Remove Security Scanner - uninstall instructions

Security Scanner - how to eliminate?

Security Scanner is fake computer antivirus program, it's a variant of it's previous version called Security Shield. As it's predecessor Security Scanner is distributed using misleading methods such as fake online security scanners, Trojans, fake program updates etc. When Security Scanner installs itself on your computer it will modify your operating system to block almost all it's functions, this is done to make the removal process of Security Scanner more complicated - you won't be able to access the Internet, Security Scanner will also block the execution of legitimate Windows Programs. Each time you boot your computer Security Scanner will start and you will be forced to look at a fake security scan that this program will perform.

To further trick you into thinking that your computer has various security related infections Security Scanner will pretend to detect Trojans, Spyware and malware on your computer. You should understand that all of these detections are fake, you should ignore everything that is related to Security Scanner. If you click "Remove" button in the main window of Security Scanner you will be redirected to a website where you will be asked to purchase a licence of Security Scanner in order to remove the detected security threats. In no situation you should pay for this program - it's a scam. This useless program is created by Internet criminals with an intention of stealing money from your credit card account. Security Scanner doesn't have anything in common with a real security programs, you won't find a virus definition database nor a legitimate virus scanning engine. All of the processes shown by Security Scanner are fake. Ignore the security scan and warning pop-ups displayed by Security Scanner and remove it from your PC. Use this removal guide to completely remove Security Scanner. If you have already bought a licence from Security Scanner, contact your credit card company and dispute the charges explaining that you have been tricked into purchasing a fake computer antivirus program.

Screenshot of Security Scanner:

Such fake security warning messages are generated by Security Scanner:

"Security Scanner Warning Spyware.IEMonster process is found. This is virus that is trying to send your passwords from Internet browser (Explorer, Mozilla Firefox, Outlook & others) for the third-parties. Click here to protect your data with Security Scanner"

"Security Scanner Warning Security Scanner has found viruses at your system. We highly recommend to get license for Security Scanner to remove harmful software now"

"Security Scanner Warning Harmful software have been detected at your PC. Click here to deactivate it"

Ignore these fake warnings and remove Security Scanner from your PC.

Automatic Security Scanner removal:

Before downloading automatic remover, try entering this license key in registration window (at the top of the main window of Security Scanner):
64C665BE-4DE7-423B-A6B6-BC0172B25DF2
It will not remove the infection, but will enable you to install spyware remover

remover for Security Scanner

NOTE: Some spyware can block downloading spyware removers. If You can't download it using default location, try one of the alternative download locations below:

• Location 1 (The file is renamed to "iexplore.exe" because most of spyware doesn't block this file)
• Location 2

Security Scanner manual removal:

1. Start your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

2. Open Internet explorer, click Tools and select Internet Options. Select "Connections".

3.Click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

4. Download HijackThis and save it on your desktop. Some malicious programs are able to block HijackThis so when you click the download link, in the Save dialog rename HijackThis.exe to iexplorer.exe and only then click the Save button. After saving the file on your desktop, double click it. In the main HijackThis window click “Do a system scan only” button. Select these entries (place a tick at the left of the entry):

O4 – HKCU\..\RunOnce: [{RANDOM}] C:\Documents and Settings\All Users\Application Data\{RANDOM}\{RANDOM}.exe

After selecting required entries, click "Fix Checked". After this procedure you can close HijackThis and proceed to the next removal step.

5. Download and install anti-spyware software to completely remove the infection.

remover for Security Scanner

NOTE: Some spyware can block downloading spyware removers. If You can't download it using default location, try one of the alternative download locations below:

• Location 1 (The file is renamed to "iexplore.exe" because most of spyware doesn't block this file)
• Location 2

Security Scanner modifies system hosts file. It is used to resolve some canonical names of websites to ip addresses. When it is changed, the user may be redirected to malicious site still seeing good URL in address bar. It is very hard to find out if the site is genuine or not, when hosts file is modified. To fix this, please download Microsoft FixIt tool, that restores your hosts file to windows default. Run this tool when downloaded and follow the on-screen instructions. Download link below:

Other tools, known to remove Security Scanner:

• iS3 STOPzilla
• Malwarebytes Anti-Malware

You can also try this registration code 64C665BE-4DE7-423B-A6B6-BC0172B25DF2. After entering this code Security Scanner should stop showing security warnings. This could help you in the removal process. This code disables Security Scanner only temporary, after entering this code you should scan your computer with a legitimate antispyware program.

*If you can't download anti-spyware software: Click on the download link, when the save dialog opens change the file name (example: when downloading mbam-setup.exe rename it to iexplore.exe).
*If you have installed anti-spyware program but you can't run it: Click Run, type %ProgramFiles% and press Enter. Open folder of your anti-spyware program, search for executable file and rename it. (example: Open Malwarebytes’ Anti-Malware folder, right-click on the main executable file (mbam.exe) then click rename. Rename the mbam.exe file to iexplore.exe, winlogon.exe firefox.exe ...
*If you can't access your anti-spyware software, try creating a new user account:
Click Start -> Settings -> Control panel.
Click User Accounts and create a new account.
Reboot your computer and login using a newly created user account.
*After this procedure you should be able to access your anti-spyware programs. Update and run a full system scan.

Additional information:

Some malicious software modifies browser settings and disables downloads of spyware and virus removing software. If you have problems downloading anti-spyware software with Internet Explorer, try downloading with Chrome, FireFox, Opera, etc.

General tips on removing Security Scanner:

Load your computer in safe mode. Click Start, click Shut down, click Restart, click OK. During your computer starting process press F8 key on your keyboard multiple times until you see Windows Advanced Option menu, then select Safe mode with networking from the list.

Start Task manager. Press ctrl+alt+del (or ctrl+shift+esc) and end task the processes of rogue program. ( if after this procedure you can't access any programs press ctrl+alt+del, click File, select New Task, and type explorer.exe then press OK.

Open Internet explorer, click Tools and select Internet Options. Select Connections, then click LAN settings, if a Use a proxy server for your LAN is checked, uncheck it and press OK.

After this procedure you should be able to access Internet. Now you can download anti-spyware software from our "Top spyware removers" section and run a full scan. Download, install and don't forget to update your selected anti-spyware program. Then run a full system scan.

 If you are unable to remove Security Scanner, you can use this manual removal instruction. Use it at your own risk. If you don't have strong computer knowledge you could harm your operating system. Use it only if you are an experienced computer user. (Instructions on how to end processes, remove registry entries...)

End these Security Scanner processes:

[random].exe

Remove these Security Scanner registry entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[random]"{jcomments on}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce mbancdyulk = %UserProfile%\Local Settings\Application Data\mbancdyulk.exe

Delete these Security Scanner files:

%UserProfile%\\Local Settings\Application Data\[random].exe
%UserProfile%\Local Settings\Application Data\mbancdyulk.exe
%UserProfile%\Desktop\Security Scanner Support.url
%UserProfile%\Desktop\Security Scanner.lnk
%UserProfile%\Desktop\Uninstall Security Scanner.lnk
%UserProfile%\Start Menu\Programs\Security Scanner.lnk
%UserProfile%\Start Menu\Programs\Uninstall Security Scanner.lnk