How To Remove / Uninstall Cyber Security Virus (Removal Guide)
Cyber Security is a virus promoted both via malware and fake anti-malware scanners that you find online. It is basically a scareware program, being very much like Security Tool, Green AV Antivirus 2009 and Windows Police Pro in the way it operates. If you are having problem with either one of these viruses, click their names to find out how to remove them.
When Cyber Security is downloaded via a Trojan, it will install itself on your system without any authorization and without asking for your permission. You can also be tricked into downloading Cyber Security by a pop-up that will warn you that your computer is infected. That pop-up advices you to download and install the Cyber Security so your computer will be protected. If you download it, the program will automatically started with the next Windows boot and will perform a scan of the system.
After Cyber Security completes the scan, it will advise you to purchase the program so it can remove the infections it detected. The program is a scam, and you will lose your money as well as your personal info to the hacker. DO NOT PURCHASE Cyber Security.
Another thing Cyber Security does is install a Helper Object in your Internet Explorer that will redirect you when browsing to an “about:blank” page that will have a “this website has been reported to be unsafe” message. The message will also suggest that you update the software you use for web protection. If you click that link, you will be redirected to a page where you are advised to buy Cyber Security. Again, this is a fraud.
Cyber Security will constantly bombard you with pop-ups that state you have a lot of infected files on your computer and that your computer may be at risk and so on. Another thing it will do is display a fake Windows Security Center Windows that will suggest the purchase of Cyber Security so you can make sure your computer is safe. In addition, Cyber Security will also install a screen saver on your computer that will impersonate a Windows crash, error screen and reboot. You should rest easy as it is only a screen saver and nothing bad is actually done to your computer.
You should not believe anything that Cyber Security tells you as this is a fake. The only problem with your computer is that you should remove Cyber Security itself. Do not purchase Cyber Security. If you already did, contact your credit card company.
Here is a quick guide on how to remove Cyber Security using Malwarebytes’ Anti-Malware.
1. It is a good idea to print this list as you will need to close all open windows later in the process.
2. Before removing Cyber Security, you need to end the process. Download the file here to your desktop and double click on it to end any Cyber Security related process. You have to do it this way because the Windows Task Explorer will be disabled by the rogue.
3. As the method from step 2 might not work all the time, you should also use a Microsoft software, the Process Explorer. Click here to download the Process Explorer and save the file to your desktop.
4. Go to your desktop and rename “Procexp.exe” to “iexpore.exe” by right-clicking on “Precexp.exe” and then pressing “Rename”. Run the program.
5. From the Processes list on the left side of the window, find a “tsc.exe”, select it and then press the red X button from the icons in the upper part of the window. You should also look for processes that contain random characters and numbers in their name. In addition, you should also look for any process with a shield or a padlock icon. Terminate every process that matches the description. If you did not find “tsc.exe” nor other processes like the one we described, skip ahead.
6. Download Malwarebytes’ Anti-Malware from the link here. Download it, close all open windows and then double click the setup file (“mbam-setup.exe”) to start the installation.
7. Follow the instruction given by the wizard and do not change any default setting. When the installation is finished, leave checked the “Update Malwarebytes” and “Launch Malwarebytes’s Anti Malware” boxes and click the Finnish button.
8. When the software prompts that an update is recommended before scanning, press OK and wait for the update to be complete.
9. Go to the scanner tab and select “Perform Quick Scan” and then click on Scan.
10. Wait for the scan to complete (it may take a while). When taken back to the Scanner menu, click on “Show Results”.
11. A list of all the malware that the software found on your computer will be displayed. Select them all and press “Remove Selected”. The removal process might require that you restart the computer. If prompted, allow Malwarebytes’ Anti-Malware to restart your computer.
12. When the removal process is completed, a scan log will be displayed in Notepad. Close the Notepad and exit MBAM.
That is it, you now have completely removed Cyber Security from your computer.
This article is part of our “Malware Removal Tips” series of articles. Click here for more articles.
- THIS POST WAS WRITTEN BY:
- Mihai Andrici
ok heres how i did it first i put my computer on safe mode with networkin then i retored my computer to a point b4 i had the virus on my computer hope i helped cause that virus sux
I am totally computer ignorant. Please give steps to get to where I can put it on safe mode and get to the place to restore it.
I contacted Cyber Security support directly and here’s what they told me to do to uninstall it. IT WORKED the first time I did it too.
1. Open My computer, choose Disk C;
2. Find Program Files=>Common Files=>CSUninstall=>Uninstall
3. Run the file Uninstall.lnk
You don’t need to download any malware or purchase anything to remove CS from your computer. Hope this works for you as easily as it did for me.
You are awesome! Thank you so much!!!! Worked like a charm
wow, thank you, just worked for me too
Thank you Thank you David! Worked instantly! Have been losing my mind over this crap all day, I cannot thank you enough.
Thank you for this info. This has been driving me crazy for 2 days!I even emailed Cyber Security and they never returned my request. I’m soooo grateful I found this info.
Thanks David, I did as you said ,and the Cyber removed compeletly.
Regards,
Kamil.
Thank you so much this really worked, unless when I go to reboot it didnt work and it actually fucked my comp up more.
thank you so much for your info:))
thank you so much – you have just sorted a problem that has been bugging me for weeks!
Thank you so much! I thought i wasnt gonna ever get that off, my boyfriend was freakin out! Thanks!
Dette virket utmerket…takk(this worked super..thanks!)
Thank you so much for these helpful instructions. I removed it from my computer this morning.
Your advice was the best. No need to download other software etc. Fast and accurate. Thanks a million. They should be barred from the internet.
thanks David !!
I hope i can get rid of this cyber security on my computer….bye!
wait where is disk c? please respond asap. i’m desperately trying to get cyber off my computer!
please behlp david!
what is the uninstall.lnk? i got all the way to step 2 and now i don’t know what to do! please respond!!!
THANK YOU THANK YOU THANK YOU!!!!!
David thanks that worked was about to get pissed off , but you saved my day THANKS AGAIN
Those are the best directions I have found on the internet! Thanks a lot, David! It worked great!
god bless david this was so easy I was ready to spend money but a friend sent me here thanks to david
thanks very very much
it works
it very easy
thanks for the direction
i will not download any apps and programs anymore if im not sure with it
i learnef my mistake
Thanks so much David, this really did work!! you are a legend!!
I tried it and it worked. I turned the computer back on and cyber security was back on there.It’s driving me crazy!
thnx lot mr. david its works …. once again thank u very much..
Worked a treat – thanks for the tip.
Al
This worked perfectly! You’re a genius! Thanks a million!
-Kahyl
OMG!!!!!!!!!!!!! THANK YOU SOOOOOOOOOOOOOO MUCH!!!!!!!!!!!!
I FUGUERED IT OUT!!!!!!!!!!!!!!!!!
thank you thank ou!!!
it was driving crazy and it kinda took me a while but it is finally off my computer!!
i’ve def learned my lesson and am going to be soo much more careful!!
I could not find TSC.exe. I could find only SC.exe. still the cyber protection is poping up. please help me.
Exactly what happened to me… I follow all the instruction yet can’t find this TSC.exe thing… and when I right-click on whichever item, there are no function as to rename the file. It’s very frustating…
Do not purchase Cyber Security, Spyware Doctor, Spyhunter, Stopzilla or any software claiming to remove this fake virus. CS is a rogue anti-spyware application that uses notifications and fabricated system scans to scare users. CS cannot effectively detect? or remove computer parasites. You can move around the fake defender to access files and websites by using the back and forth tabs. To Remove CS do the following steps: startup/computer/OS(C):/Program Files (x86)/CS right click delete/Recycle Bin/Empty Recycle Bin. To Remove the fake notification, upgrade windows with latest software IE8. YogiRock.
I do not understand your steps. Please tell me where I can understand. I am trying to remove this.
Do not purchase Cyber Security, Malware, SoftSailor, Spyware Doctor, Spyhunter, Stopzilla or any software claiming to remove this fake virus. CS is a rogue anti-spyware application that uses pop up notifications and fake system scans to scare users. You can move around the CS fake defender to access files and websites by using the back and forth tabs. To Remove CS do the following steps: click start/my computer/OS(C):/Program Files (x86)/CS right click delete. The execution file tsc.exe is located in the CS folder, after it is deleted go to /Recycle Bin/Empty Recycle Bin. To remove the fake notification, upgrade windows with latest software IE8. YogiRock.
help me for delet cyber security.
it was really very helpful for me, thank you very much
Thank you David!!!! way up there^^^^^ removal seemed to work
I located CS.exe in a folder labled CS in my Program Files folder. Could not delete either CS.exe or folder (msg read I didn’t have permision). So I renamed the file and folder. Now when the bug tries to open CS.exe, it doesn’t find it. A simple low-tech solution. However, tonight I will look for the CS Uninstall file – just don’t know if I should trust anything with a CS thumbprint on it.
every time i try to delete the CS application, i’m told “you need permission.” any thoughts?
This worked for me as I did not have permission to remove it either…if you find out how to actually uninstall, Steve, please post. Thanks! So far, it’s working. Any idea where this thing came from?
Thank you very, very, very much David!! It worked perfectly!! Here are the steps again:
1. Open My computer, choose Disk C;
2. Find Program Files=>Common Files=>CSUninstall=>Uninstall
3. Run the file Uninstall.lnkv
Hey David
Thanks for removed Uninstall Cyber Sercuity!
Hey guys,
I am having some problems dealing with that cyber securty crap as well..here my problem. I was able to uninstal the cs and it is now gone from my icons on the bottom right. When I go into the program files/common files/ I see the uninstal icon but it is telling me that it is telling me that the shortcut has been moved. Therefor I am stuck..Please help me.
Thanks, Dustin
I have the Security Tool crap on my computer…how do i get it off?! I don’t want to download anything else!! I have a Windows XP!
Someone help plz!!!!!!!!!!!
Cita, we have an article on how to remove Windows Security Tool that you can read at http://www.softsailor.com/how-to/8723-how-to-remove-security-tool-virus-malware-removal-guide.html
If our removal guide doesn’t work for you, try the tips and tricks our readers left in the “Comments” section. Just scroll down and you will find them.
Take Care,
Myke
dear mr david
your idea was best , only :
1. Open My computer, choose Disk C;
2. Find Program Files=>Common Files=>CSUninstall=>Uninstall
3. Run the file Uninstall.lnk
many thanks
I ran the file to end the cyber security process since the task manager won’t open. Now I can’t run the malware program because when I click on a program icon I get a window asking which program I want to use to open the program. Naturally the programs listed are IE, Wordpad, etc. How can I undo the batch file that stopped the process? Please help
I used this process to remove Cyber Security and it worked. Thanks for the advice, I was affraid that I would have to reformatt my drive.
Thanks Again
Don
Just so you know, all that David’s fix does is run a link pointer (shortcut) that points to cs.exe, with a -uninstall command attached. The uninstall is within the cs.exe file itself, so if you manually uninstall the .exe file, the uninstall command will not work. Since I did this, I do not know if the uninstall portion of cs.exe removes Startup and Registry entries, but I had none of those because my spyware blocker intercepted them.
I found that the reason users get a permissions violation is because the CS shield icon in the lower right system tray keeps the program open and active constantly, meaning that when you try to remove the file, it is an open file. Windows, in almost any version, will not allow removal of an open file. Therefore the trick is to close the application.
A user (preferably using Admin status) can do this by right-clicking on an empty part of the task bar (bottom center) and selecting Program Manager. Look in the files listed as open and running. Find the file cs.exe and highlight it with a left-click. Select the End Process button. When the caution about ending a running process opens, select OK.
As soon as that process is dead, close the Program Manager and open C:Program Files and look for a folder labeled CS. Delete that folder. Close the C: folder.
Open the Start list and delete all elements that either contain the CS designation (such as CS Start) and any that are prefaced by the CS shield icon.
Do the same thing for the Quick Launch toolbar.
Empty the Recycle Bin.
That should remove about all of the elements of the CS infestation, except if you allowed the fool thing to add entries into the Registry and the Startup listings. There are instructions on the Net for how to clean out Registry entries and Startup commands, but I suggest that you leave dinking with the Registry to a knowledgeable tech. Messing in there if you do not know what you are doing can cripple your system.
As for the Startup list, there are several free tools available that will allow you to look at the Startup listing and edit it safely. Have a reliable guru point you to one that actually is safe.
This seems to be a relatively simple trojan, in that it does not replicate itself in a number of places and restore itself if you try to remove it. It also does not seem to have any elements that will automatically go out to reload and restore the dang thing from the Net. All the functions seem to be contained in the one file, cs.exe, so when that is gone, it is dead. The rest all seem to be pointers (shortcuts), as far as I can see, that call the main program in one way or another.
What I hate about malware like this is that, first off, the product they are trying to get you to buy is worthless. Worse, because it is poorly written it may actually leave your system open to invasion by other malware. Second, it runs whether you want it to to not. If you command it to shut down, it does not. It just goes into hibernation and then resurfaces after a relatively short time-out period. Third is the method of refusing to allow a user to remove the file. The fourth issue is that the removal tool is hidden where a novice user is unlikely to find it.
Lastly, once that little screen opens that asks if you want the software in the first place, it does not matter where on the window you click. Even the closing X in the upper right corner will trigger the download. The entire window is a single image file with one purpose … to get you to click on it so they can technically say to the Justice Department that you ‘approved’ the download and installation.
All of this screams “MALWARE!!!” in a strident voice, waiving a huge red flag. I hate it. Hopefully, some day the law will catch up with such perpetrators.
A client managed to catch this virus.
(it came from a website as a popup)
The symantic AV caught it but they still installed it..
The steps i used were as follows :-
open task manager (ctrl+alt+del) or right click on taskbar to stop the proccess (cs.exe) .
Using a free app called ccleaner i went to tools and deleted the cs.exe from startup proccess .
(This showed me where the program was installed)
In my case c:/program files/cs .
I opened program files and deleted the program and folder manually.
For safety i then immediately done a full virus scan
And it was gone..
Does anyone know how this virus gets onto the website ?
I contacted the webhost company that host the site and they say their sites are checked every morning.
So i contacted the website owner, they have checked all of their coding with no trace of any altered code..
mystery ??
Continue >>>
I have also recommended to my client to download malwarebytes anti-malware and do a full scan to be sure of clearing all infected registry files.
theres a link below (quicker than cnet on their site)
http://www.filehippo.com/download_malwarebytes_anti_malware/
just do a quick scan to be sure..
Plus if you have any other infections that are not noticeable.
Thanks for all of these tips on removing the Cyber Security malware! I think I have it removed from my computer, but still occasionally get the red “about:blank” page. How do I remove that “Helper Object” from Explorer?
The malwarebytes should stop the red ‘about:blank’ page. Also i would recommend using firefox as it seems to have less problems of this type than IE.
There are alot more addons as well to make your surfing quicker and safer than IE.
I scan with malwarebytes about once a week, and my symantec antivirus does a daily scan whilst i am a sleep.
Im quite new to web hosting and i also scan my server on a daily basis to try to prevent any of my sites spreading a virus of this type.
Hi David,
Your suggestion just worked for me. It was simply awesome. I was so perturbed with this virus since 3 days. I would highly recommend your suggestion to anybody who uses this browsing site.
Regards,
Dimple
David you legend!!!!
David……thats awesome….it works……i am being working on the Cyber Security Shit for ever, and could’nt get it of ma laptop, and it worked the way you told too……Thankz man…Guys, it works….
1. Open My computer, choose Disk C;
2. Find Program Files=>Common Files=>CSUninstall=>Uninstall
3. Run the file Uninstall.lnk
Awesome….Great.
Just followed the instructions. Looks like it might have worked!! Can’t thank you enough!! That thing was driving me nuts!!
david ur awesome!! thanks i have had that thing forever but all i was doin was downloading and downloading ang i got no room thanks to u comp is runnin fine =)
Dave:
Uninstall – Works great!!!
It was a pain in the neck on my computer!!
Thanks
HELP!! I have done everything listed to get this damn this thing off my laptop. Everything deleted as instructed above and when I run Malwarebytes it finds no virus. However, when I shut down and re-start the computer the whole damn thing is back on. The large window comes up and says it is running a scan again and the pop-ups start again. HELP People who send these viruses out have a special place in hell waiting for them.
You my friend are awesome worked just like that people like u deserve a knighthood thanks again bye bye cyber security.
I have the cyber virus on a system and cannot get into Windows via safemode or anything. The system freezes and have to do a shutdown. Is there anyway I can get this virus off my system.
Thanks
To: Ozzy
Thank you so much for the pointers. I thought I was going to have to bust out the recovery disks. I battled this piece of crap for tow days before reading your instructions. Whoever puts out these viruses should be publicised and left for the people to deal with. These instructions worked the best. Just for those who don’t know:
1. Open My computer, choose Disk C;
2. Find Program Files=>Common Files=>CSUninstall=>Uninstall
3. Run the file Uninstall.lnk
Thanks again!!!
DAVID FOR PRESIDENT!!
You are a Man among Men!
Do you do the samething if you have removed your HDD and installed a new drive? I am trying to pull important data and program files from my (corrupted / using USB w/enclosure case as my F:\). please advise what is the best way to remove this from registry in the system32 folder of my corrupted drive. Second, can i damage (infect) my newly installed system by connect it using the USB enclosure device? the weather is bad, and i need to get out of the dawg house:-).
When you start to have a look for paths to speed up your PC and optimize it’s performance, you may come across the choice of using a registry cleaner, and with these programs comes many options as well. Maybe you are searching for freeware or perhaps you are OK with spending a few bucks to get a quality product, but first you simply need to know how to select the top registry cleaner software for your needs. That is what we’re going to talk about in this post, we’re going to go over the features that you need to be hunting for when choosing a registry cleaning application. Click for more information.
I have this Cyber Security on my system and it must have evolved because the C/ProgramFiles step listed above no longer work as they do not have a CS file. What can I do now?