registry, these effects cannot be bypassed without launching Windows in Safe Mode.
Charge the victim to pay for a "full version" of Security Solution 2011. Once Security Solution 2011 has managed to make the victim panic, Security Solution 2011 will attempt to convince the victim to pay for a "full version" of this fake security program. It will do so with constant security alerts and by constantly directing the victim to a payment form. Security Solution 2011 claims that the only way to fix the very problems Security Solution 2011 alleges to detect is by paying to unlock hidden features in this fake security application.

Don't become a victim of Security Solution 2011. ESG malware analysts recommend ignoring Security Solution 2011's alerts and removing this fake security program with a legitimate anti-malware solution.

Aliases

11 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	Clicker.AQDG
Ikarus	Trojan-Clicker.AQDG
DrWeb	Trojan.PWS.Siggen.19141
BitDefender	Gen:Trojan.Heur.VB.im0@cWDXh1ci
Kaspersky	Trojan.Win32.Vilsel.bbct
Panda	Trj/Genetic.gen
Sophos	Mal/Ratti-A
AntiVir	TR/VB.Downloader.Gen
BitDefender	Gen:Trojan.Heur.VB.im0@caBYBJai
Kaspersky	HEUR:Trojan.Win32.Generic
NOD32	probably a variant of Win32/TrojanClicker.VB.NMH

SpyHunter Detects & Remove Security Solution 2011

File System Details

Security Solution 2011 may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	149000.exe	c7b1da225315d5f8badf86a8b5b96bb1	22
Name: 149000.exe MD5: c7b1da225315d5f8badf86a8b5b96bb1 Size: 139.26 KB (139264 bytes) Detections: 22 Type: Executable File Path: %APPDATA%\4172309 Group: Malware file Last Updated: May 24, 2011
2.	Security Solution.exe	93e83a809bdbbbeb582bc0c92a3c3f90	18
Name: Security Solution.exe MD5: 93e83a809bdbbbeb582bc0c92a3c3f90 Size: 2.88 MB (2881024 bytes) Detections: 18 Type: Executable File Path: %APPDATA%\Security Solution 2011 Group: Malware file Last Updated: May 24, 2011
3.	Security Solution.exe	d8bacc6bc6c3a5d2ed42a12ecd2541cf	13
Name: Security Solution.exe MD5: d8bacc6bc6c3a5d2ed42a12ecd2541cf Size: 2.87 MB (2878976 bytes) Detections: 13 Type: Executable File Path: %APPDATA%\Security Solution 2011 Group: Malware file Last Updated: May 24, 2011
4.	securitymanager.exe	aaef794f2ce0ea7cd80a9373378670ce	10
Name: securitymanager.exe MD5: aaef794f2ce0ea7cd80a9373378670ce Size: 92.16 KB (92160 bytes) Detections: 10 Type: Executable File Path: %APPDATA%\Security Solution 2011 Group: Malware file Last Updated: May 24, 2011
5.	Security Solution.exe	932f0ba703506a56d2534b5612905283	8
Name: Security Solution.exe MD5: 932f0ba703506a56d2534b5612905283 Size: 2.84 MB (2848256 bytes) Detections: 8 Type: Executable File Path: %APPDATA%\Security Solution 2011 Group: Malware file Last Updated: May 24, 2011
6.	Security Solution.exe	81c8267809e1e2c43a2408868696c8fd	8
Name: Security Solution.exe MD5: 81c8267809e1e2c43a2408868696c8fd Size: 2.84 MB (2846720 bytes) Detections: 8 Type: Executable File Path: %APPDATA%\Security Solution 2011 Group: Malware file Last Updated: May 24, 2011
7.	securitymanager.exe	47a3d252118efac950b88b7a8f6e7b98	7
Name: securitymanager.exe MD5: 47a3d252118efac950b88b7a8f6e7b98 Size: 88.57 KB (88576 bytes) Detections: 7 Type: Executable File Path: %APPDATA%\Security Solution 2011 Group: Malware file Last Updated: May 24, 2011
8.	securitymanager.exe	2b4a5ff1a6abdd81b72f4daf8b17bf04	6
Name: securitymanager.exe MD5: 2b4a5ff1a6abdd81b72f4daf8b17bf04 Size: 89.6 KB (89600 bytes) Detections: 6 Type: Executable File Path: %USERPROFILE%\AppData\Roaming\Security_Solution_2011 Group: Malware file Last Updated: May 24, 2011
9.	Security Solution.exe	27dfa2ebbdf4ef69e23a5ab333e94ace	5
Name: Security Solution.exe MD5: 27dfa2ebbdf4ef69e23a5ab333e94ace Size: 2.78 MB (2784256 bytes) Detections: 5 Type: Executable File Path: %USERPROFILE%\AppData\Roaming\Security_Solution_2011 Group: Malware file Last Updated: May 24, 2011
10.	securityhelper.exe	832d2e9536062c971b889f47b3786a1a	4
Name: securityhelper.exe MD5: 832d2e9536062c971b889f47b3786a1a Size: 2.78 MB (2785283 bytes) Detections: 4 Type: Executable File Path: %APPDATA%\Security Solution 2011 Group: Malware file Last Updated: May 24, 2011
11.	149000.exe	28770508df3e0927e45574ec338ec62e	2
Name: 149000.exe MD5: 28770508df3e0927e45574ec338ec62e Size: 139.26 KB (139264 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\59359 Group: Malware file Last Updated: January 10, 2022
12.	Security Solution.exe	fbb9ef06900490c45b2bad5300336415	1
Name: Security Solution.exe MD5: fbb9ef06900490c45b2bad5300336415 Size: 2.88 MB (2880512 bytes) Detections: 1 Type: Executable File Path: %SystemDrive%\Documents and Settings\NetworkService\Application Data\Security Solution 2011 Group: Malware file Last Updated: May 24, 2011
13.	%AppData%\Security Solution 2011\securityhelper.exe
Name: %AppData%\Security Solution 2011\securityhelper.exe Type: Executable File Group: Malware file
14.	%AppData%\Security Solution 2011\securitymanager.exe
Name: %AppData%\Security Solution 2011\securitymanager.exe Type: Executable File Group: Malware file
15.	%Temp%\[RANDOM CHARACTERS].exe
Name: %Temp%\[RANDOM CHARACTERS].exe Type: Executable File Group: Malware file
16.	%AppData%\Security Solution 2011\Security Solution.exe
Name: %AppData%\Security Solution 2011\Security Solution.exe Type: Executable File Group: Malware file
17.	%Temp%\mv3.tmp
Name: %Temp%\mv3.tmp Type: Temporary File Group: Malware file
18.	%UserProfile%\Desktop\Security Center.lnk
Name: %UserProfile%\Desktop\Security Center.lnk Type: Shortcut Group: Malware file
19.	%Programs%\Security Solution 2011.lnk
Name: %Programs%\Security Solution 2011.lnk Type: Shortcut Group: Malware file
20.	%Programs%\Security Solution 2011\How to Activate Security Solution 2011.lnk
Name: %Programs%\Security Solution 2011\How to Activate Security Solution 2011.lnk Type: Shortcut Group: Malware file
21.	%AppData%\Microsoft\Internet Explorer\Quick Launch\Security Solution 2011.lnk
Name: %AppData%\Microsoft\Internet Explorer\Quick Launch\Security Solution 2011.lnk Type: Shortcut Group: Malware file
22.	%AllUsersProfile%\Application Data\[RANDOM CHARACTERS].dat
Name: %AllUsersProfile%\Application Data\[RANDOM CHARACTERS].dat Type: Data file Group: Malware file
23.	%Temp%\wrk4.tmp
Name: %Temp%\wrk4.tmp Type: Temporary File Group: Malware file
24.	%Desktop%\Security Solution 2011.lnk
Name: %Desktop%\Security Solution 2011.lnk Type: Shortcut Group: Malware file
25.	%Programs%\Security Solution 2011\Help Security Solution 2011.lnk
Name: %Programs%\Security Solution 2011\Help Security Solution 2011.lnk Type: Shortcut Group: Malware file
26.	%AppData%\Security Solution 2011\IcoActivate.ico
Name: %AppData%\Security Solution 2011\IcoActivate.ico Group: Malware file
27.	%AppData%\Security Solution 2011\IcoUninstall.ico
Name: %AppData%\Security Solution 2011\IcoUninstall.ico Group: Malware file
28.	%AllUsersProfile%\Application Data\[RANDOM CHARACTERS].ico
Name: %AllUsersProfile%\Application Data\[RANDOM CHARACTERS].ico Group: Malware file
29.	%Temp%\ins2.tmp
Name: %Temp%\ins2.tmp Type: Temporary File Group: Malware file
30.	%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Center.lnk
Name: %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Center.lnk Type: Shortcut Group: Malware file
31.	%Programs%\Security Solution 2011\Activate Security Solution 2011.lnk
Name: %Programs%\Security Solution 2011\Activate Security Solution 2011.lnk Type: Shortcut Group: Malware file
32.	%Programs%\Security Solution 2011\Security Solution 2011.lnk
Name: %Programs%\Security Solution 2011\Security Solution 2011.lnk Type: Shortcut Group: Malware file
33.	%AppData%\Security Solution 2011\IcoHelp.ico
Name: %AppData%\Security Solution 2011\IcoHelp.ico Group: Malware file
34.	securityhelper.exe	c487469e1aee0b31698910850681b3a9	0
Name: securityhelper.exe MD5: c487469e1aee0b31698910850681b3a9 Size: 4.28 MB (4288003 bytes) Detections: 0 Type: Executable File Path: %AppData%\Security_Solution_2011 Group: Malware file Last Updated: May 24, 2011

Registry Details

Security Solution 2011 may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Solution 2011"

HKEY_CURRENT_USER\Software\Security Solution 2011

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List "C:\WINDOWS\system32\rundll32.exe" = 'C:\WINDOWS\system32\rundll32.exe:*:Enabled:Security Center'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Security Solution 2011

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Solution 2011 Security"

Directories

Security Solution 2011 may create the following directory or directories:

%APPDATA%\Security Solution

%APPDATA%\Security Solution 2011

%AppData%\Security_Solution_2011

Messages

The following messages associated with Security Solution 2011 were found:

Antispyware software warning
Your computer is infected with spyware and malware. Last scan results: 364 infected files found! Click this notification to fix the problem.

Reported Insecure Browsing: Navigation Blocked
Insecure Internet Activity. Threat of virus attack
Due to insecure Internet browsing your PC can easily get infected with viruses, worms, and Trojans without your knowledge, and that can lead to system slowdown, freezes and crashes. Also insecure Internet activity can result in revealing your personal information.

Security Center
Unauthorized remote connection!
Your system is making an unauthorized personal data transfer to a remote computer!
Warning! Unauthorized personal data transfer is detected! It may be your personal credit card details, logins and passwords, browsing habits or information about files you have downloaded.
To protect your private data, please click "Prevent Connection" button below.

Security Center Alert
To help protect your computer, Security Center has blocked some features of this program.
Name: Screen.Grab.J.exe
Risk: High

System critical warning!
You have been infected by a proxy-relay Trojan server

Your computer might be at risk
Antivirus detects viruses, worms, and Trojan horses. They can (and do) destroy data, format your hard disk or can destroy the BIOS. By destroying the BIOS many times you end up buying a new motherboard or if the bios chip is removable then that chip would need replacing.

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Security Solution 2011

Threat Scorecard

EnigmaSoft Threat Scorecard

How the Security Solution 2011 Works?

Aliases

SpyHunter Detects & Remove Security Solution 2011

File System Details

Registry Details

Directories

Messages

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen