Total Security Description

 

 

[+] Click Image to Enlarge

 

 

CartCartCartCartCartCartCart

Total Security, a clone of Antivirus 360, is a rogue anti-spyware program usually installed on the users’ computer system by a Trojan or other malicious method. Total Security try’s to mislead you into purchasing the full paid version by using scare tactics. Total Security will first offer you a free online scan of your computer. This pretend scan will report numerous infections which are all fictitious. Fake security alerts and pop ups will also be displayed. In order to remove these reported infections, you are told that you must purchase the full version Total Security application. Total Security is a harmful program that should be removed without hesitation.

Type: Rogue AntiSpyware Programs

Automatic Detection of Total Security

Total Security Technical Report

As new Total Security details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following Total Security files with its MD5s were created in the system:

Total Security has typically the following processes in memory:

• tsc.exe
• winsource.dll
• %PROGRAMFILES%\TSC\tsc.exe
• Sc2C21UvvM.exe
• %SYSTEMROOT%\system32\winsource.dll

Total Security created the following directories, files, paths:

• %ProgramFiles%\Total Security

Total Security creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “1FD92E3F7C34799BFB075C41DA05D1FE”
• HKEY_CLASSES_ROOT\CLSID\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D263FA6D-84CC-48A8-9AF6-C664362B7A5B}
• HKEY_CURRENT_USER\Software\1FD92E3F7C34799BFB075C41DA05D1FE
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″

Important Article Disclaimer