HOW TO REMOVE FAKE "TOTAL SECURITY"

User Rating: / 2
PoorBest 

I have discovered a new variant that runs from %USERPROFILE%\Application Data\AVE.exe. Malwarebytes will remove the registry entries but the process must be stopped manually. I had to use Sysinternals Process Explorer see the process and kill it before I could remove the file; it does not show up in task manager. If you do not have a good system restore point, you may need to perform a repair install after removing the virus due to the damage it does to file associations...can't run executables, open IE, PDF etc.