"Harmful software detected" Pop-up

"Harmful software detected" Pop-up Description

"Harmful software detected" popup is a false security alert emanating from the rogue anti-spyware application known as System Security 2009. This fake warning notification declares that the computer is infected with malicious software that can only be removed by purchasing and downloading System Security 2009. "Harmful software detected" popup reads as follows:

"System Security
Harmful software detected
System Security has detected harmful software that can lead to your PC crash. Remove them now by clicking Remove All button below."

Following these on-screen prompts will cause the user to automatically download System Security 2009. In order to avoid this, remove System Security 2009 and related malware as soon as possible.

Technical Information

File System Details

"Harmful software detected" Pop-up creates the following file(s):
# File Name Detection Count
1 %desktopdirectory%\system security 2009.lnk N/A
2 %\Documents and Settings%\All Users\Application Data\00308937\pc00308937ins N/A
3 %UserProfile%\Desktop\System Security 2009.lnk N/A
4 %programs%\system security\system security 2009.lnk N/A
5 %UserProfile%\Start Menu\Programs\System Security\System Security 2009.lnk N/A
6 %\Documents and Settings%\All Users\Application Data\00308937\config.udb N/A
7 %programs%\system security\system security 2009 support.lnk N/A
8 %UserProfile%\Start Menu\Programs\System Security\System Security 2009 Support.lnk N/A

Registry Details

"Harmful software detected" Pop-up creates the following registry entry or registry entries:
Registry key
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 shortcutpath
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “00308937?
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\systemsecurity2009 uninstallstring