Rogue Program SecureWarrior
Description of SecureWarrior:
SecureWarrior is a new rogue that is also a member of the WiniSoft family. These type of programs was commonly installed on computers by a Trojan which can hardly be detected by antivirus programs. SecureWarrior will mislead computer users with its fake security alert messages and fake virus scan results. A removal of SecureWarrior requires thorough scanning and registry editing.
SecureWarrior Technical Information:
Aliases: SecureWarrior, Secure Warrior, Secure Warrior Malware
Released Date: 2009
Type: Fake Antivirus
Websites: -
SecureWarrior Symptoms:
Example message it may display is:
Infiltration Alert!
Your computer is being attacked by an Internet Virus. It could be password-stealing attacks, a trojan-dropper or similar.
SecureWarrior Screenshot:
Download SecureWarrior Removal Program
Download and install MalwareBytes’ Anti-Malware. This version will also help protect your computer against future threats. For a free removal tool only without protection, please click here.
Manual Removal of SecureWarrior
Manual removal of SecureWarrior requires system files and registry modifications. This can be performed with satisfactory result by having the following procedures:
- All programs are closed during SecureWarrior removal
- Internet connection is disabled while removing SecureWarrior
- Registry and legitimate system files were backed-up before removing SecureWarrior
Find and remove SecureWarrior files:
SecureWarrior.exe uninstall.exe 1025worm59bz.bin 10562spy9z1.cpl 109559dwarz959.dll 2485z5p920a.cpl 249069orm57cz.exe 25059zorm4d9.dll SecureWarrior.lnk 1 SecureWarrior.lnk 2 Homepage.lnk 3 Uninstall.lnk 0urw56p0.exe
Delete the following SecureWarrior directories:
c:\Program Files\SecureWarrior Software
c:\Program Files\SecureWarrior Software\SecureWarrior
c:\Documents and Settings\All Users\Start Menu\Programs\SecureWarrior
Remove the following SecureWarrior registry entries:
HKEY_CURRENT_USER\Software\SecureWarrior
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SecureWarrior
HKEY_LOCAL_MACHINE\SOFTWARE\SecureWarrior
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECUREWARRIORSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecureWarriorSvc
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “0urw56p0.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “SecureWarrior”
