Removal guides
System Security 2012
System Security 2012
System Security 2012 elimination instructions
System Security 2012 is a misleading computer security scanner that will try to convince you into thinking that your PC is infected with various malware. This rogue program comes from the same family of fake security scanners as Guard Online, Cloud Protection, System Security 2011 and other. As it's previous versions System Security 2021 is spread through misleading websites which uses security vulnerabilities in users computer to install itself. After this installation System Security 2012 will modify the registry of your operating system in such way that it will start automatically every time you boot your operating system. This bogus program will imitate a security scan and then display totally fake results.
Main window of System Security 2012:

System Security 2012 will detect various Trojans on your computer, if you click "Remove threats" button you will be asked to purchase a licence for System Security 2012 prior to removing the detected threats. You shouldn't buy this rogue program its a scam. All the warning messages displayed by System Security 2012 are also fake. All of these processes are made to scare you into thinking that your computer has serious security issues and then purchasing a fake licence for System Security 2012. You should ignore everything displayed by this rogue scanner. This bogus software comes from a big family of rogue applications which are created by the same criminals and shares the same interface. All of the programs from this family also uses the same strategy to scare computer users - they detect non existent security threats on your computer and then offers you to buy their licence keys to remove them. You shouldn't trust this misleading program, it's just an imitation of a legitimate security product, remove it from your PC.
Such fake pop-up messages will be displayed on a computer infected with System Security 2012:
"Windows Security Alert To help protect your computer, Windows Firewall has blocked some features of this program. Do you want to keep blocking this program? Name: Zeus Trojan Publisher: Unauthorized"
"Warning! Infection found Unwanted software (malware) or tracking cookies have been found during last scan. It is highly recommended to remove it from your computer. Keylogger Zeus was detected and put in quarantine. Keylogger Zeus is a very dangerous software used by criminals to steal personal data such as credit card information, access to banking accounts, passwords to social networks and e-mails"
"Security Warning Malicious programs that may steal your private information and prevent your system from working properly are detected on your computer. Click here to clean your PC immediately"
"Warning! The file "taskmgr.exe" is infected. Running of application is impossible. Please activate your antivirus software"
All of these security warnings are fake. After you have noticed that your computer is infected with System Security 2012 you should remove it immediately.
System Security 2012 removal:
Step 1
Enter any one of theses System Security 2012 activation keys in the registration window. Click "Enter Activation key" button, located at the bottom-left corner of the main program window and paste only one of these keys (each key is in separate line):
3541567625
8196345414
8196375436
9972439689
1171249582
2294654156
2343258649
2961332892
When the registration key is entered, System Security 2012 will think, that you've purchased it and will stop generating fake warnings. It will also enable some disabled windows features. Note, that registering this program will not remove it from your PC. It will just disable fake warnings.
Step 2
This infection is known to modify your proxy settings. It intercepts your connection to the Internet and you may not be able to access some Internet resources. To fix this download and run proxy removal tool. this tool runs automatically, just double click it and it will do the job. Download link below:
After removing proxy, you will now be able to download spyware remover
Step 3
Download, install and run spyware removal tool. It will scan your PC for System Security 2012 and other malware infections.
remover for System Security 2012
If you can't download or run spyware remover try running registry fix (link below). It enables execution of programs. download registryfix.reg file, double click it, click YES and then OK.
If installation fails, you can try downloading customized installer which was built by our technicians to bypass System Security 2012 spyware infection. Your browser may report that this file is unsafe. Please ignore these warnings. Download customized installer
System Security 2012 removal instructions (on infected computer):
1. Start your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

2. Open Internet explorer, click Tools and select Internet Options. Select "Connections".


3.Click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.


4. Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):
O4 - HKLM\..\Run: [] C:\WINDOWS\system32\.exe
O4 - HKLM\..\Run: [] %AppData%\svhostu.exe
O4 - Startup: crss.exe
After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.
5. Download a legitimate anti-spyware software to fully remove System Security 2012 from your computer.
remover for System Security 2012
Other tools known to remove System Security 2012:
Additional information:
Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.
If you can't access Internet:
Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.
Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.
Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.
After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.
If you are unable to remove System Security 2012, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)
End these System Security 2012 processes:
random.exe
Remove these System Security 2012 entries:
HKEY_CURRENT_USER\Software\System Security 2012
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ""
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ""
Delete these System Security 2012 files:
%StartMenu%\Programs\System Security 2012\
%StartMenu%\Programs\System Security 2012\System Security 2012.lnk
%StartMenu%\Programs\Startup\crss.exe
%System%\.exe
%UserProfile%\Desktop\System Security 2012.lnk
%Temp%\svhostu.exe
%AppData%\\
%AppData%\\
%AppData%\\
%AppData%\\
%AppData%\ldr.ini
%AppData%\svhostu.exe
%AppData%\\System Security 2012.ico
General tips on removing System Security 2012:
*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.
- FBI Your Computer Has Been Locked scam
- System Care Antivirus
- Department of Justice MoneyPak Virus
- Win 7 Antivirus 2013
- SweetIM Toolbar (Search.sweetim.com Virus)
- Department of Justice scam
- FBI Cybercrime Division - Your PC is Blocked (MoneyPak Virus)
- Metropolitan Police ransomware (PCeU) virus
- Police Central E-Crime Unit Virus
- Internet Security "designed to protect" Scam - Fake Antivirus Program
SpyHunter
Comments
Again, thank you for all your help. I will get this computer checked by a professional just to make sure it is completely removed.