"Harmful software detected" Pop-up
"Harmful software detected" popup is a false security alert emanating from the rogue anti-spyware application known as System Security 2009. This fake warning notification declares that the computer is infected with malicious software that can only be removed by purchasing and downloading System Security 2009. "Harmful software detected" popup reads as follows:
"System Security
Harmful software detected
System Security has detected harmful software that can lead to your PC crash. Remove them now by clicking Remove All button below."
Following these on-screen prompts will cause the user to automatically download System Security 2009. In order to avoid this, remove System Security 2009 and related malware as soon as possible.
File System Details
"Harmful software detected" Pop-up may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %desktopdirectory%\system security 2009.lnk | |
| 2. | %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins | |
| 3. | %UserProfile%\Desktop\System Security 2009.lnk | |
| 4. | %programs%\system security\system security 2009.lnk | |
| 5. | %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk | |
| 6. | %\Documents and Settings%\All Users\Application Data\00308937\config.udb | |
| 7. | %programs%\system security\system security 2009 support.lnk | |
| 8. | %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk |
Registry Details
"Harmful software detected" Pop-up may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 shortcutpath
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “00308937?
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayname
HKEY_LOCAL_MACHINE\Software\00308937
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 uninstallstring
