Professional Documents
Culture Documents
http://www.softsailor.com/how-to/13827-how-to-uninstall-remove-internet-security
-2010-virus-removal-guide.html
Related Articles
How To Remove / Uninstall Windows Active Security Virus (Removal Guide)
How To Remove / Uninstall Personal Security Virus (Removal Guide)
How To Remove / Uninstall Volcano Security Suite Virus (Removal Guide)
How To Remove / Uninstall Conflicker.B Trojan And Antivirus Pro 2010 Virus (Remo
val Guide)
How To Uninstall / Remove System Adware Scanner 2010 Virus (Removal Guide)
How To Uninstall / Remove Malware Defense Virus (Removal Guide)
This post was written by:
Mihai Andrici - who has written 419 posts on SoftSailor.
Reply
Heather says:
January 16, 2010 at 9:43 pm
I cannot thank you enough for ridding me of this virus! Thank you so much
Reply
Roger says:
January 16, 2010 at 9:49 pm
Hi, I following the instruction, and removed the Internet Security 2010 successf
ully. However, after reboot the computer, the network does not work. It shows Lim
ited or no connectivity , anyone has seen the same problem?
Thanks!
Reply
Roger says:
January 16, 2010 at 10:03 pm
I followed the instruction and Removed the virus successfully.
However, after reboot the computer, it lost internet connection.
The LAN connection status is: Limited or No connectivity .
I tried Repair , get following error:
Windows can not finish repairing the problem because the following action can no
t be completed:
Renewing your IP address.
Please help!
Thanks!
Reply
Roger says:
January 16, 2010 at 10:11 pm
I followed instruction and removed the virus successfully.
However, after reboot the computer, it lost internet connection.
The LAN connection status is: Limited or No connectivity .
I tried Repair , get following error:
Windows can not finish repairing the problem because the following action
can not be completed:
Renewing your IP address.
Please help!
Thanks!
Reply
Serenity says:
January 16, 2010 at 10:25 pm
Thank you so much for all the info regarding this biotch!! What a nasty little n
asty this one was!
It took several steps to get rid of it but I was finally able to by using the su
ggested downloads. It just took several times before it took.
Bless you!!
Reply
Brooklyn says:
January 17, 2010 at 12:56 am
This was so easy just printed and followed instructions just like it said and wo
rked
Can t thank you enough Thanks
Reply
anirudh says:
January 17, 2010 at 2:28 am
THANKYOU SO MUCH!
i finally got rid of this thing, all thanks to you!
Reply
Eddie says:
January 17, 2010 at 4:10 am
this thing is weird i have looked multiple times for it in the add/remove progra
ms thing and i have yet to find it and the
REG addHKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v Disabl
eTaskMgr /t REG_DWORD /d 0 /f command in run will not work i just put malwarebyt
es on my flash drive and its currently scanning but why does this program only l
et me go on certain sites i mean i cant go on youtube but i can go on google vid
eo? whats up with that?.. once i scan fully with malwarebytes will it just go aw
ay? once again thanks for the help was a great post and helped alot!
Reply
Eddie says:
January 17, 2010 at 4:13 am
also i wanted to ask but forgot does anyone know where this comes from? like idk
if my son or something did something on the computer to get this if anyone know
s how they got it can you plz reply and tell me thanks once again eddie
Reply
Jeff says:
January 18, 2010 at 6:47 am
I just got this one around 5 am this morning while surfing the Pennysaver classi
fieds online. I clicked a curious ad offering to sell you a new SSN and figured
it was a scam but wanted to see. Well I went to their website and I think when I
clicked the buttons that redirect to informational pages on the site is when I co
ntracted the HIV. I ran a search for all files modified in the last 2 weeks and
pretty much everything that was tied to this fast working trojan happened around
5 am today, while I was there.
You could do a search for all files between a certain string of dates, and when
the search is complete click the date header to organize list by date, then star
t looking over them for 42.exe
IS2010.exe and warning.html
They will all be grouped together. (If you haven t removed already) there you will
see the time. Then you can see what else is in that time frame on your web brow
ser history.
Reply
Rebecca says:
January 17, 2010 at 7:10 am
All I want to say is THANK GOD for Soft Sailor!!!! I had 487 infected files!!! Y
our process worked! Thank you, Thank you, Thank you!
Reply
jj says:
January 17, 2010 at 12:57 pm
thx so much this help fix my family pc
Reply
Josee says:
January 17, 2010 at 1:46 pm
Hi, I ve been following various steps here and am making progress. HOwever I can t c
hange the desktop image any advice on restoring that? My desktop is in active mo
de and won t let me restore and won t let me go to properties and change the backgro
und image. Thanks.
Reply
jaybug says:
January 17, 2010 at 3:20 pm
I am personally in love with whoever figured out how to fix this. My computer wa
s about to bite the dust, but not anymore! And the steps were super easy to foll
ow. I just had to restart my computer in between two scans, and it works perfect
ly now!
Reply
MikeC says:
January 17, 2010 at 5:11 pm
After much trying and frustration, I could not get rkill.com to work. However i
downloaded Process Explorer (free, and better than Task Manager) on another machin
e, transferred it with Malwarebytes Anti-Malware by memory stick to the infected co
mputer. I used Process Explorer to kill the Internet Security 2010? processes, an
d Malwarebytes to clean up the mess I hope it s okay tomorrow!
Internet Security 2010? became so frustrating because it was using up 75% of my C
PU all the time, and doing everything in its power to block. The solution took m
e 15 minutes, figuring it out took 5 hours
Process Explorer is at: http://technet.microsoft.com/en-us/sysinternals/bb896653
.aspx
Reply
Amber says:
January 17, 2010 at 5:28 pm
Malwarebytes removed this virus from my computer by itself because the virus pre
vented the rkill program from working (however I should mention that my firewall
had blocked part of the virus in the first place so I was having all the issues
EXCEPT actually seeing the Internet Security 2010? interface where I guess you a
re told to give your credit card info)
Reply
jackchen says:
January 18, 2010 at 12:42 pm
Thanks for this article and another one I successfully removed IS 2010. Just wan
t to provide some update information that might help others:
1. the malware hit my PC seems to be a new version of IS2010. I tired to kill it
by rkill.com but it always shows application infected! and rkill.com won t run. whe
n I try to run taskmgr,cmd, regedit or system restore in safe mode, they all sho
ws the same application infected then start IS2010 scan crap.
2. Finally I found out if I copy the \windows\system32\cmd.exe and rename it to
1.exe, it can run and I got a command console. I runned rkill here and still no
luck, then I found PsTools from Microsoft http://technet.microsoft.com/en-us/sys
internals/bb896649.aspx are still working. So I runned pslist and found IS2010,
killed it by pskill, tried to run rkill.com again but it still invoked IS2010, f
inally found another process smss32 is the other process. After killed it, rkill
can run successfully. I checked program files\internet security 2010 and found
it was created on 11:56PM, so I searched my harddrive for that time period and f
ound three files :
\windows\system32\windhelper32.dll
\windows\system32\smss32.exe
\windows\system32\winlogon32.exe
I unregisted the dll, deleted those files.
Scaned registry and found thos entris:
HKEY_CURRENT_USER\Software\IS2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Internet Security
2010?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run smss32.exe
new :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon\Userini
t winlogon32.exe
changed it to userinit.exe.
Reply
Chris says:
January 18, 2010 at 2:01 pm
In my case the problem with no internet access and the application error in svch
ost The instruction at 0×7d4caa9b referenced memory at has been solved with START |
RUN | typing CMD and clicking OK (or RUN), then typing
netsh winsock reset and restart the machine.
Reply
PO'd says:
January 19, 2010 at 9:39 am
Here is one for everyone out there. My desktop (using laptop for this) was infec
ted with the lovely IS2010. After the many suggestions seen on the internet for
Spyware Doctor and other free spyware removal tools, programs or whatever they re ca
lled, I downloaded Spyware Doctor and ran a scan. It did in fact locate IS2010 a
long with other garbage and to my shock (sarcastic) in order to have it removed
I have to pay what happened to the free removal. Now that my computer is totally dis
abled I am beginning to think that the J-O s that advertise their free removal tools
, programs and such are the same tools that are creating the havoc in the first
place. To the creator of spyware, malware and future ware s not yet named I have f
our numbers for you to figure out 7625!
Reply
Richard says:
January 19, 2010 at 11:48 am
I have tryed spydoctor but can t access internet exployer i have manually deleted
internet security 2010 just long enough to get malwarebytes downloaded running s
can now but IS2010 keeps slowing it down I boxed ankled and selected full scan t
aking a bit.How come they don t find out who started this junk and tar and feather
the dirty dogs I m not normally a violent person but I think I could actually sho
ot one of their toes off.
Reply
Bizerk says:
January 19, 2010 at 1:53 pm
I have followed all the steps, and now I cannot Load windows. It Says Loading Set
tings then Logging Off and I cannot access Windows? What can I do now???
Reply
Stephen says:
January 20, 2010 at 12:56 am
That was a close call.. thanks for the valuable info ! It just about fried my Th
inkpad s custom XP pro load in short order. I tried to run rkill.exe and it didn t c
omplete. I had to burn the Malwarebytes and rkill onto a CD on my desktop, since
after the infection the laptop wouldn t recognize the thumb drive, or connect to
the wireless after I disabled the wireless connection like a dummy.. it wouldn t r
e-enable manually *connection failed* . The wireless revived after (a nervous) r
estart. It took about 5 attempts to download the update for Malwarebytes, kept g
etting an error, but with perseverance it finally updated. After the first quick
scan, the system didn t reboot successfully. I had to hold down the power button
for 5 seconds to shut down. I then ran the anti-malware program AGAIN, this time
a full scan. It found and successfully removed 5 more infected files / processe
s. I ran another quick scan following that, nothing found.
I m not jumping for joy yet, but the beast appears to be dead. Hope my experience
helps someone.. be careful what you click !
Update : AVG 9.0 found nothing on a whole computer scan, everything seems normal
after a few restarts.
Reply
Mark says:
January 20, 2010 at 4:28 am
This thing about buying a particular new virus checker to cure the Internet Secu
rity 2010 virus is exactly what they want you to do, and is a complete waste of
money.
My system was hit by this horrible virus resulting in the blue screen of death and
being deprived of access to any controls.
What I could do, however, is reboot!
So I rebooted, held down Key F8, and got the boot options.
I chose System Restore option and turned the clock back by one week.
Although an error message appeared saying it had failed, it actually hadn t!
When I rebooted, the system was perfect again, and I hadn t even lost any data eve
rything was right up to date, and I simply deleted the suspect file the virus ca
me from.
Problem solved!
Reply
Wendy M says:
January 20, 2010 at 8:02 am
My husband downloaded this virus by accident when he was trying to install new s
ecurity on our home computer. It s complete BS and a scam to get your credit card
info. It s from a company called task-bar and they re based out of Riga, Latvia. The
y charged our credit card $109. We ve since cancelled our card. Anyway, I had to t
ake my computer into work to get it fixed. They deleted all the programs manuall
y (I have no idea how) and then installed Malwarebytes Anti-Malware program, so
I guess it s a good program or my company wouldn t do it. They also installed an ant
i-viral program called Sophos and said between the two, we should be protected.
Reply
asdf says:
January 20, 2010 at 11:54 am
well somehow it work even though after the scan and removal process,, it said so
me of the stuff cant be remove, thanx alot
Reply
Kda says:
January 20, 2010 at 9:07 pm
Got this bugger barely half an hour ago, bloody trojans;
Either way, rebooted, had AVG find it, remove it, resulting in a bsod; rebooted
again only to find that I can t even access my desktop only thing that pops up is
this damn program; so I used it to open up an explorer window, and here I am, lo
oking at how to remove the damn thing thing is, It s a brand new computer so I nee
d to figure out how to activate safe mode, this is the last thing I need ¬.¬
Reply
Andrew Schneider says:
January 21, 2010 at 7:09 am
Thanks for the great information worked like a charm!! I have Norton Internet Secu
rity set at a high firewall level and updated regularly and this still snuck thr
ough. Your simple instructions allowed us to remove this virus quickly and easil
y. Thanks again!
Reply
ProF says:
January 21, 2010 at 1:13 pm
thanx u
Reply
MJ says:
January 21, 2010 at 1:49 pm
This happened to me as well. It took my computer guy 19 hours to restore my syst
em and recover my important corporate files.
The Internet Security 2010 locked up my computer tighter than a drum. Of course
I was trapped like many others on here. My computer guy said since we had config
ured the computer with NTFS and we did not have the administrator password, in a
ddition to the effects of the viruses, trojans, etc it took 19 hours to recover m
y lost data.
This is what my computer guy told me when he brought back my computer. 1 iTunes m
usic file, $1.29, 1 Email from my largest client, $20,000, Recovery of 9 months
of email and all of your iTunes music files Priceless!
MJ
Reply
Nate says:
January 21, 2010 at 2:51 pm
Hey when I do the scan on the thing they told me to use it says i have to purcha
se it.. he said its a free download! It says, To remove them you must purchase Why
? Why can t it just fix it! Christ!
Reply
Mihai Andrici says:
January 21, 2010 at 4:08 pm
You might have things a little twisted.
The Internet Security 2010 is basically a scam. It pretends to be an antivirus,
but it says you need to purchase it before it can repair anything.
Malwarebytes has a free edition, that you can download from the link in the arti
cle. Malwarebytes is the one you should be using to scan your computer, not Inte
rnet Security 2010. IS 2010 is the actual problem. Please read again the article
and you ll figure it out. If not, come back with a comment.
Hope I was of any assistance,
Myke
Reply
Graham says:
January 21, 2010 at 8:56 pm
My PC was infected by IntrnetSecurity2010 on 17 Jan 2010.
I have used Malawarebytes with the rkill file, following instructions here, but
my system is still infected.
I have lost the on-screen warning message, and the annoying pop-ups, but my PC i
s still not right. My main screen keeps going black and if I set an image for my
desktop it keeps returning to black on start-up.
I have scanned with Avast, SUPERAntiSpyware, Spybot Search and Destroy, SpywareB
laster, Spyware Terminator, Microsoft Scan, all to no avail.
I have found a file called atapi in C:/Windows/System32/Drivers,
Description:IDE/ATAPI Port Driver
Company: Microsoft Corporation
File Version: 5.1.2600.5512
Date Created: 17/01/2010 19:19
Size: 94.2 KB
I know this file is relevant to the spyware, as it was created on the day my PC
was infected.
I have tried to rename and delete/shred the file, also rename, change the file e
xtension, and then delete/shred it, but every time I delete or shred this file,
it keeps coming back.
CAN ANYONE HELP????
Reply
Stephen says:
January 22, 2010 at 1:16 am
Update 1/22/10 still no problems. To boot, I uninstalled programs I don t use, upd
ated Thinkvantage software, Microsoft updates, and BIOS. The laptop is running b
etter than ever. Every little bit helps glad I caught it in the early stages. The
beast is now officially dead.
Woot !
Reply
alice HELP ME!!!! says:
January 22, 2010 at 5:23 pm
what steps did you take?
Reply
Betsy says:
January 22, 2010 at 8:01 am
I got this stupid thing this morning..green screen with SPYWARE.
I tried system restore and all..nothing. I saw this on another site and tried:
Once it is downloaded, double-click on the rkill.com in order to automatically a
ttempt to stop any processes associated with Internet Security 2010 and other Ro
gue programs. Please be patient while the program looks for various malware prog
rams and ends them. When it has finished, the black window will automatically cl
ose and you can continue with the next step. If you get a message that rkill is
an infection, do not be concerned. This message is just a fake warning given by
Internet Security 2010 when it terminates programs that may potentially remove i
t. If you run into these infections warnings that close Rkill, a trick is to lea
ve the warning on the screen and then run Rkill again. By not closing the warnin
g, this typically will allow you to bypass the malware trying to protect itself
so that rkill can terminate Internet Security 2010 . So, please try running Rkil
l until malware is no longer running.
Once I got the rkill to stop the IS 2010, I did a system restore back to my secu
rity checkpoint done yesterday..so far so good. I did not click on any of the po
p up windows so I don t know if it got in very deep. I think I will install the Ma
lware just as a precaution.
Reply
alice HELP ME!!!! says:
January 22, 2010 at 5:21 pm
got this from tune up utilies (popped up saying it was not an original version,
click here to so windows can download latest antivirus softwawr blah blah) i cli
cked and i am talked like in 15 seconds, there it was on my desktop! i ran it, a
nd when all those virus popped in in IS10 i got suspiciious. googled a bit, got he
re, and followed instructions (i already have Malwarebytes so i skipped that)I d
ownloaded rkill and ran it. then i ran MBAM and after a few minutes, it said it
detected the task manager disabler. i deleted all the files, and then the log ca
me up
Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Disa
bleTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted
successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDeskt
op\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quara
ntined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesk
top\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quar
antined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\N
oSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantine
d and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\N
oActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quaran
tined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\No
SetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined
and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\No
ActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarant
ined and deleted successfully.
but then i tried to open task manager and it said cannot be process, file is infe
cted, please activate your antivirus software and then IS10 popped up. this keeps
happening when i try and open task manger or rkill.
scan just finished, no malware or bad files or whatever it says were detected. i
tried opening task manager, the FILE IS INFECTED thing came up again. after i c
losed it, IS10 tried starting up again.
help. what should i do? i run on windows vista. just got this damn son of a bitc
h 15 minutes ago! HELP
im currently trying
Reply
Virus Killer says:
January 22, 2010 at 5:58 pm
Worked like a charm. Ran MBAM. Found 18 items. Killed most entries. A couple wer
e stubborn. A little tip, run regedit. You will need to run twice to get past th
e infected message. Take note where the .exe are from MBAM, HKEY Local Machine a
nd HKEY Local User, Software, Microsoft, Windows, Current Version then Run. Dele
te anything that looks off.
After this ran kill.com (awesome by the way) and it then let me delete remaining
files, namely 41.exe and something helper32.dll in Windows System 32 directory.
Rebooted, ran MBAM and all is well.
Reply
John says:
January 22, 2010 at 10:48 pm
Go to http://www.ubcd4win.com and make yourself a boot disk. Use the explorer to
remove the internet security from program files. Then edit the registry and nav
igate to HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon
Come down to userint. You will see that the value is C:\windows\system32\winlogo
n32.exe Change it to C:\windows\system32\userinit.exe
You can now logon.
Reply
lefty says:
January 23, 2010 at 9:14 am
Malwarebytes may have fixed Internet Security 2010 a month ago, but it s useless t
oday. Even if you can get Malwarebytes to run, at best it fixes the problem only
temporarily. It will be back within a day. MWB clearly doesn t attack the root pr
oblem or cause of Internet Security 2010. And I ve NEVER been able to get rkill to
do anything except continually ask me for permission to run pev.exe. And no mat
ter how many times I give it permission to run, it continues to ask me again and
again and again and again, ad nauseum. In other words, it never gets around to
actually DOING anything.
Reply
Leonardo says:
January 23, 2010 at 10:38 am
I could not get the rkill file to work as it was being blocked (I think) so ran
the other one and got it out!
Thanks!!!
Reply
Glauco Schaffer says:
January 23, 2010 at 11:18 am
I followed the instructions above and it worked beautifully!
I download the software here: fallow the instructions like they say.
http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10896905.html
PS: I was able to download the software from the computer this virus was in. Awe
some! Thank s guy s!!!
Reply
Those effers says:
January 23, 2010 at 5:17 pm
Thank you for sharing your knowledge!!! My son s laptop became infected after visi
ting YouTube..sheesh I guess nothing is safe anymore. The stupid virus wouldn t allo
w me to download MBAM, so I had to download it to another computer and use a fla
sh drive to transfer it to the sick computer. I did have to attempt to run rkill
a few times before it would actually work, but as explained in previous posts,
just keep trying with the error window still open. The rkill killed it alright stopp
ed it dead in it s tracks. The scan with MBAM then found 23 infected files and rem
oved them. I only had the virus for a few hours the computer is working as if noth
ing ever happened. THANK YOU!!!!
And to those who are behind this scam, I hope you rot from the inside out slowly a
nd painfully.
Reply
Yousavedmycomputer says:
January 23, 2010 at 5:23 pm
Thank you so much! My computer randomly popped up with this while I was on the T
arget.com website..seems like it doesn t really matter where you are, you can get
it. My computer is up to date with Norton and I run Spybot often didn t matter, thou
gh.
This tutorial worked well and I do recommend opening the rkill.com thing while a
IS 2010 pop-up is on screen. I did this by accident and had no problems with re
moval but I also started removal as soon as I d been hit after looking on a different
computer because the IS 2010 wouldn t let me use the internet it came up with this p
hony green screen that said Must update antivirus software and something like Inter
net is infected . After I used this I got my background back and everything (it we
nt blank). Thanks! It means a lot not to have to try and save all of my informat
ion!
Reply
Tom says:
January 24, 2010 at 12:13 am
Several people here have mentioned issues with not even getting their computers
to boot into Windows once this malware is installed.
I had the same problem and checked my bios. Unfortunately I didn t know what the c
orrect boot settings were, although I suspected that was the issue, so I took it
to a tech who told me that it wasn t the booting setup but the actual sata bridge
settings that had been screwed with. The reset those to the factory standards a
nd viola, my laptop booted properly again.
Of course it was still infected, so I still had to do the rkill.exe and MalwareB
ytes thing, but for those who can t seem to even boot to Windows, this may help.
Reply
Imcool says:
January 24, 2010 at 5:18 pm
Thank you for telling me how to get rid of internet security 2010. Got rid of it
in 1 hour and 15 minutes.
Reply
Mauro says:
January 24, 2010 at 9:26 pm
So I was previously infected with Windows Security , Internet security 09? (or somethi
ng like that), and a few others. The first time I got infected with one of these
f*ckers I spent maybe 5 hours trying to get rid of it. The second time and thir
d time, with a little more experice, it only took me a few minutes. All I did wa
s restart the computer on safe mode and go back 2 or 3 days.
About 2 hours ago I got this Internet Security 2010. But this time I didn t freak
out, I thought I d do the same thing I did before, just restart it on safe mode, g
o back a few days and that s it. Well, not so easy, the f*cker was there even on s
afe mode. That s when I freaked out.
Here are the steps:
1. Restart computer on safe mode (by pressing F8 when rebooting)
2. If it lets you do a system restore right away, go for it. (It didn t let me tho
ugh, the virus was blocking it, that s what made things harder).
3. What I wanted to do was block the virus so it would let me do the system rest
ore, so I pressed ctrl-alt-delete. And no, it wasn t working for me either. I got
the task manager disabled by administrator too. What I did was press ctrl-alt-dele
te again, and IT OPENED!
4. I ended whatever there was there on the task manager.
5. Went to start, all programs, accessories, system restore. And restored my sys
tem to a few days back.
6. The computer started fine, all I did was run ComboFix (which you can download
free). And that s it! It s working fine! (my internet wasn t working either I forgot to
tell you guys).
It s 12:25am. F*ck this virus, I hope this helps you guys, I m going to bed. Good ni
ght!
Oh, and just in case, I ll run Malwarebytes tomorrow morning.
Reply
Nire says:
January 24, 2010 at 10:07 pm
I ve noticed several people have mentioned that after following the instructions t
hey cannot connect to the internet but that hasn t been addressed. I am having the
same issue. My internet IS working. I have great connectivity. but IE, Firefox,
Yahoo IM, not even my antivirus can connect. How do I get my internet back afte
r doing all this????
*frustrated*
Reply
backdoc says:
January 25, 2010 at 12:32 am
i can not get rkill to stop the processes and therefore, when I run the malware
or superantispyware programs they don t remove everything . they have removed most of
it i believe but i still get the desktop popup and the popup that happends when
you run the rkill program. is there a way to stop the processes from the task m
anager and then run the malware programs? thanks.
Reply
backdoc says:
January 25, 2010 at 12:35 am
also, malwarebytes won t update for me even when i turned off avg and i get error
code 732 (12029, 0). any help is appreciated! thanks.
Reply
Ron V says:
January 25, 2010 at 6:04 am
I have the same issue now. I had the sw remove the files but now a constant rebo
ot cycle. Can t get into Recovery Console as it tells me my admin pw is wrong
Reply
Leroy says:
January 25, 2010 at 11:52 am
I picked up this little bugger last night. I rebooted my comp in safe mode, ran
rkill, then ran malwarebytes. After malware was finished, I deleted the infected
files and rebooted. The little Internet Security 2010 incon is gone from the in
con tray in the lower right of the screen. I m able to access any program I want a
nd everything seems to be working correctly. The problem is that now I have an i
ncon for Internet Security on my desk top. I didn t notice this before. Why is it
there now when it wasn t before and is it really deleted?
Reply
Tim says:
January 25, 2010 at 2:31 pm
unning the rkill multiple times is the key. Also, I installed the malware progra
m to a flash drive. Until I did this it kept getting deleted by is2010. once on
the flash drive and after running rkill many times it all worked and the thing i
s GONE . kaput .
Thanks to all you people that take the time to help. I is awesome. I am going to
sign up for the full version of the malware to say thanks to them.
Reply
jorge says:
January 25, 2010 at 2:42 pm
i cant unistall internet security 2010
i downloaded Malwarebytes and rkill, but when i activate rkill, it automaticly c
loses. instead, i tryed Malwarebytes too, but it closes too. i have stoped the i
nternet, but still the same
is there any way to remove this annoying fake internet security?
Reply
Mauro says:
January 25, 2010 at 6:10 pm
Jorge, check my previous post, I got it last night, but I was able to get rid of
it.
Reply
Trinaeri says:
January 26, 2010 at 4:00 am
So I picked up this bugger about an hour ago and finally managed to remove all t
races of IS 2010 that I ve been able to find so far with malwarebytes and everythi
ng seems to be in order so far hopefully things will stay that way. Thanks so muc
h to you and paranoia, it would have really sucked if my computer had been fried
seeing as I only bought it a month ago.
Just to let everyone know I also got this thing from youtube.
Reply
Trinaeri says:
January 27, 2010 at 2:53 am
Soooo here s an update exactly 24 hours later I was surfing the web again. Mind yo
u only websites I d never had problems with, nonetheless IS2010 is back though I c
an t find any of the files related to the program. Last night I ran malwarebytes f
our times and the last three times the results came up clear I just now ran malw
arebytes again and the IS2010 files are back but I can t find them in search nor d
oes it show up in my drivers folder my start menu or my desktop I m not having any
problems now other than a lack of taskbar use (mbam returns use after scanning)
, I have that bloody annoying pop up about updating my computer, and I am now un
able to run rkill. I am beyond pissed. Has anyone had the same remaining problem
s and been able to fix them? I ask that you please reply.
Reply
Pyronaught says:
January 26, 2010 at 2:35 pm
I was about to reformat until I found this article on how to kill that damn thin
g. The only trick you need to add to the how-to instructions is that you need to
run rdkill the first time, don t close the popup message saying that the file is
infected and then run it a second time. The trick to getting rdkill to run is to
not close the pop-up error created by the mafia style fake antivirus program.
I have to wonder why the people that created Internet Security 2010 can t be track
ed down to where the money is being paid and arrested? Writting this kind of sof
tware should be punishable by serious jail time!
Reply
Rich says:
January 26, 2010 at 7:08 pm
FYI (sorry if someone posted this already, this is a LONG thread)
I was able to download MBAM but it wouldnt let me install it. Here s how I was abl
e to install the program:
1. Download Malwarebytes anti-malware, save to desktop
2. Right Click, you will see OPEN, RUN AS, etc.
choose RUN AS
3. You will see a window that says Which user account do you want to use to run t
his program?
Underneath you will see a bullet for current user followed by a checkbox that sa
ys PROTECT MY COMPUTER AND DATA FROM UNAUTHORIZED PROGRAM ACTIVITY
UNCHECK THIS BOX AND CLICK OK!
4. This allowed the installer to launch the program. Once installed, click OK to
continue with any updates and then launch the scanner.
5. Good luck!!!
Reply
Duffyd says:
February 22, 2010 at 9:04 am
I got this virus yesterday and I was able to clean it, but was not easy. Thank t
o Rich tip I made it. Because the program was stopping me from run Malwarebytes.
Hope this helps someone.
Reply
Stephen says:
January 27, 2010 at 3:03 am
FYI .. if you didn t check in the last few days to a week,
Malwarebytes has ANOTHER update. I don t know if it s related to IS2010, but it foun
d 127 MORE infected items, mostly a bunch of adware entries and a couple of troj
ans.
I recommend to look for updates frequently, and run the program daily for a good
while.
Reply
Anna says:
January 27, 2010 at 8:31 pm
Just a few more things to add if anyone else is still struggling with this:
When you re done removing, you may want to consider turning off System Restore, re
booting, and turning it back on. Be forewarned, this will wipe out all previous
restore points, but I noticed this was lingering in those restore files after re
moval in some cases.
Also, if Malwarebytes isn t working, try Combofix. Again, you may lose files if yo
u use Combofix, but there s been success with it. You will need to rename it befor
e you load it onto the infected pc, though.
Reply
jc says:
January 28, 2010 at 12:58 pm
malwarebytes works good, but sometimes the rouge programs detect it and shuts it
off after instalation.
if your able to access the desktop try running msconfig from the ~run in start m
enu, disable all the startup items.
*note in msconfig the filepath for the rouge softwares are listed usually with a
odd ending name like ZZhdsjhh ect.
then reboot into safemode with networking, try running antimalbytes again- and i
f it still doesnt work .
in safemode with networking- internet acces should be restored. then it is possi
ble to download asc, and iobit security 360 from iobit.com
if the machine is ifected beyond os repair- the pc will crash when loading safem
ode. at that point a fresh copy of windows is needed.
these to programs along with antimalware bytes and avg 9.0 have given me a 99% s
ucsess rate on my repairs since these rouge programs were first infecting machin
es.
(lol- that ll be $100 please)
Reply
awibs says:
January 28, 2010 at 7:19 pm
http://www.softpedia.com/get/Tweak/Network-Tweak/WinSockFix.shtml
To fix your internet connection after your remove it!
Reply
Andy says:
January 29, 2010 at 1:45 pm
Caught this one quick thank god, the second I turned off NoScript I had an ad co
me through I couldn t close (Even alt+f4 didn t close the f*cker), so I clicked it a
nd BAM. Great solution, I owe you my life lol!!
Reply
Anna says:
January 30, 2010 at 2:32 pm
I LOVE YOU. thanks, you completely saved my computer (:
Reply
Caitlin says:
January 30, 2010 at 3:25 pm
OMG Thankyou sooo much!! That stupid internet security 2010 was getting SO much
on my nerves! The installment was fast, easy, and worked like a charm! Here s a ki
ss *smooch*
Reply
Thankful 4 the help says:
January 30, 2010 at 5:29 pm
THANK YOU SO MUCH .you just dont understand how much this has helped me. I was beg
ining to freak out when that internet security installed itself on my computer b
ecause my laptop already had a virus and the internet security only made it wors
e; it was ridiculous ugh! Anyways I Just wanted to tell you that I am deeply grate
ful(again) for your help =D
Reply
Eric says:
January 31, 2010 at 1:26 pm
I don t have any key named:
HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\Userinit
I can t logon, it immediately logs me off. Should I create this key?
I m using ubcd4win registry editor right now.
Thanks!
Reply
Eric says:
January 31, 2010 at 5:48 pm
It looks like adding in the Userinit key did the trick.
Ultimate Boot CD for Windows is a great resource.
Reply
Kitty says:
January 31, 2010 at 10:00 pm
To Mic: you should have probably done a deep level format on your computer befor
e reinstalling windows. That is why it wouldn t allow you to install a fresh opera
ting system but a secondary one. By leaving the infected OS on there you probabl
y will end up with the problem returning. I had the same Internet Security 2010
crap install itself on my computer, it went so fast that it made my head spin. M
y solution? I immediately pressed the power button and yanked the lan cord out o
f the back of the PC. Then I booted the system up without it being connected to
the internet. You have to be very fast with this bugger. Because if you don t it w
ill immediately lock you out of your system and won t let you access anything on y
our desktop. I have seen this happen on another computer. The client wasn t able t
o click on any desktop icons or the start button without getting the dreaded: Ac
cess denied, this file is infected! warning. It even changed the desktop backgro
und to a green screen with a nasty bold red warning on it. That system was beyon
d the point of doing anything with, windows failed to load every time, each time
adding a new dll file that was supposedly corrupted. So we wiped the drive clea
n twice to make sure and reinstalled XP from scratch.
On my own system I caught it early enough before it locked me out completely and
I was able to do beat the virus to access system restore. I went back to a date
before the trouble started and then removed the suspect registry entries manual
ly. Remember, system restore won t automatically remove all traces of this virus,
but if you can do that it will save you from having to reformat your drive. Howe
ver, if you don t know what you are doing you can do more harm than good, so in th
at case it s best to leave this up to the experts. If you are not familiar with ed
iting the registry and the solutions from the above article don t work for you, th
en I would suggest taking your computer to the nearest BestBuy and letting the G
eeksquad guys fix it for you, just don t let them talk you into buying a new syste
m
Reply
Zach Caudle says:
February 1, 2010 at 6:01 am
READ THIS READ THIS READ THIS!!!!!! It will allow you to open task manger!
To reset your administrative setting to allow for task manager, simply go to run
, copy and paste this:
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v Disabl
eTaskMgr /t REG_DWORD /d 0 /f
hit Enter. Works every time, for me at least
Reply
Emma says:
February 1, 2010 at 4:06 pm
Got this annoying virus earlier, followed the instructions exactly as above and
worked. Straight forward, quick and free. Thanks for the help.
Reply
Alsta says:
February 2, 2010 at 4:24 pm
I say lynch the mob that created this.
Anyway, if anyone is having a problem running RKill.com as IS2010 shuts it down,
I suggest copying the RKill.com file into the startup folder and then reboot wo
rked for me. Rkill ran on start up and managed to kill the smss32.exe before its
other processes ran and then I was able to install Malwarebytes
Reply
Getafix says:
February 3, 2010 at 1:36 am
It attacked my PC for the second time. I am going to delete the whole windows an
d reinstall it. However is it safe to backup my stuffs in CD/DVD before re-insta
lling Windows? does it automatically copy any malware into CD while burning some
thing else?
Reply
Minos6 says:
February 3, 2010 at 1:00 pm
Thank you very much for this! Worked first time, i m really grateful!
Reply
Renngo says:
February 3, 2010 at 1:20 pm
Well here from Barcelona Spain I have my brother in law that he get the virus so tom
orrow I will try to run the MBAM and the rkill, so I will tell you what was hape
nd..
thanks for all the coments!
Reply
Danielle says:
February 4, 2010 at 1:12 am
worked for me so far. thanks
Reply
BackStreet says:
February 5, 2010 at 1:34 am
Thank you so much guys!!! This blog was a saver. Got around all the loops and I m
back in business .
For all of you out there with the problem, just read everything and you will get
this bitch off! No OS reinstall needed. All your files will stay in tacked. It
will take some patience though.
Wish there will be a tool in the future that will catch viruses when released an
d send them right back to the bastards that created them with a slight mutation
so they can bang their heads! Right back at ya, fuckers! Well
Thanks again to everyone
Reply
la gata21 says:
February 6, 2010 at 12:18 pm
very good, thks
Reply
fedexs says:
February 6, 2010 at 2:49 pm
Worked like a charm for me tried many things before this, but nothing worked unti
l this one big thank you
Reply
R W says:
February 6, 2010 at 3:26 pm
You can temporarily stop the malware from running by opening the Task Manager th
en you end the process titled av.exe .
If the malware has busted your registry so that executables have stopped running
you can fix that with something like exefix , which I had to use; I believe it s ava
ilable at bleepingcomputer.com.
Neither of these bits kill the malware; they just get your comp in something clo
ser to working order.
Reply
TECHYBOY says:
February 6, 2010 at 9:54 pm
THE ROGUE ANTIVIRUS DOESN T LET ME START CMB PROMPT OR TASK MANAGER! SO I CAN T EXEC
UTE THE RKILL PROGRAM!? PLEASE..I NEED HELP TELL ME WHAT TO DO. IM NOT EVEN IN H
IGH SCHOOL YET. I REALLY NEED ME COMPUTER!!
Reply
R W says:
February 8, 2010 at 1:57 am
Isn t the Rkill file with a .com extension? That should allow it to run since the
IS2010 just blocks the exe s.
Reply
chukyTHC says:
February 7, 2010 at 1:10 am
Thanx a bunch, some of the comments suggested it was a hassle, but 4 me it worke
d like a charm. 20 mins later, good 2 go, F YES!!!
Reply
Richard says:
February 7, 2010 at 10:54 pm
ONE MORE THING Check your TCP/IP Settings, IS2010 reset our to use their own pho
ny DNS Server, so all google search results link through their Romanian search e
ngine located at searchclick8.com and then it will reinfect your computer.In Fir
efox, make SURE that the address in the status line at the bottom matches the UR
L google lists.
This was very very sneaky!
Reply
Richard A. Maloy says:
February 8, 2010 at 8:24 am
I downloaded anti-malware and rkill.exe to a thumb drive on another computer. I
then ran them on the affected computer from the thumb drive. It worked perfectly
. I had this program show up a few years ago and it was hell to remove. This is
a much easier solution. Speaking of hell, I hope that s where the originators of I
nternet Security (insert current year) rot in.
Reply
Mike says:
February 8, 2010 at 9:58 am
Thanks. The rkill.exe program worked, but I had to run it several times, then In
ternet Security 2010 stoped running. I was then able to use malware to remove th
e threat. I also deleted the program in the program file. I would like to do the
same to those distributing these scams, but with a baseball bat. Any Idea how y
ou get to find out when they are caught, if they ever are. Thanks
Reply
Thomas McCampbell says:
February 8, 2010 at 9:48 pm
i followed step by step and it didn t do anything but waste my time
Reply
indu says:
February 9, 2010 at 1:27 am
this is very gud the problem got solved very easily ..very much thank you .
Reply
ChipToad says:
February 9, 2010 at 10:09 pm
So i got this nasty virus a few hours ago, and heres what ive done so far.. Imme
diately i used SuperAntiSpyware which deleted a hefty amount of trojans.. Then i
found your fix, I used rkill which seemed to work, only problem was that it wou
ldnt let me connect to internet or activate the Malwarebyte installer.. So i use
d system restore to yesterday at midnight, and after the computer rebooted, the
red cross was still there, but the internet center popups stopped.. The virus me
ssed up computer s ability to find a program to open .exe files, but i used someth
ing that fixed that and i downloaded, installed, and ran a scan with Malwarebyte
s with success.. Now it seemed like Malwarebytes picked up the sources, but when
my computer rebooted a red sheild was still there, although still no security c
enter popups.. Now i usually do have a red shield on my taskbar because i have p
arental controls turned off, but the yellow bubble message is the same that the
virus was giving earlier: Your computer may be at risk, click the bubble for more
details .. I didnt click it though in fear of redownloading all of those nasty fi
les.. I m running another Malwarebytes scan now, and plan to do another superantis
pyware after that.. So, my question is, does my computer sound fixed?? Thanks fo
r your patient reading lol
Reply
JW says:
February 9, 2010 at 11:26 pm
Hi everybody
So I made the mistake of restarting after trying to remove the virus prior to re
ading these instructions, and yes I am stuck in the login-screen loop, and I can
not get in with any safe mode
Once and for all, does anybody know how I can get into my computer so I can give
this RKill stuff a fighting chance?
Thanks so much everyone, hope we can all find a solution to this.
JW
Reply
Chris says:
February 10, 2010 at 2:39 pm
I was fooled into allowing this program install itself, my firewall did detect t
he change and also Spybot alerted me to registry changes.
Thanks for the write-up, I think it is now all gone after taking 2.5 hours to sc
an the PC.
Reply
Ash says:
February 10, 2010 at 5:21 pm
OMG the sneaky bastards! richard is right they reroute u thru google. I ve scanned
my PC with MBAM 3 times and each time something turns up ..How do i remove it from
my IP settings??? Anyone??
Reply
Ash says:
February 10, 2010 at 6:46 pm
got infected today turned off internet connection ASAP . was able to successfully r
emove it with rkill and MBAM or Soo i thought next time u go online u just get re
infected . thats cuz u need to CHANGE YOUR INTERNET EXPLORER settings i reset them
to default and i m good after that! So everyone who has internet connection proble
ms.. check ur IP settings and just reset ur browser this worked for me
Reply
juanjo says:
February 12, 2010 at 12:09 pm
gracias y mil gracias sois fantasticos gracias
Reply
David says:
February 12, 2010 at 2:45 pm
thx mate for help iv got this 3 days ago n i was trayin to kill somehow n i coul
dnt but u show me how thxxxxxxx mate
Reply
Ben says:
February 12, 2010 at 3:52 pm
Ok this thing is killing my life. How can I do any of these fixes when it physic
ally stops me from clicking anywhere on the screen?? At one point I managed to r
un rkill but then it froze my computer. Malwayebytes freezes, ad-aware freezes,
superantispyware wont open and now it just wont let me open anything????
Reply
Ben says:
February 12, 2010 at 3:54 pm
And it wont let me run is safe mode. Just keeps re-booting
Reply
feeling hopeless says:
February 12, 2010 at 6:41 pm
Ok I got to step 9 and when I hit remove it directed me to register with StopZil
la and Pay. Didn t this article say not to pay for virus removal?
Reply
Ben says:
February 12, 2010 at 10:58 pm
I have Malwarebytes on the comp but after 5 seconds of scanning it freezes up. I
dont care about re-formatting I just want some files to be saved first! I dont
think I have an XP boot disk as the computer shot put this copy on for me.
Reply
Sita says:
February 13, 2010 at 6:08 am
Yesterday (12/02/2010) my laptop was infected with XP internet security 2010.
I have just read your guide to deleting this, the only problem I currently have
is that I cannot get onto my laptop full stop. Before it loads the users I have
a blue screen that states Windows has detected a problem and it has been shut dow
n
Is there any way around this? I have even tried all the safe mode option and tho
se two won t let me access it.
Reply
Mihai Andrici says:
February 14, 2010 at 5:15 pm
As I found out on my own, Windows XP seems to be doing this quite often with a l
ot of rogues. If you want to save your files reinstall windows over the existing
installation (repair it) using the Windows XP CD. You ll at least be able to star
t your computer, and then you ll have a fighting chance against this bugger.
Reply
anthony says:
February 13, 2010 at 7:53 pm
have a new one xp internet security. i will let u know if this works to get rid
of it.
Reply
Fish says:
February 14, 2010 at 6:51 am
ok so i think i got rid of it how ever i cant change my background image from ri
ght click properties because it put that warning system infected bright green back
ground any help?
thx
Reply
Bob says:
February 14, 2010 at 12:28 pm
Worked like an absolute charm! Thank you, you re a lifesaver!
Reply
Abitannoyed says:
February 14, 2010 at 6:22 pm
Got this little gen this morning and have been trying to fix my computer all day
.
I tried the instructions, but couldn t update Mbytes database. Ran scan and got 28
infected files. Rebooted and was reinfected.
I then ran rkill again, and again and again and again (maybe 8-10 times). Then u
pdated the dbase and that scan showed 150 infections.
Killed those and it seems like it has gone.
Thanks a bunch you guys you re fantastic!
Reply
DSP says:
February 15, 2010 at 11:22 am
This virus is not that easy to kill really.
I ve killed off most of the virus manually, and from time to time I still find hid
den registry entry s and software that disables some drivers or administrative rig
hts to your computer.
Reply
Ben says:
February 15, 2010 at 12:05 pm
Yeah this thing is not a simple one to get rid of at all As I type this (on a cl
ean pc) I have the infected computer running a linux boot disk to completely byp
ass everything from windows just so i can gain access to files to work on removi
ng this beast.
All options mentioned here have been useless as this thing has disabled me from
even being able to double click a desktop icon.
Reply
Rachel says:
February 15, 2010 at 10:26 pm
You have NO idea how much this has helped me!! I have had this virus for quite a
while now to the point where i m tempted to just throw the computer away! but aft
er finding this removal guide, i am beyond grateful!
I use my computer for the Sony Vegas program and since i got rid of that fake in
ternet security I can finally run the program again!
once again thank you!!
Reply
Will says:
February 17, 2010 at 1:07 pm
got the virus around New Years. Ran Rkill and Malwarebytes and it took the sucke
r off good. New problem: Since that day, my PC now randomly locks up and require
s a hard restart to get working again. It never works now for more than 30 mins
at a time and most times not even that long. Any thoughts?
Reply
Ely says:
February 21, 2010 at 4:01 pm
Hi. I downloaded the rkill file but it wont let me run it. Please Help me. I am
in desperate need. My computer is running Vista Home Premium. Thank You.
Reply
Emajanti says:
February 22, 2010 at 7:17 pm
wow! BIG WOW! you save my life! Thank you sooo very much! my laptop is clean now
Reply
Rissa says:
February 22, 2010 at 10:51 pm
WOO finally got rid of the blasted thing!! i followed the first instructions and
it worked great! i had to use my roommates computer and put it all on a USB to
transfer it over to my infected computer. I had the virus for less then 24 hours
and had over 200 infected files!
Is there a way to better avoid getting this, my computer already had antivirus a
nd antispyware and still got infected sometime yesterday while just using my reg
ular sites. My roommates are concerned about getting the virus also so input wou
ld be great thanks for the help
Reply
kipper says:
January 19, 2010 at 12:38 pm
Well, I got this yesterday, found this site and dowloaded the rkill and Malware.
The rkill wouldnt work then, but did manage to get into Safe mode and run Malwa
re. Now though, it just goes bluescreen very frustrating; I m trying to reboot fro
m the XP installation disk to enebale me to at the very least get back into afe
mode, but not having much success.
Reply
kipper says:
January 19, 2010 at 2:20 pm
Great now it just reboots endlessly
Reply
Lovell says:
February 3, 2010 at 10:44 am
It happen to me to on an XP computer.
I found that the registry location [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon] variable Userinit was pointing to C:\Windows\System32\w
inlogon32.exe not C:\Windows\System32\userinit.exe . Winlogon32.exe is part of the v
irus and gets deleted. I put the drive in anther computer and made a copy of use
rinit.exe, then rename the copy to winlogon32.exe. That fixed my reboot problem.
After you get back up, either manually edit the registry or Copy and paste the f
ollowing in to a text file, Then rename it to something with a .reg extension. R
ight click on that file and click on merge. Reboot and if it all works you can d
elete C:\Windows\System32\winlogon32.exe .
Make sure to run your antivirus scan.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Userinit = C:\\WINDOWS\\system32\\userinit.exe,
Reply
R W says:
February 5, 2010 at 3:44 am
Forgot to mention I am currently running Panda Antivirus as my first attempt to
kill it; started it before both finding this thread and finding the executable f
ix. Will run M-bytes later.
Reply
Michael says:
February 21, 2010 at 7:14 am
I read through all the posts. I almost gave up but was able to defeat the virus.
I used rkill and malaware spyware removal. It wouldn t let me update the definiti
ons for the longest time. I read somewhere that if you reboot and try to update
the virus definitions before this virus kicks in, it might work and it did. I re
moved around 130 objects with Malaware, but I still couldn t do a regular boot, on
ly a safe mode F8 boot. Then this morning, I tried to do a system restore. It wo
uldn t let me, but then I read somewhere else about using regedit to unblock syste
m restore, which seemed to work. I was able to do a system restore a couple of d
ays ago and I thought that might work, but after I did that I couldn t even boot i
n safe mode. I was about to give up and do a full hard drive clean, but I couldn t
even do that because I kept getting stuck at a Windows Recover screen that said
Windows hadn t shut down properly and the only options that it gave me were safe
mode with or without networking and I couldn t access those. I was about to throw
the computer out the window where I read that you could create a vista recovery
disk by downloading it from some site and then burning it a cd, which I did, but
my computer wouldn t let me access the CD drive so I played around with the BIOS
and I was able to access the drive. The program came up and first I tried Window
s Repair and it said everything was all right!!! Then I went back in System Rest
ore and went back about a week and tried a restore and it WORKED!! and everythin
g seems to be fine. IN the meantime, I put all my documents, videos, pictures, m
usic on a storage drive just in case. GOOD LUCK TO ALL.
Reply
Trackbacks/Pingbacks
Any techy types here? ver. virus help says:
December 13, 2009 at 6:43 pm
[...] Today, 09:40 PM How To Uninstall / Remove Internet Security 2010 Virus (Re
moval Guide) How To Uninstall / Remove Internet Security 2010 Virus (Removal Gui
de) SoftSailor [...]
Reply
Spyware Remover McAfee Releases Fastest, Most Convenient Way for Consumers to Fi
x PR Inside « Spyware Remover says:
December 14, 2009 at 1:29 am
[...] How To Uninstall / Remove Internet Security 2010 Virus (Removal Guide) Sof
t SailorInternet Security 2010 is yet another rogue anti-spyware that surfaced o
nline. The Internet Security 2010 rogue is also a bit of a virus, if you follow
the standard definition. But the thing you need to know is that Internet Securit
y 2010 will try to [...]
Reply
Spyware Remover All Responsibility For Your Systems Is Yours The Bulletin « Spywar
e Remover says:
December 14, 2009 at 8:58 am
[...] How To Uninstall / Remove Internet Security 2010 Virus (Removal Guide) Sof
t SailorInternet Security 2010 is yet another rogue anti-spyware that surfaced o
nline. The Internet Security 2010 rogue is also a bit of a virus, if you follow
the standard definition. But the thing you need to know is that Internet Securit
y 2010 will try to [...]
Reply
Spyware Remover Going On A Control Panel Adventure The Bulletin « Spyware Remover
says:
December 14, 2009 at 1:36 pm
[...] How To Uninstall / Remove Internet Security 2010 Virus (Removal Guide) Sof
t SailorInternet Security 2010 is yet another rogue anti-spyware that surfaced o
nline. The Internet Security 2010 rogue is also a bit of a virus, if you follow
the standard definition. But the thing you need to know is that Internet Securit
y 2010 will try to [...]
Reply
Any of you guys still want to argue that Mcafee is good software? - S-10 Forum s
ays:
January 9, 2010 at 12:04 pm
[...] actually a virus itself) got past it. For those that aren't familiar with
what I'm talking about read this. Unfortunately though, the removal isn't as eas
y as they write in their article. I would take [...]
Reply
The Coolermaster Storm Scout Club - Page 476 - Overclock.net - Overclocking.net
says:
January 21, 2010 at 6:33 am
[...] runs the program. It is good but not the same as above Rating 3. ANDYFSR S
ay that he loves http://www.softsailor.com/how-to/138 val-guide.html This one is a
Dos program that is called RKill. rat killer. Rating 4. MadCatMk2; aka Jim, [..
.]
Reply
TechRadio » TechRadio says:
January 23, 2010 at 8:29 am
[...] A caller asked about INTERNET SECURITY 2010, which is a fake antivirus pro
gram, and how to remove it. Here is an interesting article. [...]
Reply
Virus Aftermath.. please please help me says:
February 11, 2010 at 8:06 pm
[...] blue screen with a question mark. The name of the application is actually
Internet Security 2010. How To Uninstall / Remove Internet Security 2010 Virus (
Removal Guide) SoftSailor I did a repair install from setup cd, this pushed the
time of the BSOD a few seconds later than it [...]
Reply