Total Security Protection Center Description

Total Security Protection Center is a fake pop-up notification that promotes the rogue anti-spyware application Total Security. Total Security Protection Center is usually installed onto the user’s computer through Trojans. The application may be installed without the user’s knowledge since the Trojans enter the users system through backdoors and other system exploitation. Once the Total Security application is installed it will configure itself to run each time the users PC is started. The text of the pop-up alert reads:

“Security Notice!

To protect your computer, make sure the three security essentials are turned ON. If the settings are not ON, follow the recommendations. To return to the security senter later, open Control Panel.

Malicious sites block ON
Automatic Updates ON
Antivirus Protection NOT ACTIVE”

Other warnings read:

“Top Threats in the last 24 hours
Virus count
1.wm32/Netsky.Q worm 7879
2.Wn32/Stration.XW worm 1337
3.Win32/Netsky.D worm 721
4.Win32/bagle.HE worm 491
5.Win32/Mytob.BK worm 221�
“Your version of TotalSecurity still not activated yet.
Click here to get Total Security License”

The intent and purpose of the fake notification is to mislead the user into buying the rogue Total Security program. Ignore the false pop-up and remove the infection without hesitation.

Type: Fake Warning Messages

How Can You Detect Total Security Protection Center?

Total Security Protection Center has typically the following processes in memory:

• winsource.dll
• Sc2C21UvvM.exe
• tsc.exe

Total Security Protection Center creates the following registry entries:

• HKEY_CLASSES_ROOT\CLSID\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
• HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “1FD92E3F7C34799BFB075C41DA05D1FE”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″

Important Article Disclaimer