Total Virus Protection is a rogue security software, it is a false anti-spyware application that is generally installed in the user’s computer by dangerous trojans (such as Zlob and false video codecs), but it can also be installed manually by the victim.

Once your computer is infected with this parasite, it will immediately displays security warnings, alerts and system scans stating that your computer is heavily infected. These warnings are all false and are only displayed to make you think your computer is truly infected and that it is necessary to buy the full version of the software to remove the so-called infections.

Make sure to not fall in this scam, if your computer is infected with Total Virus Protection, it is recommended to remove it immediately and to scan your system with a real security software.

Symptoms of infection

• The process TotalVirusProtection.exe is running in your system
• Slow computer performance
• Repeated security warnings, alerts and system scans
• Web sites that suddenly are shown on your desktop

When the program is executed, it creates the following files:

1
2
3
4
5
6
7
8
9

%ProgramFiles%TotalVirusProtection
%ProgramFiles%TotalVirusProtection\TotalVirusProtection.exe
%ProgramFiles%TotalVirusProtection\TotalVirusProtection.xml
%ProgramFiles%TotalVirusProtection\Uninstall.exe
%ProgramFiles%TotalVirusProtection\WebMonitor.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Total Virus Protection.lnk
%UserProfile%\Desktop\Total Virus Protection.lnk
%UserProfile%\Start Menu\Programs\Total Virus Protection
%UserProfile%\Start Menu\Programs\Total Virus Protection\Total Virus Protection.lnk

The program creates the following registry entries:

1
2
3
4
5

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Total Virus Protection
HKU\Software\Microsoft\Windows\CurrentVersion\Run\Total Virus Protection
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Total Virus Protection
HKCU\Software\Total Virus Protection
HKLM\SOFTWARE\Total Virus Protection

How to remove Total Virus Protection (manual removal) ?

• Kill the running process TotalVirusProtection.exe
• Unregister all the Total Virus Protection DLLs
• Delete all the Total Virus Protection files
• Delete all the Total Virus Protection registry entries

How to remove Total Virus Protection (automatic removal) ?

• Download and Install NoVirusThanks Malware Remover
• Update the database
• Click the button Scan
• Delete infected files

Posted by admin on Friday, February 27th, 2009 at 10:16 pm and filed under Rogue Software with tags get rid of Total Virus Protection, rogue, TotalVirusProtection. You can leave a response, or trackback from your own site.