Security Central Removal

What kind of program is Security Central? It is like we said a bit earlier, a malware. They are bad software. Called them rogue programs if you want. They are designed to hurt computers in many ways besides trying to steal your money by scaring you so you will do an online purchase of some fake application. You should know that Security Central is from the same family as XP Police Antivirus. Another malware.

Security Central

» Download Security Central Removal Software

This is a bad program. This is a malware. It is called Security Central and your computer is infected with it. This document will give you valuable information about how to remove Security Central and clean your computer. Security Central can hurt your computer the following ways:

The first way is that you will not really control your computer anymore. Security Central will disable your Task Manager and others Windows applications.

Your Internet connection will be compromised a lot. Just trying to update your antivirus program will not work anymore.

Security Central will hijack your browser. It means you will be taken to the homepage of this rogue program. The same is true with Google search results.
Security Central will redirect you to many various malicious websites instead of those displayed in the search results of the search engine.

There are many ways and methods that rogue programs like Security Central use to propagate themselves. Let me list some of the common ones:

The first method is through fake online scanners. They come in all shape and flavors. Just keep in mind, that little application they do ask you to download and install is simply another Trojan.
Another method is with fake codecs. Like the fake scanners, they will ask you to install a codec. Sadly, it is just a disguise so the Trojan can infect your computer.

Such compromised piece of codes can also be found on fake websites created by hackers with that purpose. E.g. such website will try to force a download unto your computer, it is also called a drive by download. Unless your system has a robust security system or if the threat is very new, you will most likely get infected. The thing being you will browse the website, it will at a moment send a download you way. Once downloaded and installed, Security Central will create many fake files all around. It will also make changes to the registry so it will load itself on each boot. Then on the next reboot, it will do a fake system scan and will display the window we talked at the beginning. That fake Security Central we talked at the beginning will report fake infections with the requirement to buy a registered version to get rid of all those threats..

We are now very well aware the reports are fake, like the infections. The next trick Security Central will do will be to scare you enough so you will comply to purchase the online version of that software. Doing so, those thieves will make money on your behalf. The registered version is also a fake program. Do not buy it. You will but lose money and compromise your credit card infos. Security Central was programmed to block windows features like your antivirus program. It will also block any attempt to update it. As for accessing online security tools, you will get quickly redirected to malicious web pages. Many features, like the Registry Editor and the System Restore, will neither work on an infected system. This is done in order not to get rid easily of that malware. Security Central will modify your browser settings, will show you many advertisements and finally this malware will stays resident in the background.

Manual removal instructions for Security Central ( Please read our disclaimer below )

Kill Security Central processes: ( Learn How to Kill a Process Here. Opens in new Window )

msc.exe
mstdl.exe
mcull.exe
mac.exe
msca.exe

We do recommend you run a full scan using SpyHunter. Even if you do not intend on purchasing the product it will help to stop the virus from re-installing and re-activating while you manually remove it. Also it will inform you of any new changes to the file names. You may need this if it mutates. Delete Security Central registry values: ( Learn How to Edit Registry Here. Opens in new Window )

HKEY_CURRENT_USER\Software\msca
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Explorer\Browser Helper Objects\{A73890FC-177F-4198-AE3D-C64F7D9E69D8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkNeighborhood\NameSpace\{459b6bf8-5320-4c41-8833-85baedf31086}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce “msca”HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “wsc”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “msc”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\msca
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnPost “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnPostRedirect “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnonBadCertRecving “0″

Delete files: ( Hint ) Most of these files will be in the %Program Files\Protection System\ directory.

WPtect.dll
%Program Files%\msca\msc.exe
%Program Files%\msca\msca.ico
%Program Files%\msca\mstdl.exe
%Program Files%\msca\Viruses.dat
C:\ProgramData\msca\ (in Windows Vista)
%Documents and Settings%\All Users\Application Data\msca\msca.ico
%Documents and Settings%\All Users\Application Data\msca\mcull.exe
%Documents and Settings%\All Users\Application Data\msca\msc.exe
%Documents and Settings%\All Users\Application Data\msca\Viruses.dat
%Documents and Settings%\All Users\Application Data\mcsa\mstdll.exe
%Documents and Settings%\All Users\Desktop\msca.lnk
%Documents and Settings%\All Users\Start Menu\Programs\msca\msca.lnk
C:\Users\%User name%\AppData\Local\Temp\[RANDOM CHARACTERS.tmp]\
C:\Documents and Settings\[User name]\Local Settings\Temp (delete only mac.exe file in this folder)

Delete directories: ( Please note that in most cases everything in this folder can be deleted. Just be sure it's the correct folder 😉

%Program Files%\msca\
%Documents and Settings%\All Users\Application Data\msca
%Documents and Settings%\All Users\Start Menu\Programs\msca
C:\Documents and Settings\%User name%\Local Settings\Temp (delete only mac.exe file in this folder)
C:\Users\%User name%\AppData\Local\Temp\[RANDOM CHARACTERS.tmp]\

Outside Resouces:

http://www.bleepingcomputer.com/virus-removal/remove-security-central

http://www.spywarehelpcenter.com/remove-windows-security-central-virus-removal/