Pin Me

How to Delete Cyber Security

written by: Donna Buenaventura•edited by: Jean Scheid•updated: 6/29/2011

Cyber Security doesn’t have an uninstaller nor does it list itself in the Add or Remove programs utility in Windows. The program is a scareware that is distributed by Koobface worm distributors. Find out how to uninstall Cyber Security either manually or automatically in this guide.

  • slide 1 of 3

    Cyber Security and the Koobface Worm

    Personal Security, a Family of Cyber Security scareware Cyber-criminals use several and advanced techniques in spreading malware to millions of Internet users. They invade whatever is popular or widely-used by people. Facebook has millions of users which is why Koobface was born. The Koobface worm spreads via social networking services as a fake message, and it can also be found in many websites pretending to be desirable content. Short URL services are also being used by Koobface distributors to spread the malware.

    The creators of Koobface connected scareware serving domains known to serve Cyber Security programs which is the same distributor of Total Security and Personal Security rogue programs. If you’re wondering how to delete Cyber Security, you’ll find methods in the below sections to help rid your computer of this particular scareware.

  • slide 2 of 3

    How to Uninstall Cyber Security Manually

    If you feel comfortable manually removing a scareware infection on your computer, follow the below steps on how to delete Cyber Security.Cyber Security Installer and Downloader 

    Browse and delete the following folders and files using Windows Explorer while in Safe Mode:

    • C:\Program Files\CS
    • C:\Program Files\Common Files\CSUninstall
    • C:\Program Files\CSec
    • C:\Documents and Settings\All Users\Start Menu\CS in XP or C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu in Vista or Windows 7
    • C:\WINDOWS\system32\iehelpmod.dll
    • C:\WINDOWS\system32\winsource.dll

    If you cannot delete the two dll files, try first to unregister using the command line. In Vista or Windows 7, launch the command window with administrator privileges, and then type regsvr32 /u iehelpmod.dll. Do the same for winsource.dll and then delete the two dll files.

    Open the registry editor in Windows to navigate and delete the following registry keys:

    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\CS
    • HKEY_LOCAL_MACHINE\SOFTWARE\5FFB10D58FFCF482208906E6A889FD56
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Cyber Security
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}
    • HKEY_CLASSES_ROOT\CLSID\{35A5B43B-CB8A-49CA-A9F4-D3B308D2E3CC}

    Finally, locate to delete the value CS and CSC in the right pane in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

    Reboot the computer and then scan using an up-to-date antivirus program to ensure that there are no other malware infections on the computer.

  • slide 3 of 3

    Uninstall Cyber Security Using Anti-Malware Program

    Removing Cyber Security using an antivirus or anti-malware software is recommended so you don’t have to manually browse for files, folders, and registry entries. The anti-malware software by Lavasoft, EmsiSoft, Malwarebytes, and SUPERAntiSpyware will detect and remove Cyber Security. The standalone malware removal tool by Microsoft can identify and remove Cyber Security, as well.

    Note that variants of Cyber Security may prevent you in running a system scan. If you cannot run a scan, simply use Rkill to kill the malicious processes by Cyber Security. You don’t have to use the Rkill program if the anti-malware or antivirus software is able to run a scan or terminate Cyber Security processes.

    Some malware scanners can run a scan in Safe Mode so don’t forget to give it a try by booting to Safe Mode. If you are using the Avast antivirus program, take advantage of its boot-time scanner that will get rid of Cyber Security before Windows desktop loads.

    Screenshots taken by the author.