Remove Internet Security 2010

By eonash on Dec 11, 2009 | Reply

Internet security 2010 blocks you from doing a system restore, using the task manager,and accessing regedit. what now

By eonash on Dec 11, 2009 | Reply

even in safe mode

By Chris on Dec 12, 2009 | Reply

The problem with these removal instructions is that: 1) The virus disables task manager, 2) even if you do get the task manager working, using RUN… the virus’ process’s won’t end

By NEil on Dec 14, 2009 | Reply

I did not find ANY of the files listed above in the “Find and Delete” files list. I did find the registry entries which I deleted.
Have the spyware asswipes who created this program changing the file names?

By KMAC on Dec 15, 2009 | Reply

I found a way to get REGEDIT to work, but still can’t get Malwarebytes to run…I’m working on it though. If anybody has any useful (not the same shit everyone else is posting)info. please reply although I’d rather if you email me at kris.mcwilliams@yti.edu (most of these sites/forums have very little useful info…mostly people stating to use task manager, start in safe mode…blah blah blah….sorry but that stuff doesn’t cut it and I bet most of these people are not actually experiencing the problem, but simply trying to solve it from outside the box).
I’m trying to find somebody who is willing work with me to properly troubleshoot this because I have some ideas. Haven’t found a way to access task manager yet, although I think I’ve found a way to end the processes (but if I restart computer they start back up due to the fact that they aren’t gone just temporarily “killed”). I also can’t start in Safe Mode, but I’m almost certain I can solve this problem without it. Again if anybody wants to be productive and work together to solve this bitch of a problem….email me. I look forward to it.

By Keith on Dec 17, 2009 | Reply

kmac, I got hit with it this afternoon and i’m still trying to get rid of it. It disables task manager, regedit and cmd. you ned to get rid of winhelper86.dll, winlogon86.exe, winupdate86.exe. search for any file “internet security 2010.*” and delete it. You also need to rebuild the registry. unfortunately when you do all of this, it will log you out of windows as soon as you log back on again. i am currently reloading windows – good luck

By KMAC on Dec 17, 2009 | Reply

Oh….one other thing you should have which I found was a huge halp….Unlocker!!!
Download, install, and run it (little magic wand icon should appear in the taskbar). This program will allow you to ‘kill’, rename, move files. (If you find that you can’t maually delete certain files (winlogon86.exe, etc.) then you can right click on the file you want to delete, you will see an option for Unlocker…select this and in the bottom left of Unlocker, select ‘rename’, rename file (name doesn’t matter) ex. apples.zip (make sure file type is set to ‘all’….now click ‘kill’ and voila the filename and type have changed….try deleting now using Unlocker! If this doesn’t work try it a couple times or try deleting/renaming the other bunk files first….with a combination of these things you will be able to delete them. (just don’t restart computer or you will have to repeat this whole process.

By kmac on Dec 17, 2009 | Reply

Alright!!!I’ve successfully gotten rid of this monster…Not so bad after all. Computer is running great, just as it was before it got hit…There is one error that pops up at startup about a missing .dll(doesn’t seem to be affecting anything….but I’m sure if it is important I can just download it somewhere.)…

By DEE on Dec 18, 2009 | Reply

I have this darn virus and now I cant even get to my log on screen…………..NOTHING IS WORKING. Any ideas

By Carole on Dec 19, 2009 | Reply

I am so upset I thought someone might be able
to help me. I was just on a site and all of a
sudden “Personal Security” downloaded on my pc and it kept telling me over and over that I had all kinds of viruses and I needed protection and they DOWNLOADED THEIR SOFTWARE WITHOUT ME BEING ABLE TO DO ONE THING TO STOP THEM. Now I can’t get rid of it and it keeps popping up as it is downloaded. They won’t let me take it off my computer. It makes my pc lock up too. It must be from Microsoft.
They give no address because they are fake.
If anyone knows how I can remove this horrible
thing, please put the info on this website.
My PC is protected and yet they say it isn’t.
They just want $60 and I am very mad at them.
Thank you for any help you can give me.
Carole

By Veronica on Dec 19, 2009 | Reply

KMAC-can you please tell me how you got rid of it? I am having some of the same problems you were. Thanks

By Kmart on Dec 21, 2009 | Reply

UGH! I have tried so many things. My version of this monster is System Security 2009. My task manager is frozen, and I only get about 10 minutes with an internet connection before I get the blue screen of death. Of course I can’t use the web in safe mode, and the process doesn’t run in safe mode so I can’t find any of its files.

KMac, what steps did you take to rid yourself of this beast?

By falconian37 on Dec 27, 2009 | Reply

Disgusting malware…this thing is absolutely ruthless. There should be some serious investigations into the people who do this and serious charges should result. This completely wasted the day of so many.

By falconian37 on Dec 27, 2009 | Reply

I installed Unlocker then installed Spyware Doctor and then I rebooted…Spyware Doctor blocked some of the operations of this thing…I was then able to use unlocker to release some of the key files to delete….it still doesn’t allow me to access the Task Manager or Regedit. When I deleted the one login file it prevented my entering Windows…I am now repairing Windows and will report as to how that goes.

By johno on Dec 28, 2009 | Reply

hi all,
finally got rid of that sh#T internet security 2010 had to download malwarebytes (it’s free) off the net onto a jump then onto my desktop run it first kept coming up with error when i went to delete is2010 then tried deleting in 2 scans worked fine have just got the computer back to normal but internet wont connect but i think is was some thing i deleted 7hrs ago but all the IS2010 is gone i’m just checking over again(at least now i have access to the system
hope this helps someone

By samuel on Dec 29, 2009 | Reply

Got rid of this ruthless monster… using Kmac’s way. Installed a software utility named “unlocker”, followed Kmac’s instructions…

unfortunately, after I deleted IS2010, then restart my windows, I cannot login anymore. Once I log in , it will log off automatically…working on this now…

I have norton antivirus installed on my pc, it should prevent this in the first place, but…it let me down.

By mike on Jan 1, 2010 | Reply

Got this da#% virus and tried everything above to no avail. I finally installed it as a second drive (used an external USB adapter kit) and scanned the drive with Malwarbytes software. It worked. Once Malwarebytes completed the scan, I reintalled drive in original computer and ran Malwarebytes again to clean up registry (Malwarebytes couldn’t clean registry of drive while connected as a secondary USB drive). All is well.

I know this doesn’t help if you don’t have a second computer but maybe you can talk a friend with a working computer to help you out. Hope this helps.

By Zorn on Jan 1, 2010 | Reply

I initially followed KMAC’s instructions, using Unlocker to delete some of the programs. I was still getting messages from IS2010, despite deleting the actual program. While apparently KMAC and johno initially had errors getting Malwarebytes to run, I found that it ran perfectly fine for me. Maybe it was because I installed it after deleting as many IS2010 files as possible? I don’t know. All I know is that Malwarebytes scanned, and I checked the files, and lo and behold, there were all the IS2010. Yet I still got messages. After rebooting my computer, I’m running Malwarebytes again, and it appears everything’s normal. I’m still a little concerned, but it looks like it’s gone. And I remembered in the midst of typing this that I couldn’t access the task manager whilst IS2010 was still on my computer, so CTRL+ALT+DEL and viola! Task manager! Looks like the monster is gone. They really need to edit this entry… But thanks KMAC and johno.

By Fred on Jan 2, 2010 | Reply

Never got a chance to clean it out and I now
have the login and auto logout thing going on.
Still trying to find a fix also. Please post anyone who has fixed this problem.

By Al on Jan 2, 2010 | Reply

Samuel, If you get past the automatic logoff let me know. I got hit with IS2010. Still working on it…..

By Bob on Jan 3, 2010 | Reply

I used malwarebytes to remove this. Worked! I recommend this solution to everyone. The program detected 71 (yes 71) trojans, adware, malware, etc.

My system was destroyed last year by a virus that Norton had missed; had to reformat the drive and start with a fresh Windows XP. So I switched to McAfee–it missed all 71 items picked up by Malwarebytes.

Malwarebytes is free, but the free version must be manually run. For a version that checks incoming threats, it’s $25. I will likely switch to the paid version and try to get my money back from McAfee.

I downloaded Malwarebytes from CNET.com, which I trust completely.

By jason on Jan 4, 2010 | Reply

After cleaning this virus off I still can’t get IE to work. I have went to tools-internet options-connections-LAN settings and unchecked proxy settings, but IE will still not work. Any help would be appreciated.

By Dave on Jan 5, 2010 | Reply

I have removed everything there is at this point. There is one file that will not delete no matter what I try. It is the winhelper86.dll
I was not able to unregister it. I found it in the system files, then it wouldn’t let me delete it. Then I moved it to my desktop. Still no delete. Then I renamed it and tried to delete to no avail. I have downloaded every spyware program under the sun. I have even tried to shred the file only to watch it literally change its own name right in front of my eyes. I even cut and pasted it to a thumb drive only to watch it just act like a copy and paste. This is the worst spyware I have ever seen in my life. They seemed to have covered everything to make our lives miserable. I hate this company with a passion.

By Dave on Jan 5, 2010 | Reply

Kris, email me at davecampbell99@yahoo.com. I will give you my phone number. I have come up with everything but getting this one file deleted (winhelper86.dll). I am afraid that if I restart I will lose all the hope I have up until this point. Anyways, I hate typing so if you wanna call and speak on the phone, cool. Maybe you can figure how to unregister the file. I couldnt, even with the unregister feature through crappy windows. Man, this should be helped by someone in this worlds governments. the productivity lost from this has got to be unbelievable………….

By ashley on Jan 5, 2010 | Reply

Been having some real problems with this for the last few days now. I have ran Avira anti virus, CC Cleaner, AD Aware and spyware doctor. I have been into MSCONFIG and stopped the process from running on startup. But still no joy. Each day it seems to be getting worse, Sometimes my computer won’t even load windows explorer, Thankfully, with the help of a second computer i have been able to download some programs onto disk to load on the said computer. Have been recommended to try something called RKILL.COM but the is2010 wont let that load either. One thing that does work to get onto internet explorer is to go onto internet settings in control panel Go to advanced settings or something similar and hit reset, It will delete all cookies and stuff and get rid of all add ons, but it can enable you to get onto internet explorer. I have given up with everything. I have tried everything i have read on the net without any joy whatsoever. Think the next step will be to either do a full reboot. or throw the darn thing out the window.
1 last thing, Does any one know how to find the **** who made this thing and do something not nice to them?

By LN on Jan 6, 2010 | Reply

I got HIT 1/1 and believe I am FREE today. I have WIN PATROL (Bill P Studio), a free almost iron-clad utility that checks every thing that tries to load or get past into the registry. A blessing, which last year caught stuff McAfee didn’t even see, as above. Still a load of crap went backdoor…loading tray icons, program file icons…jeeeezzzz THIS WAS THE WAR. Two viruses before and nothing like this sucker…

WinPatrol wacked open first to stop it, then AFG Free caught some…Shut down and did the rest of the work in SafeMode.Went through Add/remove programs…removed ANYthing useless or suspicious….Ran AFG full scans and it kept catching crap.
Eventually, I was able to open System Restore, but it wouldn’t restore prior to Jan 4.

Went online today and downloaded MalwareBytes at download. com. It found another 30 or so, and while that was taking its 6 hour scan, AVG piped in three or four times MORE with more crap to vanquish to the vault.

It is 10pm on day FIVE and I believe I am healed. Amen.

By Melinda on Jan 8, 2010 | Reply

listen i just got through and was able to delete it so all i did was go through the search companion with the little dog lol on the start menu and type in internet security 2010 and then start deleten the shortcuts then all the other mine deleted and was able to get back into task manager and veverything so far

By Phil on Jan 17, 2010 | Reply

Can anyone help me with the automatically logging off when you try to login in. I tried running a spybot search and destroy and it supposedly caught 58 entries. But now it will not let me log on it keeps kicking me off. Any help would be gratlt appreciated.

By Nonidoc on Jan 17, 2010 | Reply

I have been helping a friend get this off of his computer. Now, we are at the recycle stage–logon will attempt and then logoff. Safemode does the same thing. What do we do?

By Debbie on Jan 18, 2010 | Reply

I have got the dreaded internet security 2010 thought i had finally got rid of it, but obviously havent and now everytime i try to log on it logs me out,cant even get on in safe mode..Any ideas please am desperate, it the kids computor and they driving me nuts. Will I have to start afresh and reload windows again or is there any other way.. I am a computor novice so go easy on me..Thanks

By chris on Jan 18, 2010 | Reply

I have the 2010 version and I can’t log on to windows in admin or run any manner of safe mode after running spybot s@d and removing what it found. I would rather not reformat the hard drive.Any ideas?

By POd on Jan 19, 2010 | Reply

Here is one for everyone out there. My desktop (using laptop for this) was infected with the lovely IS2010. After the many suggestions seen on the internet for Spyware Doctor and other “free” spyware removal tools, programs or whatever they’re called, I downloaded Spyware Doctor and ran a scan. It did in fact locate IS2010 along with other garbage and to my shock (sarcastic) in order to have it removed I have to pay…what happened to the “free” removal. Now that my computer is totally disabled I am beginning to think that the J-O’s that advertise their “free” removal tools, programs and such are the same tools that are creating the havoc in the first place. To the creator of spyware, malware and future ware’s not yet named I have four numbers for you to figure out…7625!

By Justin on Jan 24, 2010 | Reply

Hi guys,

I’ve also been infected. I have run both spyware doctor and malware bytes scans and removed what it identified, but I am still getting AXWIN Frame Window Errors. I can at least use the internet when I ignore those errors. I can also access task manager by using ctl + shift + esc; none of the processes that I’m supposed to delete are listed in task manager. I cannot get into safe mode. So now I don’t know what to do to get the unidentified remains of this virus off my computer.

Any suggestions? I am a total noob when it comes to this stuff. Thanks.

By danny on Jan 25, 2010 | Reply

Me too, totally exhasusted after fighting IS2010 for more than 5 days. I could not access task manager, internet explorer. Just wonder would you can advice how to tackle. Most important is that i could not recover my pst files from the hidden directory “local setting”. I reaally cannot afford to lost my emails before scrapping and reformat the whole disk.

By Evan on Jan 27, 2010 | Reply

I can’t find any of the files listed above.
Mine version’s called ‘Vista Internet Security 2010′, and it’s taken control of my original Vista Security Center… i.e. it’s switched Firewall and other things off, and demands that I ‘register’ my version of ‘Vista Internet Security 2010′ in order to unlock it.

I can’t do a system restore, I can’t access regedit. What’s one to do?

By Evan on Jan 27, 2010 | Reply

It’s not gone, trust me.

By ned on Jan 27, 2010 | Reply

WHAT worked for me.
Did CD-Rom WIN XPsp2 disk. Upon 1st boot on C:, As fast as I could, I used Task Manager to delete is2010.exe from folder: Program Files.

THEN, I ran Malware bytes. I still have work to do. I also somehow lost the letter designation to my data drive D:, Cannot read it but Bios can see it and it passed Dell Diags-full test!!!!!!!!.

By ned on Jan 27, 2010 | Reply

Why does the FCC do nothing? Communication over the Web triggers jurisdiction and they have the means to investigate and prosecute.

Commerce triggers Congressional jurisdiction. We as a people must organize to have these scams be the target of an entity that does not profit from it by either selling the Fix-it software or making the virus at the outset

By john on Jan 30, 2010 | Reply

Everyone… we see this all the time at work. Take the infected drive out and slave it to another machine. Open regedit, highlight HC_Local_Machine, click File, and select “Load Hive”. Navigate to C:\ WINDOWS\System32\Config. Double-click the software tab. It will prompt you for a name. I generally name it slave_software. It should now show up in Regedit. You can now navigate to HCLM\software\Microsoft\Windows\Current Version\Run and delete all rogue entries. Now, navigate to C: WINDOWS\temp on the slave drive, and delete everything within it. Next, open My Computer, and then choose Tools, and then Folder options. Make sure you enable the ability to view system files, hidden files, and Windows files. It will warn you about the Windows files. Ignore it and continue. Now, return back to the root of the slave drive. Click on Documents and Settings. You should see all the user profiles on the drive. For every user profile, you should navigate to documents and settings\*username*\local settings\temp and delete everything within it. Then navigate to documents and settings\*username*\local settings\temporary internet files\content.ie5 and delete all here as well. Then, navigate to documents and settings\*username*\application data and delete any rogue folders or files here as well. Be sure to look under Local Service and All Users too and repeat the above mentioned steps. Also these types of malware may try to inject their bogus versions of explore.exe and userinit.exe. You can copy them from the host machine to the slaved drive. explore.exe is found under C:\Windows and userinit is under C:\WINDOWS\System32.

By Clint K on Jan 31, 2010 | Reply

I just removed it on a Windows Vista computer, here’s how I did it:
CTRL+ALT+DEL to bring up the Task Manager
Stop the “av.exe” process.
Run “regedit.exe”
I think the AV thing pops up again. Go ahead and stop the “av.exe” process again in Task Manager.
In the registry editor, do a search for “av.exe”

The key that comes up will look something like:
“C:\Users\JohnDoe\appdata\av.exe” /Start “%1 *”

Or close to that (please bare with me, this is from memory.) Obviously instead of JohnDoe its whatever your username is.

Chop off the beginning part with av.exe and the start so that all is left is:
“%1 *” (or whatever it actually is)

Looks like what the av.exe is doing is running itself when you open an executable, but the %1 tells it what program you’re trying to start, so it will start it on its own (to fool you).

I had the av.exe in 2 locations in my registry. Be sure to continue fixing / searching until it finds all of them.

After that, I deleted “av.exe” from the appdata folder. Unfortunately it is attributed as a system and hidden file, so be sure your folder settings are set to show both. Or if you can’t stand Windows Explorer, run “cmd.exe” to open the command prompt.
When you see “C:\>”, type: “CD\Users\JohnDoe\Appdata”
Then type: “Attrib av.exe -sh”
The attrib removes the system and hidden values.
Then type: “erase av.exe”
Gets rid of it for good.

Don’t erase av.exe before fixing the registry – Windows might not be able to open any executables if you do it in the reverse order.

Hope that helps. Okay, now time to resume working on my Mac OSX Tiger where I don’t have these problems.

By jim on Feb 1, 2010 | Reply

kmac can you send me detailed instructions to get rid of is2010. Also let me know if I have to be in safe mode. My email is scott94@msn.com

Thanks jim Mc.

By Abdou on Feb 1, 2010 | Reply

yesterday my system was hit by this evil and with my respect to all the preceding solutions and trials, the solution I made to restore my clean system and get ride of this evil was so easy. Just I did the following:
- From Control Panel, select System and Maintenance.
- Then select Backup and restore center.
- select the last option which states “Use System restore to fix problems and undo changes to windows”.

From this point you can deal with system restore and return few days back.

It works fine now and got ride of it, I think. I hope you can try it and let me know your feed back. Thanks

By Jake on Feb 11, 2010 | Reply

Abdou!
You the Man!!
I was getting prepared to settle down for a few days of toil and trouble. Spybot didn’t find it. Windows Malicious Software Removal tool didn’t find it. I got on my laptop to look for ideas and read these post and thought… well I guess I’ll try that first.
BAM! System Restore did the trick!!!

By Shira on Feb 23, 2010 | Reply

Hi if anyone figures out how to get past the logging off automatically on XP can you please please please email me your solution at iluveminem_13@hotmail.com? I made this email address in middle school so please excuse it

Thanks!

By Cec on Feb 23, 2010 | Reply

Abdou – thank you for your solution! This worked perfectly and was so easy.

By Clint on Mar 5, 2010 | Reply

Clint,

I deleted the av.exe file from the appdata folder without cleaning the registry first. And sure enough, executables won’t open. Any idea how to get them to work again without reinstalling or system recovery?
Hate the jerks that create these viruses. Maybe someday the gov’t will get off their butts and help its consumers out with this…

D

By dennis on Mar 6, 2010 | Reply

Abdul – I was infected last night by the first stage of this malware. I happened on your solution this morning and tried it. It worked for me. Thank-you.

By Jye on Mar 15, 2010 | Reply

Abdou, my Control Panel doesn’t HAVE System and Maintenance. Were you using Vista?