How to remove the ‘Personal Security’ fake antivirus scam from your computer

My father in law contracted the ‘Personal Security’ virus on his PC last night.  Please be warned, this is a fake antivirus program set to scam users out of their hard earned money.

Personal Security reports false scan results and displays fake security alerts to scare you into thinking that your computer is infected, when actually it isn’t.

Please follow the removal steps provided below and remove Personal Security from your computer as soon as possible:

1. Open Task Manager and terminate Personal Security process.

2. Delete the following directories:

C:\Program Files\PSecurity
C:\Program Files\Common Files\PSecurityUninstall
C:\Documents and Settings\All Users\Start Menu\PSecurity

3. Open Windows Registry Editor and delete these registry values:

  • HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC
  • HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "PSecurity"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform "WinTSI 01.12.2009" (the file is called WinTSI and the numbers afterwards is the date in which Personal security was installed)

4 Download legitimate anti-spyware software and remove the remains.

Advertisements

2 thoughts on “How to remove the ‘Personal Security’ fake antivirus scam from your computer

  1. Pingback: ARB Security Solutions – SharePoint Security Integrators » How to remove the 'Personal Security' fake antivirus scam from …

  2. Your blog is pretty cool to me and your subject matter is very relevant. I was browsing around and came across something you might find interesting. I was guilty of 3 of them with my sites. “99% of website owners are guilty of these 5 mistakes”. http://bit.ly/sDWBw6 You will be suprised how easy they are to fix.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s