Computer Repair & Virus Removal Blog;

Background Information

The Cyber Security virus is a new rogue malware virus that will infect your system and tell you your PC is infected. This is a fake anti virus program with the goal of getting you to purchase it so the creators of the malware virus can steal your credit card. If you have this virus our technicians can help you remove it right now. If you are an advanced PC user we are providing you with the known registry entries this virus infects so you can remove the virus on your own. Trying to remove this virus on your own if you are not an advanced PC user is not recommended as you can damage your operating system.

As a symptom of the Cyber Security Virus, you may receive the following fake blue screen:
***STOP: 0×000000D1 (0×00000000, 0xF73120AE, 0xC0000008, 0xC0000000)
A spyware application has been detected and Windows has been shut down to
prevent damage to your computer
SPYWARE.MONSTER.FX_WILD_0×00000000
If this is the first time you’ve seen this Stop error screen, restart your
computer. If this screen appears again, follow these steps:
Check to make sure your antivirus software is properly installed. If this is a
new installation, ask your software manufacturer for any antivirus updates
you might need.
Windows detected unregistered version of %product% protection on your computer.
If problems continue, please activate your antivirus software to prevent computer
damage and data loss.
*** SRV.SYS – Address F73120AE base at C00000000, DateStamp 36b072a3
Beginning dump of physical memory…

We Can Remove the Virus Now

If you are infected with this virus and would like assistance in removing the virus, please click the chat button below to speak with a live virus removal expert and we will assist in removing the Cyber Security Virus.

Removing Cyber Security Virus

The following scans have revealed the file infects in the following locations:

Symptoms that may be in a HijackThis Log:

O2 – BHO: &IE Help – {35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC} – C:\WINDOWS\system32\iehelpmod.dll
O4 – HKCU\..\Run: [CS] C:\Program Files\CS\tsc.exe
O4 – HKCU\..\Run: [CSec] C:\Program Files\CSec\cs.exe

Associated Cyber Security Files:

c:\Documents and Settings\All Users\Start Menu\CS
c:\Documents and Settings\All Users\Start Menu\CS\Computer Scan.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Cyber Security.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Help.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Registration.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Security Center.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Settings.lnk
c:\Documents and Settings\All Users\Start Menu\CS\Update.lnk
%AppData%\Microsoft\Internet Explorer\Quick Launch\CS.lnk
%UserProfile%\Desktop\Cyber Security.lnk
c:\Program Files\Common Files\CSUninstall
c:\Program Files\Common Files\CSUninstall\Uninstall.lnk
c:\Program Files\CS
c:\Program Files\CS\tsc.exe
C:\Program Files\CSec\
C:\Program Files\CSec\cs.exe
c:\WINDOWS\system32\iehelpmod.dll

Associated Cyber Security Windows Registry Information:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\CS
HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CS”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “CSec”