print version

CyberSecurity

CyberSecurity

A computer may slow down for any number of reasons, but if you notice this is happening in conjunction with an increase of pop-up ads, it could be a sign that there is a rogue antivirus program installed in your system.  Rogue programs like CyberSecurity flood your system with ads and seek to create the illusion that you have serious security risks. 

What is CyberSecurity?

CyberSecurity is a rogue antivirus program.  While there are a host of these with different names, they typically behave in very similar ways.  The ultimate goal of these rogue programs is to persuade computer users to purchase their protective software.  In order to do this, the program creates harmless files and identifies them as threats after it simulates a scan of your system.  The warnings alert users to severe security risks and claim that the only way to resolve them is to buy the full licensed version of the program.  There are problems with this, however, that you need to be aware of.

There are no risks outside of the rouge program itself.  The "threats" found are simply harmless files created by the program.  The warnings and scan results are false and are, in essence, just ads aimed at goading users into purchasing expensive software.  Finally, the protection offered by the program is nonexistent.  You will not see a change in performance. 

CyberSecurity is a typical rogue program and is related to both System Security 2009 and Total Security 2009. 

Signs that CyberSecurity is Installed in Your System

When CyberSecurity has been downloaded, it will cause several changes in your computer and its performance.  The most noticeable will be the presence of an increasing number of pop-ups.  These are designed to persuade computer users that there are security risks present.  These may come in the form of warning messages or false scan results. 

The scan results created by CyberSecurity are designed to look like those issued by legitimate security programs, which is why many people opt to purchase the "protection" software.  In the top left corner, the scan will tell you that this is an "unregistered version," or free trial.  You will notice the CyberSecurity name in the right corner, accompanied by a blue and white shield.  The pop-up will indicate that it has completed a system scan and that your system is in danger.  It displays a list of supposedly infected files and offers you the option of removing them by purchasing the full software.

If you click anywhere on the ad, it is likely that the program will download itself anyway or that you will be directed to a rogue website.  Here, you will be persuaded to buy the program.  You will be prompted to enter your credit card and personal information.

You are also likely to notice that your computer does not perform as well as it normally does.  It may take much longer to open documents or download files, for instance.  When CyberSecurity installs itself, whether in "trial" or "full" version (which are the same), it is able to launch every time you boot up your computer.  It stays on constantly and uses your system resources. This leaves less for your programs. 

CyberSecurity and other rogue programs can also hijack your homepage and/or browser settings. You may also notice new flashing icons on your system tray or new desktop shortcuts.  Once you click on them, you will be directed to a rogue website. 

If left in your system, CyberSecurity can eventually disable your task manager, registry editor, folder options, and control panel.  This prevents you from being able to uninstall the program effectively using these means.  It may also be able to stop your legitimate security program from working, which may put your computer at risk for viruses

How Did CyberSecurity Become Installed?

One easy answer is that the computer user installed it himself.  When greeted by a flood of security warnings, the first reaction we have is to protect our computers.  This is exactly what these rogue programs count on. CyberSecurity promotes itself on legitimate-looking websites, and those who want to upgrade their protection may choose to download it.  Unfortunately, they are not getting any protection for their computers. 

Often, though, CyberSecurity is installed without our permission or knowledge.  This is done through Trojans.  Trojans are like vehicles, and they carry various forms of malware into computer systems.  But how do the Trojans themselves get in?  They are often bundled with applications we download.  For instance, sites that offer free videos are often loaded with Trojans, even if the site itself is legitimate.  When you download a video, a Trojan disguised as a video codec can enter your system. 

Trojans are also known to hide in sites with adult content, including gaming, warez, and gambling material. Even visiting such a site or clicking on an ad here may cause the Trojan to enter.  Once in, the Trojan unloads the malware, and this is quite often how CyberSecurity comes in.  Of course, also visiting the CyberSecurity website will allow the Trojans entry.

How Do You Remove CyberSecurity?

Rogue antivirus programs like CyberSecurity are designed to evade normal detection and removal efforts, so simply running your antivirus program or deleting the program will not be effective.  CyberSecurity is not a virus and will not be detected by these programs.  Further, it can prevent you from using system restore as a fix.

You can remove this program by using a reliable software program, like ParetoLogic's XoftSpySE .  This program is specifically designed to handle rogue antivirus programs and will remove all traces from your system.  It doesn't take long, and it is certainly less expensive than paying a computer tech to remove it manually. 

But that is another option.  Manual removal is only recommended for those with extensive technical expertise because it is possible to miss files associated with CyberSecurity (in which case, the program can recreate itself) or inadvertently delete necessary files.  If you have experience, the following will help remove CyberSecurity:

Remove Process Files:

tsc.exe

cs.exe

csc.exe

Delete Registry Entries:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "1FD92E3F7C34799BFB075C41DA05D1FE"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionCyber Security

Unregister DLL File:

winsource.dll

Remove Process Files:

tsc.exe

cs.exe

Cyber Security.lnk

Registration.lnk

Help.lnk

winsource.dll

csc.exe

 to top