Remove Internet Security 2010 Virus (Removal Guide) http://www.softsailor.com/how-to/13827-how-to-uninstall-remove-internet-security -2010-virus-removal-guide.html Posted on 13 December 2009 in How To, Windows How To Internet Security 2010 is yet another rogue anti-spyware that surfaced online. T he Internet Security 2010 rogue is also a bit of a virus, if you follow the stan dard definition. But the thing you need to know is that Internet Security 2010 w ill try to trick you into believing that your computer has serious security prob lems so that you buy the program. If you detect any of the symptoms we will talk about further, you should remove Internet Security 2010 as instructed below. Before we skip ahead to removing the Internet Security 2010 virus, let s talk a li ttle about what Internet Security 2010 does in and with your computer. First of all, Internet Security 2010 gets installed on your computer via malware and will be immediately set to start each time Windows loads. Along with the program, a number of Trojans will also get on your computer. Remove Internet Security 2010 Using The Guide Below After you computer got infected with the Internet Security 2010 virus (or series of Trojans), the next time Windows loads, you will get an error message stating that Worm.Win32.NetSky was detected on your computer. This is a fake message and you should not pay any attention to it, it will go away once you remove Internet Security 2010 from your computer. Then the Internet Security 2010 rogue will st art and perform a fake scan of your computer. The scan report will list a number of infections but when you try to remove them, you ll conveniently find out that yo u need to buy Internet Security first. Do not buy Internet Security 2010. If it got on your computer, you should use the instructions below to remove it from yo ur computer. The thing that makes Internet Security 2010 one of the worst of its kind is that one Trojan that comes with it blocks out certain applications. When this happen s, you will get a File is infected warning and a recommendation to activate your a ntivirus software (by that, the warning means that you should buy Internet Secur ity 2010. Don t do that just remove it using the removal guide below). Another Troj an that comes with Internet Security 2010 will instruct you to purchase a codec, called VSCoded Pro. This also a fake warning (and a scam) that will go away onc e you remove Internet Security 2010 from your computer. With the risk of becoming annoying, we will tell you again not to buy Internet S ecurity 2010. If you did purchase it however, you should contact your credit car d company as soon as possible. Ok, now that we ve told you what this virus and the Trojans that come with it do, it s time to remove Internet Security 2010 from your computer. Before that, you sh ould know that following closely each step is crucial. In addition, because you will be asked to close all applications and windows, it s a good idea to print out the removal guide first. Step 1: Go here and download Malwarebytes Anti-Malware for free. Save the file to your desktop. If Internet Security 2010 does not allow you to download anything , you should download the setup on another computer and use an USB stick or a CD /DVD to transfer the files needed. Remember to place the setup file on the deskt op.

Step 2: Click here to download the rkill.com file. Once the download is complete , run it. The rkill.com file will make sure the Internet Security 2010 will be c losed for good so it does not interfere with the removal process. Step 3: Close all open applications and windows. You now should be on the deskto p. Step 4: Run the Malwarebytes Anti-Malware setup from the desktop.

Step 5: Go with the default settings during the install. CRUCIAL: Make sure you tell the software to automatically update itself (there s a box you need to check during the install to make that happen). In addition, make sure you tell MBAM to automatically launch itself once the install and update processes are complete. Step 6: When Malwarebytes Anti-Malware loads, go to the Scanner screen, select form Quick Scan and then click the Scan button. Step 7: When the scan is complete, press the Show Results button under the main canner tab. Step 8: Check all the detected infections (so you remove both Internet Security 2010 and all related Trojans, as well as any other malware detected). Step 9: When the removal process is complete, a log of the scan will be displaye d in a Notepad window. You now have successfully removed Internet Security 2010, all related Trojans and any other infections detected by Malwarebytes Anti-Malwa re. Subscribe by RSS or enter your email for more News, Reviews and Tips & tricks: Per S

Related Articles How To Remove / Uninstall Windows Active Security Virus (Removal Guide) How To Remove / Uninstall Personal Security Virus (Removal Guide) How To Remove / Uninstall Volcano Security Suite Virus (Removal Guide) How To Remove / Uninstall Conflicker.B Trojan And Antivirus Pro 2010 Virus (Remo val Guide) How To Uninstall / Remove System Adware Scanner 2010 Virus (Removal Guide) How To Uninstall / Remove Malware Defense Virus (Removal Guide) This post was written by: Mihai Andrici - who has written 419 posts on SoftSailor.

Contact the author 306 Responses to How To Uninstall / Remove Internet Security 2010 Virus (Removal Guide) brontok says: December 13, 2009 at 10:39 pm thanks! you just save my computer!!

it s works Reply Jim R says: January 16, 2010 at 9:15 pm Problem with fix, I have experienced this three times, now out of 7 removals. If the winlogin32.exe is infected, The fix will not work and you will have to relo ad windows over itself or do a full reload. My experience, download mbam and run rkill, but after mbam has been updated, run mbam on the windows folder first, i f winlogin32.exe is not infected then proceed with as instructed earlier. But if winlogin32 is infected with rogue trojan, back up and reload. Reply J says: January 30, 2010 at 4:45 am Winlogon32 is not even a Windows file, if it s there you infected. This file shoul d not be there period. The correct file is winlogon.exe. The virus replaces the userinit part of the OS with it s own. In the registry unde r HCLM\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\USERINIT is where th e virus makes the change from C:\Windows\System32\userinit.exe to winlogon32.exe . And no you don t need to reload if you follow the instructions to the letter Too m any people like you who think they know computers but really don t give out wrong in formation. I am an IT systems admin so I m not just a wanna be geek. Reply Jin says: January 31, 2010 at 11:32 pm mine is an entirely different thing, called smss32.exe, and once again the corre ct windows file is just smss.exe, no numbers. You really need to hunt down these malware bits and pieces, because they re smart enough to change names on you Reply kim says: February 2, 2010 at 10:15 am combo fix works excellent on this virus. i downloaded it to a usb and added a da sh between combo and fix to fool the virus then ran it. cleared it off. this is when it has gotten in there fairly deep and morphed. i have also been able to go into safe mode and take it out thru add and remove programs if it hasn t been on long. another solution i used was to find it in c: under programs and drag it to the desktop so that i can delete it, you may have to change it s name. Reply Wanda says: February 17, 2010 at 9:13 am Not only is Internet Security 2010 the virus itself, after purchasing it with a credit card, within 10 days my credit card was hacked into and used for purchase s totaling well over $1200. Reply Space_Poet says: December 14, 2009 at 10:40 am This is not working for me. I get the rkill to program to work (after several tr ies) which I got to say is a great program. But the Malwarebytes is not updating (i believe the virus is stopping it from contacting the website, it s doing this w ith all the others I have tried, superantispyware and spyware doctor, which i wa s told also removes this biotch). Very nasty virus/malware. Will try to post lat er when I find out the solution. People who make these things need to be hunted down and skinned.

Reply David says: December 19, 2009 at 6:32 am I got the Malwarebyte update to work after turning off AVG Security Shield. It l ooks like most here were using AVG. Is this virus something AVG is particularly susceptible too? I copied rkill.exe and the mbam setup from a second drive and OS before running them in the infected OS. It seems to have worked great. Thanks so much Soft Sail or and Malwarebyte. Reply Zfree63 says: December 26, 2009 at 4:02 pm My computer did the same thing, so after about 10 launches of rkill it finally s hut down Internet Security 2010. I did a system restore to the day before, downl oaded the malwarebytes again, and it worked. Good Luck! Reply kellah says: December 14, 2009 I got this 2 days arebytes scan (it e. I need advice!

at 1:05 pm in a row. However, on the 2nd day, I couldn t even run the malew said it couldn t find it), and now cannot even start in safe mod Am I totally screwed?

Reply Scotty says: December 14, 2009 at 1:20 pm Yeah, my whole system is fried. It won t let the computer finish a start cycle. I don t see my desktop. I can t access anything but the damn IS 2010. It even disabled the task manager. What should I do? its only been on my computer a few days and I m pissed. Anyone have the address of one of these engineers who built it? Reply MovementJR says: December 25, 2009 at 4:42 am Put this code in run and you should be able to use Task manager. REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v Disab leTaskMgr /t REG_DWORD /d 0 /f After just follow the steps above hope this helps Reply 0r1g1n says: January 8, 2010 at 3:54 pm I hate to say it but you need a reformat. Its around 100 to 200 depending on whe re you live. The best defense is probibly to just shut off the internet to your computer straight out so it cant install the worse of the stuff. It s not a huge f ile so it has to download more i m sure. I am trying to get it off without third p arty programs but i cant get it off the start up its just to far a long. Reply Mic says: January 16, 2010 at 8:04 pm This forum was extremely helpful, but I ran into the same problems as others wit h the login/logoff loop that occurs if the machine gets restarted before it is t

ruly clean. We were unable to get past the user login in any way using any of the e mode s, last known, normal, any of them. It would not, even with Microsoft on th e phone (which they did without charge) allow me past the login screen. Finally it was determined between me and the MS tech that I would have to use my origina l five year old xp professional reinstallation disk that came with the computer and reinstall the os. Here are the steps we took, as I remember them. I will use extreme detail for th ose out there, like me, who haven t had to reinstall an os before, especially in a situation like this. 1. turn on the computer and put the reinstallation disk in the cd rom. 2.Manally restart the computer, hit F8 several times when the logo screen comes up. I think you can also use F12 at this point, either one will get you to syste m set up. On my computer I had to go into setup, choose boot sequence, and disab le all boot options except boot from cd rom. Hit enter, hit esc, choos save chan ges and exit. 3. Manually restart the computer w/xp disk in cd-rom drive. When machine restart s it hopefully will say hit any key to boot from cd at which time you hit any key. 4. Windows set up starts. You CANNOT install to the same file folder (/WINDOWS) that the former Windows XP OS was in. Choose the option(s) that take you to Insta ll to:/windows and use the backspace key to remove windows and then type winxp s o that the line reads: :/winxp and hit enter. 5. Follow the the rest of the prompts/instructions until the installation finish es and the machine will reboot automatically. In my case, I only set it up for o ne user this time (figuring it would simplify and I can set up other users later if I want to) and it went directly to the new desk top. 6. Here is where things get interesting. So now we have two OS systems on the co mputer. The new installation is, of course, extremely outdated, we have no insta lled drivers or programs in the startup menu. If we stick with this installation , we will need to update EVERYTHING, reinstall about sixty programs, and reinsta ll all the drivers for printers, video cards I had to download and install a new d river for our network card, the computer couldn t even see the network card itself , much less the driver. So of course I couldn t even get online. Using my other co mputer I downloaded the card s driver and installed it using the cd-rom drive, and then got back online. 7. Microsoft doesn t seem to be very aware of this particular piece of malware, as the tech claimed that reinstalling my OS completely eliminated the malware and that it no longer existed on the computer. I will be letting him know at 6 in th e morning when he is scheduled to do a call back that this isn t the case. 8.At this point, since I could at least get online, I downloaded malwarebytes an d ran a full scan. It came up with 23 IS2010 rogue software issues. I let Malwar ebytes remove and let it restart my computer. Then it scared me because when it started to reboot I hit the black screen message Hit F1 to attempt reboot again o r Hit F12 to enter SetUp. I realized that it might still be trying to reboot from the cd rom drive since my boot sequence was set for it, so I went into F12 Set Up, changed the Boot Sequence so that it could boot from the C drive, hit enter, hit esc, manually restarted, and the computer booted to the new installation of XP and went directly to the desktop again. 9. Downloaded RKILL and ran it. It was only on the screen briefly, so I don t know if it found anything. 10. As per the instructions on this site, uninstalled Malwarebytes, downloaded i t again and reinstalled and am in the process of running the full scan yet again . We have hade SOME success with the process, but we are still working on some of the issues.

saf

One question we have now, and so far I don t think Microsoft knows the answer beca use they don t really know this virus CAN WE, ONCE WE THINK WE HAVE THE VIRUS COMPLET

ELY REMOVED, GO BACK TO THE OS (I THINK IT IS STILL THERE IN ITS ORIGINAL WINDOW S FOLDER) and if we can go back to that, would we delete the new os file from th e computer? Will this eliminate the need to reinstall all our drivers and progra ms? They are all still on the computer, but installed on the previously infected OS system. This is where we are at the moment. Maybe some of it will help someone else, and maybe someone can help us finish up with the least amount of hair pulling Reply awibs says: January 28, 2010 at 4:55 pm I had the same problem/process, but fortunately one of my best friends is a priv ate in-home computer repair guy, so I was able to do it without having to deal w ith microsoft. Yes, I had to use a windows cd to repair the installation. this was fairly simpl e but he made no false pretense that it would fix everything other than the giant hole left by my violent command-line deleting of major virus parts like doing ca ncer surgery with a machete. after it was fixed, he suggested i update (in normal mode) and run spybot, avg, and malwarebytes in safe mode. they have all turned up more tracks and if they d o not finish elminating everything i ll post more tomorrow with what we tried next Reply DAVID says: February 16, 2010 at 3:55 pm I DONT HAVE MY INSTALLAYTION CD ANY SUGGESTIONS Reply mojo says: January 16, 2010 at 10:37 am Same thing happened to me to fix it I went into safe mode by repeatedly pressing f8 at start up.Once the computer booted into safe mode I searched for internet security 2010 on my hard drive, found it and deleted the file as easy as that. f or some reason when you try to delete it in normal mode it doesn t allow because i t says this program is being used by another program . Reply HA says: January 19, 2010 at 5:49 am Got this thing today, SuperAntispyware detected it, ran scan, deleted the trojan s, traced the folder in Program Files, would not let me delete. Looked at proper ties, said read only, unchecked tick box and voila, deleted the crappy thing. St ill no task manager, ran Rkill, and one hour later, looking good. I hope that is the bugger off here. Reply Spider says: December 14, 2009 at 6:29 pm I used your fix the first day I was violated by Internet Security 2010 and it wo rked great. Thanks for the help. Reply Mari says: December 15, 2009 at 4:02 am I have windows xp professional. Unfortunately, the computer is used by more the one. I saw the original problem and ran AVG when I had to leave the computer. An other person unwittingly failed to finish AVG and opened the trojan. Now I can n

ot get past the user screen even in safe mode. I have forgotten the administrtor password. Any help as to how I can get in and run a removal program? At the use r screen once the password is typed in, it starts and then terminates by saving the settings. Reply Dave Sackreiter says: December 15, 2009 at 6:22 am I was infected by this nasty thing last Friday ..I turned on my computer last nigh t and couldn t get past the logon. It kept shutting the system down. I performed a system recovery that seems to have removed the virus/trojans. Only problem, I n ow have to rebuild all my files and programs. Reply thomas says: December 29, 2009 at 9:59 am doing a system restore will not remove it, you have to use the malware removal t ool, i caught this son of a bitch 3 months ago, i have restored my computer back to factory settings 5 times, the damn thing kept coming back, use the malware r emoval tool and you should be safe, my only problem is that i have my computer b ack i can access everything but my google chrome and internet explorer no longer connect to the internet, i installed aol and it worked but i cant use my other browsers, so i guess i still need help Reply Sarah says: January 12, 2010 at 2:19 pm I can t get past the logon either and it keeps shutting down. How did you perform a system recovery program when you can t get past the logon page? I could really u se the help!!!! Reply steve says: December 15, 2009 at 7:37 am I can t get this fix to work. Anyone come up with any other options? Reply rich says: December 15, 2009 at 8:21 am this will not work for me either. rkill.com is blocked and anti-malware cannot u pdate. also cannot reboot in Safe Mode? Any other solutions/ideas? Reply Dmitri says: December 26, 2009 at 6:39 pm Use Ccleaner.exe to clean up your computer, and go to the tools option startup i tems and delete the internet security 2010 file disable everything else that you do not recognize. Then download and install sdfix.exe . You will have to reboot in safe mode to run it hold down the f8 key during boot. Next run the malware b ytes scan as the previous intructions suggest. You fill find references to inter net security 2010 in your program files also. Run Malware bytes multiple times. Reply Mut says: December 15, 2009 at 10:43 am This hit me yesterday. IS 2010 disabled my anti-virus software (AVG) and my task manager. It wouldn t let me do a system restore either. I had to redownload AVG a nd have it launch into scan immediately. It found all the files and trojans and healed/removed them but then it took me to the sign on screen after the restart.

I couldn t remember my password to save my life having not used it in 3 years. At the end of it all my hard drive was wiped clean and I now have rebuild by progr ams and files. Reply Jayt says: January 9, 2010 at 9:07 am I m not even able to run safe mode with command prompt, how did u format your ha rd drive, I tried to use windows xp cd but it s not letting it even run. Reply don says: December 15, 2009 at 12:59 pm I used the program and it seemed to work until it came to the end and asked for me tobuy the program before it would block the files. Is this the way it is supp ose to work? Nothing was said about this Reply Special K says: December 15, 2009 at 4:01 pm This seemed to work for me. It got me back into my system anyhow. Not sure if th ere is any residual damage. That is a pretty nasty virus. Thanks softsailor. I t ip my imaginary hat to you. Reply 2010VIctem says: December 15, 2009 at 8:56 pm HEY if the rkill file doesnt work and you get a pop-up saying its infected WHile y ou see that pop-up(without hitting ok) run the rkill program again .. This is an e xcellent piece of software thanks for making it. Reply KUGuru3 says: January 6, 2010 at 1:28 am I worked really hard and tried many websites, but none of them worked. I even tr ied this one but the rkill wouldn t download, and now, I am so glad 2010Victem wro te this because this singlehandedly RID my computer of IS 2010. Thank you 2010Vi ctem and SoftSailor Reply Beth says: January 7, 2010 at 7:15 pm Thank you SO much for the rkill tip. I don t know if the removal worked yet, since I m in the process of scanning but you got rkill to work for me, so I m optimistic. I v e been fighting this virus all week and really hope this is the end. Reply marcal says: January 16, 2010 at 2:40 pm Thanks for this little tidbit. Problem seems to be that rkill launches a command prompt, but cmd.exe is blocked by IS2010. This trick worked. Note to article au thor: add this advice, otherwise rkill is rather useless. Reply KK says: January 16, 2010 at 11:00 pm This! My problem was that I couldn t run rkill but if you open it again while that message is still showing it works. Reply

paul says: December 16, 2009 at 8:28 am This was the best fix for the removal of Internet Security 2010 Virus the only t hing i had to get past was if the rkill file doesnt work and you get a pop-up saying its infected While you see that pop-up(without hitting ok) run the rkill program again .. This is an excellent piece of software thanks for making it. Read more: http://www.softsailor.com/how-to/13827-how-to-uninstall-remove-intern et-security-2010-virus-removal-guide.html#ixzz0ZrzTcbin Reply Lauren says: December 16, 2009 at 2:36 pm I got this rotten thing on my pc last nite, 12/15. I had clicked on an AOL story and it wrecked havoc on my pc. I tried your removal method and it seems to have done the trick. I also went to my computer drive program files and deleted it t here, and the desktop icon and program in my start menu. So far no problems toda y. Everything seems to running normally now. The rkill and malwarebytes were the solution. Thanks so much for posting the method and steps. Reply Surfdog says: December 16, 2009 at 5:12 pm Followed the instructions and everything seems back to normal. Had to run roadki ll a couple of times. Thanks Reply Frank says: December 17, 2009 at 8:46 am Thank you thank you for showing me how to get rid of this. I followed the instru ctions and it seems to have worked perfectly. Thanks again Reply Mark Johnson says: December 17, 2009 at 8:49 am It worked for me. Many thanks!! Reply Hans Wagenaar says: December 17, 2009 at 3:40 pm I wish I would have found you sooner. I bought the program and figured there was something wrong when I couldn t find it to rescan my system. I have called the cr edit card company already and it has not posted yet. I thought it was an extensi on of AVG that I just didn t have all the updated software to remove something new . Learned the hard way. Reply Mark says: December 17, 2009 at 8:01 pm Hey, I just fixed this problem with, of all things, Microsoft s Malicious Software Removal Tool. Try http://www.microsoft.com/security/malwareremove/default.aspx and click on the Windows Live Safety Scanner. It ran for a long time, but it fou nd and removed Fakeinit and I m back in business! Good Luck, Mark

Reply Jason says: February 20, 2010 at 11:46 am This 100% worked! Try this link http://www.microsoft.com/security/malwareremove/ default.aspx. Completely removed everything! Reply Bill says: December 18, 2009 at 3:55 pm Thanks to the genius of ,Mihai Andrici,I can go back to re-learning how to walk and Kite Board with my prosthetics,instead of figuring out how rid my computer o f this, I S 2010?.Thanks also to the programmers of rkill and MalwareBytes,seams as it was a collective effort.Personally, I had no problem with up-grading to Ma lware Full Version,after they destroyed that nasty LiL bug for free and didn t ask f or any money. F _ _ _ wanted $150 to get rid of this virus and they wouldn t guarantee it would b e intact when finished. All my files are intact,it just took several tries. THANKS : BILL Reply mark williams says: December 20, 2009 at 9:47 pm contracted the virus on another computer it has windows xp so now have the dread ed internet security 2010 on it but caqnt get pastt the sign in screen, tried to get into safe mode but it will let the computer boot up in safe mode either jus t goes to the sign in screen please help and info on how to get past the sign in screen? Reply IT-man says: December 21, 2009 at 2:26 am Hi, Awesome ! It helped Thanks !!! best regards Reply bryan says: December 21, 2009 at 6:52 am hee i am a tech support from a duth speaking country cald suriname and this is t he best way i fond to remove this evil virus soo thx voor this you guys are kow in my top 5 advies page list Reply Alice says: December 21, 2009 at 8:13 am Hi! I m going to see Eddie Izzard today. So excited! Hope you are well. Merry christmas, and long live mystery google Reply John L says: December 21, 2009 at 12:07 pm Another one that cannot get the computer to boot-up even in safe mode. It tries to load and gets caught in an endless logging-in, logging-off cycle. Anything that can be done prior to booting windows to remedy this? This thing is nasty Reply

Marti says: January 20, 2010 at 12:04 pm I was reading how your computer won t boot-up. I am now having the same problem, a nd can t find any help. Did you get your computer fixed and if so, how? I hate to reinstall as I have alot of pictures that I have not had a chance to save yet. I got this nasty thing just a few days or so ago. Don t know what to do now. Any id eas? Reply Tom says: January 24, 2010 at 12:30 am I had the same problem, check your computer s bios that both the booting sequence AND the way your computer sees its drives is correct (get someone with tech expe rience to help you) The error code on this I believe is 24 (if you watch closely you may very briefly see the blue screen of death as your computer reboots) Reply Monte Montgomery says: December 21, 2009 at 5:18 pm Thanks a million! Your fix worked, although it took me a few tries. Problem was that I had an old (two months, anyway) version of malwarebytes. After freezing the virus with RKILL, I was able to download a newer version of MWB. Zap! The next time I ran a quick scan, MWB found and killed an extra half-dozen infections pre sumably the same ones that were evading my earlier version of MWB. U R my hero Monte, Washington DC Reply Daniel says: December 21, 2009 at 7:53 pm Hope it works, am doing it now. The rkill.com file didn t work for me atleast I do n t think. Anyways, another way this virus messes with your computer is by messing up your google searches. For example, if I searched CNN, when I click on a link ,it would redirect me to some other weird site. It does this to prevent a user f inding a solution to the problem. If you need to get to a site, type the address into the browser bar how i got to download.com to download malwarebytes antimal ware. Anyways, thanx and I hope it works. Also, if you have this virus DO NOT RE START OR TURN OFF YOUR COMPUTER!!!!!!!!!!!!!!!!!!!!, as I hear how some people c ant get past the login screen. maybe im overreacting, but better safe than sorry Reply desperate says: December 22, 2009 at 12:14 pm anyone ever find a solution to the eternal windows log on/log off cycle that thi s virus creates? can t do anything. help! Reply Jay says: January 10, 2010 at 12:17 pm Try to change your bios setting. try to boot first from cd, network, floppy driv e, and then Hard drive. and if u have windows cd use that. it took me several tr y then after I got it into the windows repair option. good luck

Reply T Lang says: December 22, 2009 at 7:07 pm I have done the unthinkable, i ve restarted the computer because it would not let me do anything. It just froze and did not proceed from that point. O yeah the ol d alt-cntrl-del didn t work either because the task manager button was rendered in operable as well. Once the computer was restarted it allowed me to log on but th ats it. I am unable to access any files. This a computer that is on a network at work so the sooner i can get them up and running the better off it will be for everyone. Is there any other remedies for fixing the issue of not being able to go any further than the log on screen? Reply dammit says: December 22, 2009 at 8:15 pm Any fixes for the computer not being able to boot up? I ve tried safe mode, but th e computer automatically shuts off within 10-15 seconds of powering it on regard less of what i ve tried. Reply Joel says: December 22, 2009 at 8:43 pm I contracted this virus on Friday the 18th of December I could not get the rkill .com to run effectively. Still plagued by this evil thing. I am able to turn com puter on & off though. Any updates to the rkill? Reply pkp says: December 22, 2009 at 9:31 pm hello,my laptop got infected on 11th dec and since then i am trying to get it fi xed with no success so far, i could delete the registry files and C:/ drive file s created by the virus, but since then i am unable to see the START button, window s ctrl-c & ctrl-v does not work, i tried running the restore exe but it did not do anything thus i could not even restored to 10th dec setting. still researchin g as what can be done next, my laptops boots up, shows me the desktop but no bot tom task bar. any ideas .rkill did not work though i tried many a times, Malwareby tes Anti-Malware did not run succesfully as it gives an error too. Reply Dumb says: December 23, 2009 at 6:04 am Worked just fine, downloaded newest version of malwarebytes on laptop and copied it to the infected computer.. Doing some more scans just in case. But in short: Good guide, cleaning InternetSecurity 2010 from my other computer wasn t hard at all after I saw this guide. Reply Bob in Omaha says: December 23, 2009 at 6:30 pm I finally found the solution to the logging on/loggin off problem here: http://w ww.bizzntech.com/2008/06/06/how-to-fix-the-automatic-log-off-of-windows-while-lo gging-in Just in case the linked page gets removed, the instructions are: 1. You need to connect the infected computer to a network. Make sure that there is one computer in the network which doesn t suffer from this problem. Now, switch on both of the computers, i.e. the infected and the working computer. 2. From the working computer, Go to Start> Run, type regedit.exe and hit enter. This will launch the registry editor.

3. Go to File> Connect Network Registry, by using this infected computer s name or IP address. 4. Locate the following entry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ 5. In this entry there is a key named userinit, double click on the key and set its value to C:\WINDOWS\System32\userinit.exe, If the problem still persists then you need to run a repair setup. Reply John L says: December 28, 2009 at 1:56 pm Bob Thanks for this tip. It is telling me access is denied when I try and do thi s, though. Any ideas? Reply Herman says: December 29, 2009 at 2:40 pm Bob, this is a great post required to fix this cylcing problem that many of seem to be having. However, I cannot get my clean, un-infected computer which is net worked wirelessly to my infected computer to be able to access the other compute r s registry over the network. Can you tell us more about what parameters must be correct to allow this? Must t he computers be wired together through a router, or directly connected to each o ther through Cat 5 cable, or is a wireless router good enough? If the infected PC is on, and on the logon screen asking me which account to log on with (and then immediatley log off) is being in this state allow it to be ac cessed by the other computer s registry editor? I cannot find out the infected computer s IP address, but I am pretty sure I know the computer name. Thanks Reply skydivr420 says: December 23, 2009 at 8:30 pm I have found that the simplest solution does not involve the antivirus programs mentioned, but rather your computer s system restore function which is usually disab led until you run the rkill.com program. (if you get a disabled notice for THIS program then don t click ok but open rkill.com AGAIN and it should run) Once rkill .com has killed the malicious processes that are wreaking havok with your system , then you can run system restore (as it is no longer disabled) and simply resto re your system to a date prior to noticing the rogue program. This is the second one of these rogue programs that my step-kids have naively infected our compute r with so I am becoming rather proficient at eliminating these evil programs! Pr ior to using this method I had tried every other suggested way of deleting the p rograms spending HOURS trying to do so, and had difficulties with them all! I ca n now kill and eliminate the rogue programs in 5 minutes, start to finsih, with this method without downloading antivirus software and running a half hour scan th at may or may not detect and remove all of the rogue program s components. I hope this helps! BTW I hope the evil fuckers behind these programs are robbed of everyt hing they own, die a horrible death, and burn in hell TRULY! They are scammers, th ieves, and con-men who are trying to steal the hard earned money of innocent vic tims, and for this they deserve nothing less!

Reply Newbie says: December 24, 2009 at 10:12 am I had to run rkill several times but it finally stopped the rogue program, but I was unable to get Mal to run. Also internet connection was blocked and couldn t d ownload update anyways. However, Skydivr s system restore advice worked. Thanks for the help Reply Allen Abyss says: January 28, 2010 at 4:52 pm I struggled all day to remove this infestation. I even snapped at my girlfriend a few times. I ran Rkill to stop the program from functioning then I did a system restore to 3 days back. Seems to be working fine. Thank you for your help. Reply haansgruber says: January 22, 2010 at 4:39 am If you use windoZ, you are getting everything you deserve. I have linux and mac computers. They are all running fine. I had a friend bring one of these to me fo r repair. The logon cycle seems to be the killer. I (being a unix user) can figu re this out. Although I much prefer to use a computer for something useful on a stable platform. caveat emptor peace Reply dammit says: December 23, 2009 at 8:43 pm Still cant fix the boot cycling. The fix mentioned above is difficult because we do not know the computers IP or even sure about the name. Any ideas or more det ails? Reply Lexus says: December 24, 2009 at 11:26 am thanks for putting this up i feel much better now that im not the only one you s aved my life i can t get that stupid desktop screen out that say my computer is in fected Reply asuche03 says: December 26, 2009 at 7:49 am I just got hit by Internet Security 2010 this morning. I was having trouble gett ing both malwarebytes and rkill to run. The software seemed to block them no mat ter what approach I tried. I finally tried this .and it worked. Boot to safe mode. The virus warning will sti ll pop up. Run rkill once and the warning will pop up. DO NOT PRESS OK. Run rkil l again and it will disable IS2010. Then run malwarebytes. Worked for me. Reply CK says: . let the buyer beware!

December 27, 2009 at 5:08 pm Help! When I tried to download, the error code 732 (12007,0) came up. What do I do now? Reply Joe says: December 28, 2009 at 2:09 am I LOVE YOU!! thanks a lot! Reply CL says: December 28, 2009 at 4:15 am Not sure if this is of use to anyone? I caught this yesterday via facebook and i t disabled Norton and generally stuffed my computer with pop ups, I am a total i gnoramus with computers but researched a few forums and in the end did this syst em restore to a few days ago then I downloaded spy bot search and destroy which is free and also Avast anti virus free download which had worked for others, aft er running the spybot today the popups dissappeared, the Avast is still scanning but my computer now seems to work normally and Norton is now restored, if I had seen this site first I might have tried this way but what I have done so far se ems to have worked. I totally agree these b . that write these things should be ski nned alive! Reply rasto says: December 28, 2009 at 8:35 am it works! thx Reply Donna says: December 28, 2009 at 12:01 pm Internet security 23010 virus-Stuck!!!! HELP ME!!anyone ever find a solution to the eternal windows log on/log off cycle that this virus creates? I do not have any icons on desktop or the start button on the computer. Reply Blobous says: December 28, 2009 at 3:31 pm The only way I could fully remove this was to do a complete OS reinstall. Even w hen scans say it s clean, the pc crawls. Reply Ayman says: December 28, 2009 at 7:21 pm guys check this link to remove internet security 2010 virus, it is explained in more details with step by step process, hope it will help u as it helped me to r emove the virus http://www.bleepingcomputer.com/virus-removal/remove-internet-security-2010 Reply Lindsey says: December 29, 2009 at 8:28 am Just wanted to say THANK YOU!!!! A few months ago I previously had this virus on my computer and paid a kid $80 to come to my house for 2 hours to fix it, and t hen got it again this past weekend. Using your site and instructions I was able to fix it myself (mucho self gratification) and save $$!!!! THANKS!!!! Reply

GrantM855 says: December 29, 2009 at 12:08 pm Cheers for this bud; saved laptop from being wrecked and work finding out haha Reply Teky says: December 29, 2009 at 1:32 pm I am working on it right now. Running the rkill and it says Terminating known malware processes, Plase be patient It has been 20 minutes and still says the same. Is it normal? Reply Chris says: December 29, 2009 at 3:43 pm It works! God bless you! Reply CJ says: December 29, 2009 at 8:28 pm I used the link that Ayman posted because the virus was deleting the Malwarebyte s exe file making it unusable. Thanks for the original post and the updates, lif esavers. Reply David says: December 29, 2009 at 4:25 pm This link will tell you all you need to know about getting rid of this scourge. It details some important work arounds that I did not see on this or other sites . http://www.bleepingcomputer.com/virus-removal/remove-internet-security-2010 Reply Said_Morocco says: December 29, 2009 at 7:45 pm Those who have problems getting beyond log on or are having trouble getting on s afe mode and accessing windows due to IS2010 go here: Make sure you follow instructions promptly. This will get you to where you can use your antivirus to clean up your PC. Read Everything: http://thinkinginpixels.com/quick-fixes/fix-windows-xp-log-onlog-off-loop/5/ Good LucK! Reply mooshi says: December 29, 2009 at 11:59 pm ahh you guys are all love >:D i tried several ways of solving my problem before i found Ayman s link most efficient. comp working beautifully now Reply Justus says: January 3, 2010 at 1:32 pm Followed the guide above and it worked perfectly. Installed Microsoft Security Es sentials and no virus found. Computer is running great, performance CPU usage at

0-3% dormant. Kudos to the website here for helping us combat this crap! Reply Julz says: December 30, 2009 at 2:53 am I found a simple way to get rid of it.. Go to start then there should be search, open it. on the side click all files and folders. then type IS2010? into the first box then click search. Wait until the search is done. you should have about 2 results The Right click the first reasult and click open containing folder. when the folder opens delete the things inside the folder. Repeat this with the other results! I hope this works for you it worked for me. Reply John says: December 30, 2009 at 12:03 pm i did what u said but i couldnt deleted the folder that had the IS2010 icon on i t. it says Cannot Delete IS2010: It is being used by another person or program. C lose any programs that might be using this file or try again later. What do i do now? Reply Tom says: December 31, 2009 at 7:52 am Delete the files in safe mode, worked for me! Reply Muriel says: January 3, 2010 at 1:48 am I think I messed up. Can anyone tell me which folder the second file is in when you do a search? I tried every method here (and more) and finally resorted to a program that dele tes files when you reboot (my daughter s computer would not start in safe mode). W hile it deleted the 2 files that come up when you search (because I told it to) I m wondering if I messed up. I only noticed after I deleted the files that the wo rding in how to remove this is to delete all the files in the 2 folders and I di dn t delete everything in the second folder. I m hoping this makes sense. The reason I think I sand times better it o download the virus ng out of the second messed up is because even though now her computer is a thou s not completely removed. It seems like it s trying to get me t again with 2 warning messages. Should I have taken everythi folder instead of just deleting the 1 file that came up?

Reply michael says: January 4, 2010 at 8:49 pm what did u do after you u deleted the files Reply Christine says: December 30, 2009 at 7:06 am Wow thank you so much. After about a week of trying to figure out how to remove internet security 2010 i finally came across this site and in two simple downloa ds it is now off of my computer.,.however my desktop background is still messed up (But hey i can live with that) thanks again!

Reply Debb says: December 30, 2009 at 9:44 am After removing this virus, I noticed a problem with being able to open pdf files .. is there a repair for damaged or altered files after removing IS2010? Reply justin says: December 30, 2009 at 10:00 pm the virus wont even let me open the internet, and when i try to kill the process it has the file is infected on the taskmgr so i cant do that,plus wheni try to delete it, it tells me that it is being used by another program. PLEASE HELP! Reply Samantha says: December 30, 2009 at 10:36 pm This fucking Internet security thing won t let me open my Internet. I m doing this f rom my iPod. Help?!?!?!? Also how did my computer get it? Reply Rodney says: January 8, 2010 at 5:39 pm If you re like me, I got infected via a bug in Adobe Reader when I downloaded an i nfected pdf. Fortunately, I had Zone Alarm running and was able to stop it before it had comp letely installed itself. I allow only very few programs to access the Internet w ithout explicit permission (and unless the program has a damn good reason the an swer is no.) Being my web access was not blocked I was able to surf around a bit and find som e good advices on how to handle the problem. I also knew that I didn t want to reb oot my computer at that point. Here s my advice on handling it. If your still logged on to the computer and have the popup saying the file is in fected, first don t close the popup.

Go to the system home directory and remove as many of the infection related file s as you can. There will be several that you won t be able to delete, as they corr espond to running programs. The virus disables your task manager, so you can t kill the programs. But you can re-enable the task manager by editing the Registry. Regedit HKEY_CURRENT_USER/Software/Microsoft/Windows/Policies to remove subkeys that restrict access to task manager & other programs. I removed them all. Now try again to open the task manager and kill the virus programs. The rkill th at people mention should work as well. When you get the virus programs killed off, delete the files in the system directory that you weren t able to delete before. There are several other registry settings that need to be updated as well. Most importantly an entry under

HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Run that would rest art the trojan upon reboot. The other thing that quickly informed me something was wrong was that Task Manag er stopped working. I also always keep this running. Reply Rodney says: January 8, 2010 at 5:58 pm Oh one more important registry setting (the virus sets this to winlogon86.exe, i believe) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ In this entry there is a key named userinit, double click on the key and set its value to C:\WINDOWS\System32\userinit.exe, Reply Sam says: December 31, 2009 at 11:10 am I did everything you said but sometimes when I restart my computer it comes back and other times it does not. Also is there anything I can do about the backgrou nd? Reply Bill 3 says: December 31, 2009 at 4:27 pm What Is The Red X At The Side Of The Screen Mean???? Need Help Reply Bez says: December 31, 2009 at 7:37 pm I had to tag this SOB with multiple anti-malware programs. The rkill file provid ed is a great way to stun it and I had to use it multiple times during one scan. I had to scan it multiple times with different products. The Malwarebytes did n ot work the first time. To get it to work I had to hit the IS2010 (which comes w ith a whole bunch of other dirty whore-like stds) with SUPERanti-spyware. I had to watch it until the virus count maxed out and then watch the pc freeze. Then r e-boot and hit it again with the Superanti-spyware. Once it hit what I thought w as the max, I ended the scan, had those viruses that were found deleted. Then re -booted and hit it again with the Superranti-spyware (hitting the rkill at the b eginning and once more when things slowed down). Then re-booted and ran the Male warebytes. Then rebooted and hit it with PC doctor. Then re-booted and the AVAST program could catch all the hidden viruses that were being blocked. Everything except the PC doctor is free. Good luck, and if you find the designer of IS2010 p ost his address on the internet. Reply jimmy says: December 31, 2009 at 9:15 pm the damn thing completely fried my computer. i cant even boot a new windows disk . can someone help me reload windows. start over fresh/ Reply Willis says: December 31, 2009 at 10:40 pm if you have mcafee, does that do anything? and how can i be sure that some asshole won t put another virus on malwarebytes ant i malware if i were to download it? it s like the hottest chick in school (usually a slut). how can i trust it?

Reply i need help says: January 1, 2010 at 4:37 am i deleted the internet security program but the actual virus is still here Reply lee says: January 1, 2010 at 12:25 pm does it stop you adding files to burning rom(ashampoo), because ever since ive h ad this, it wont let me add files to be burned, comes up with an error. Any help appreciated lee Reply Bob says: January 1, 2010 at 1:50 pm I followed the instructions exactly, then ran McAfee. It is gone in its entirety . Thanks so much for the information. The virus was almost devastating. Reply i need help says: January 1, 2010 at 2:31 pm the virus has cleared my desktop and now i cant get the maraware but, when i go on safe mode i can get it but no internet connection to update it. the rkill thi ng is appenrly infected too someone please please please reply to this im in des perate need of help Reply Amber says: January 1, 2010 at 8:52 pm I tried to follow these rules to delete the virus but when I went to run the rki ll.com file it wouldnt let it run. The I couldnt run the malwarebytes file becau se it would stop it. I restarted my computer to try to go into safe mode and I g ot the blue screen. So i tried to just restart windows normally to try the rules again and now im gettin the blue screen there too. I cant even get onto my comp uter! I am using my fiances laptop at the moment. How do I get rid of it when I cant even get back on!? Someone please help me! Reply mark says: January 2, 2010 at 4:56 am I have the InternetSecurity2010 virus in my notebook. After the scan with AVG, n othing ..i reboot my pc but it doesn t start, but it ever reboot itself, in everythi ng start mode(normal, safe, ..) .what can i do??????Help please (and sorry for my en glish) Reply Raj says: January 2, 2010 at 12:34 pm I have the same problem as Mark and cannot open in safe mode or the last known w orking configuration. XP continually reboots itself. I am hoping that the recovey console on the original XP installation disk has so me way of removing the registry entries relating to the virus? Further guidance would be appreacited before I decide to do a clean install of X P. I have some work that I didn t get backed up before the BSOD came up on my mach

ine Reply bgainer says: January 2, 2010 at 12:13 pm Thanks for this! It was as easy as you said it would be! Reply Ines says: January 2, 2010 at 1:15 pm I removed the virus, but internet is not working (skype & remote connection avai lable, but cannot open any page Please help Reply Chris says: January 2, 2010 at 2:33 pm I just wanted to say thank you so much for this. I ve had that Internet Security v irus for about a week, and I just followed the instructions (I had to download t he Malware and rkill to a cd from another computer) and got rid of it. Try this guide out it works!!! Reply sickie68 says: January 2, 2010 at 3:05 pm Warning!!!! Went through the process (irritating popups but I could get to my pr ograms and files). Now my system cannot boot. since I have a backup of all my da ta I have had it it with Microsoft and IE (yes, I had Norton running and current ). Going Apple. enough is enough. Now I won t have to be wasting my time on silly blog and looking for ways to prevent this kind of stuff. adios! GFS Reply Ollie says: January 3, 2010 at 8:43 am Looks like most people are unable to open internet or run the program or save it , ect, ect All this works but it MUST be done in Safe Mode if u r unable to do it in normal mode Reply Marok says: January 3, 2010 at 3:53 pm Wow. Possibly the most insidious bit of evilware I ve encountered. Stopped pretty much everything on my laptop from working. Strangely it disabled my internet con nection, so how I was supposed to fall for the scam and buy the thing online I ve no idea. 4 hours later and the assistance of this site and malwarebytes and my c omputer s nearly back to normal. Internet still isn t working properly though, somehow when my wireless on it messe s with the other computers on the same connection. Any suggestions? Reply sarah says: January 3, 2010 at 9:34 pm Thank you thank you thank you!! Reply DJ says: January 4, 2010 at 2:44 pm Thank you so much! Was really scared for my computer until I found this site. Pe

rforming like nothing even happened to it, thanks again! Reply lisa says: January 5, 2010 at 8:00 pm i tried all of this but it wont let me run anything. i cant get inro regedit i c ant run my virus, cant run malware or rkill closes everything HELP ME Reply angi says: January 5, 2010 at 9:06 pm My desktop computer is infected with Internet Security 2010. I cannot delete it from my C drive or access system restore or access the internet. I am trying to download malwarebytes from a laptop computer and save it onto a USB drive to the n transfer onto the infected desktop. When I put the USB drive into the infected desktop computer and click on malwarebytes, it simply opens the folder to show me what is inside instead of running the program. Several posts have said to rename the .exe but I have no idea what that means. Can someone PLEASE help me!! Reply tsukiflame says: January 6, 2010 at 3:10 am at first the program worked remarkably but then when i went to run rkill program again along with the othe rprogram to make sure the damned internet security 20 10 was off my comp it came right back along with it wont let me accerss the inte rnet to update the program that u guys recomended a little help would be appriat ed. btw my anti virus i use is avast Reply matt cruz says: January 6, 2010 at 10:39 am I did all this and though it didnt update it found 13 infections and cleaned the m, I restarted the computer and everything seemed fine but it must have re-insta lled itself while I was away from the comp (a 5 minute interval) im scanning again but what should I do if it re-reinstalls itself? Reply John L says: January 6, 2010 at 2:09 pm Just reposting for those of us still suffering from the continuous log-on/log-of f cycle. I couldn t get the network fix to work (told me I did not have permission to change the registry from a remote computer). Also it seems that some folks d on t have the ability to network in. Is there something that can be done from DOS to fix this? If a repair is necessa ry, is there a way to copy files that weren t backed up via DOS? It seems that per missions to copy from My Documents are blocked in DOS. Thanks for any help! John Reply aredant says: January 6, 2010 at 2:14 pm I clicked on a resource link on a web page and this malware installed itself. I tried Malwarebytes and Rkill and it found and deleted a number of entries, but e ven though I ran it several times, and even manually erased everything I could f ind, the program kept reinstalling itself and shielded itself completely. So, rk

ill never found the seed file. I ended up installing Spybot Doctor which prevent ed IS2010 from launching on reboot, then I did a system restore and the system i s now working just like it did before I got the malware. Reply Ruebette says: January 6, 2010 at 3:31 pm Hrm. Started trying to remove this virus 12 hours after infection. Couldn t get to the net from laptop, so downloaded recommended programs onto pc at work, and to ok to laptop with flash drive. No problem. Ran rkill, got error message, left it there and re-ran, no problem. Installed Malawarebytes and ran quickscan as inst ructed, no problem. Found 13-14 infected files, followed instructions to remove, and let it reboot when it requested upon reboot BAM program is still there. Ran both programs again, this time with full scan, found 7 more bits, removed, let i t restart, BAM virus still there. Did search thingy, found files, removed them, removed shortcut from desktop, repeated two programs running scan again, it foun d 13 more files the same ones that were supposedly removed the first time! (Fakesomething-or-other and hijack files), let it restart, virus still there. Tried t he rkill then system restore, it won t let it restore. Tried spyware dr, but it wo n t run without updating first, and can t connect to update. I m stumped. It s a fairly new laptop, don t have alot of irreplaceable stuff on it, t empted to call it a wash and take it to get completely wiped and reformatted. Reply Ruebette says: January 6, 2010 at 3:43 pm Just tried the whole thing again in safe mode. No love. This fix just plain old isn t working. This is one stubborn bug. Anyone have any suggestions? Reply Ruebette says: January 6, 2010 at 11:43 pm EUREKA!! Actually got to the point where I started to get caught in the log on/log off cy cle. So I turned the blasted computer off, calmed down, and came back and turned it o n and F8'ed to Safe Mode. In Safe Mode, I Uninstalled the rkill and Malawarebytes, and reinstalled them wh ile still in safe mode from the flash drive. THEN ran them again, restarted in s afe mode, and did a system restore from there. It appears that the problem is fixed, because all scans are coming up clean now, and I just got off line with Norton Support where they fixed and updated my Nor ton. So, if it s not working, uninstall the fixes, go to safe mode to reinstall and run , then do a system restore from there. Reply kriss2 says: January 7, 2010 at 3:04 am Thanks it help me !!!

Reply Pam says: January 7, 2010 at 3:15 am When I tried to run Rkill.com the virus stopped it from running. Reply Lee says: January 7, 2010 at 4:55 am Cheers to original poster! Worked for me. But couldn t connect to internet on infected computer so I using 2nd computer i put the downloads onto USB stick. The USB stick was not recognised by infected comp uter. (Maybe if you burn t them to CD it might work?) So from the infected computer i navigated to the files on the 2nd computer s hard drive through the network. Ra n rkill which allowed me to copy anti-malware setup to my desktop. Ran that & pr oblem solved. I actually did it all in safe mode (with network support) but don t know if that w as necessary. p.s. upon first boot after removal i still couldn t connect to internet because th e proxy server settings set up by the virus were still in effect. In internet ex plorer go to Tools internet options connections LAN settings and UNcheck proxy server. Lee. Reply Darren says: January 7, 2010 at 5:47 am Hi, Sorry to ask this questions even despote all the posts. Can someone tell me the step by step procedure for deleting this blasted virus? I can see many solutions of posted on here, but just want the definitive guide t o removing this virus/rogue. I cannot connect on to Inetrnet Explorer to update the malware software. By the way, I m quite computer iliterate and so will require a dummies guide if at all possible. Many thanks Darren Reply ZBoyd says: January 7, 2010 at 12:59 pm I had to take my computer in for a tech to try and remove this virus. I am able to log on, but this aweful thing prohibits my desktop from being view. The deskt op appears in an instant, then disappears. My tech removed this virus from five computers so far, but unable to get pass my log in area. If anyone knows how to get pass this situation, please post here. Reply Hunter S. says: January 7, 2010 at 3:37 pm I ve gotten this demon of a virus, which had all the usual symptoms AND it complet ely blocked my internet. I burned rkill to a CD on a different computer and brou ght it over, used it with Malwarebytes, and successfully got rid of the virus. I

deleted all associated registry entries and files also. It s now completely gone, except my internet still does not work. I m on my sisters laptop, where the inter net routes through the main computer, so I know there s no problem with the connec tion. How do I get my internet to work again! Reply Ruebette says: January 7, 2010 at 3:55 pm have you done a system restore to a day prior to infection? Reply joe says: January 7, 2010 at 8:19 pm Best advice from me to anyone who has this virus/malware save your files and rein stall operating system. Then get a good antivirus installed, worth every penny a fter all the headachs this will cost you in the long run Reply Rm says: January 8, 2010 at 10:41 am Thank you!! Thank you!! Thank you!! I couldn t have cleaned my computer without rk ill.com. Its because of heroes like you guys that we have some protection from i nternet scum. Reply Geneman27 says: January 8, 2010 at 12:41 pm We got this malware today. Tried to install Malwarebytes, but kept getting an er ror right at the end of the install. So, we installed Spyware Doctor first and d id a scan. This removed enough infections to allow Malwarebytes to install. Once installed, Malwarebytes found about 200 more infections and removed them. Finge rs crossed that this will work! Reply Aria says: January 8, 2010 at 3:28 pm does this really work?! im a bit hesitant cuz i tried almost everything. Reply Another Victim says: January 8, 2010 at 3:36 pm *IMPORTANT UPDATE* Because the 2010 Internet Secturity virus blocks the Malwarebytes software, you h ave to install it a second time and save the mbamgui.exe file as a different nam e to the same folder, but as a different name so the virus can t detect and block it: C:\Program Files\Malwarebytes Anti-Malware More details here: http://www.bleepingcomputer.com/virus-removal/remove-internet-security-2010 Reply Peter says: January 8, 2010 at 5:49 pm Hi all, got up to the log in/logout part. Managed to get the destop changed and internet working again. To do this you need to have gotten the taskmanager back, then its just a matter of looing throught the processes and ending the tree of the ones you dont know. Sorry I cant be of more help. Reply

wait2720 says: January 8, 2010 at 5:59 pm I did a system restore to the day before I got the infection and was then able t o run regegit, taskmgr etc and remove all traces of the thing. This will work gr eat for you if you have not installed any other programs between the restore poi nt and now. System restore keeps all your documents, music etc. intact and restores only the os settings. Reply css says: January 8, 2010 at 8:08 pm As soon as I ran rkill program, it removed the virus and then I ran the malware and that has removed this nasty virus. So far, so good. Hope it does not come back. We can easily track who is benefiting from this virus. Just follow the money, wh o is getting paid and then hammer them. May be they are in Russia. Reply Jayt says: January 9, 2010 at 9:10 am I got this virus today, and it not letting me even pass the login into my accoun t. I tried to run it in safe mode with command prompt, I want to format it but i t s not even let me do anything. How can I format my hard drive coz it s not even let me go to any other screen the n welcome screen. Please show me a way to do that Reply theresa says: January 9, 2010 at 10:59 am I did everything and ran the Malwarebytes scan at least four times immediately a fter I got rid of the virus, but infected items keep popping up. Why? Is it stil l there? Reply howlin' wolf says: January 9, 2010 at 12:41 pm thank you! this worked perfectly. got me out of a quite nasty situation. Reply bx says: January 9, 2010 at 12:46 pm This fix works!!. Thanks a lot every one. Reply josh says: January 9, 2010 at 6:24 pm i only used step one and two Reply Dann says: January 10, 2010 at 1:46 pm lifesavers. Thankyou so much for the help Reply

Jerry Bee says: January 10, 2010 at 8:06 pm I had to install MalwareBytes on a thumb drive but IS2010 still deleted the exe file. So I had to go to another computer and copy the mbam.exe file to the thumb drive and set the read only attribute. After that mbam ran and I finally got th e stupid thing removed. Hope this helps and thanks for the ideas above. Reply Marilyn says: January 11, 2010 at 5:00 pm I can t reboot my comp at all.Not in safe mode, not in last known config etc. It loo ks like it s rebooting, the window s page looks like it s going to go to my start page - then for an 1/20th of a second I see the blue screen of death and then it goes b ack to my reboot page. My comp was custom made of business-I never had r my old comp- but that f I can do any of thisfor me and the company that built it has since gone out a recovery disc for this and I had even tried my disc fo didn t work. I m reading all of these hints but I don t know i Does it sould hopeless for my comp?

Reply Mihai Andrici says: January 11, 2010 at 7:27 pm I would strongly suggest that you format your hard drive up to this point. However, if you have some files that you really need to save and are using Windo ws XP (this sort of thing happens a lot with XP), you can try this: Set you hard drive to boot from CD, insert the Windows XP CD, and then try to re pair (not with the Recovery Console) your existing XP installation. This will no t make things all better, but perhaps you ll have a chance at saving what you need . Another downside is that your files might be corrupted, but that can easily be f ixed if the computer you are saving the data on (I recommend using and USB stick ) is protected by a strong and updated antivirus suite (BitDefender, Kaspersky a nd Norton would be my personal preferences). Note that this is very risky, as you might infect the second computer as well. I n addition, it might not even work at all. I strongly suggest that you try this only if you have very important files on your computer, and even then, you shoul d be aware of the risk. Just so you can avoid this sort of thing in the future, you should always have a n updated and active security suite on your computer. Cheers, Myke Reply Mark says: January 11, 2010 at 8:51 pm Thanks for the post. Followed your suggestions and all is well now. Reply Todd says: January 12, 2010 at 1:16 am Many Thanks for publishing this fix. Worked great! Reply Bobette Bryan says:

January 12, 2010 at 6:30 am Thanks for the instructions. I wouldn t have known what to do without them. I picked this virus up after having my new computer online for only a few days. I used the instructions above and managed to get rid of the virus, but some of m y windows files were corrupted from the trojans it installed. Explorer will ofte n crash, and I sometimes can t open my email and get a MSOE.DLL can t be loaded message. The trouble is my new computer is an HP and it didn t come with a backup copy of V ista. Does anyone have any suggestions? Am I going to have to buy Vista again or will HP give me a copy? I agree with the others who said that whoever designs a virus like this should b e skinned alive. Reply Julia says: January 12, 2010 at 1:49 pm I used hijack this and removed: F2 REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon32.exe O4 HKLM\..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate32.exe O4 HKCU\..\Run: [Internet Security 2010] C:\Program Files\InternetSecurity2010\I S2010.exe This may also be on it, but was not on mine: F2 REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon86.exe O4 HKLM\..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate86.exe O10 Unknown file in Winsock LSP: c:\windows\system32\winhelper86.dll O10 Unknown file in Winsock LSP: c:\windows\system32\winhelper86.dll I was able to end the virus program and get system restore up and use it, which worked! I went back a week before it started, When I tried to use Malwarebytes, the virus would restart my computer when it found something. Use Hijackthis and then system restore. It will work! Reply Supercrapnstuff says: January 12, 2010 at 4:38 pm ok, i dont know what to do, because if i try to log onto my user, the screen tur ns blue, and ive only had this IS2010 for a couple of days, I click on my user b ut it stops halfway inbetween that and the desktop. i cant run anything or do an ything and running the recovery tool for norton dosent help, so what will i do? Reply Keeley says: January 12, 2010 at 5:09 pm Thanks sooooo much it worked perfectly!!!! Reply Dan says: January 13, 2010 at 6:14 pm Thank you.. Lunch is on me! Reply Joseph says: January 14, 2010 at 10:15 am hi thanks a lot !!

error

Reply Paul says: January 14, 2010 at 11:35 am The virus wouldn t let me use my Verizon Security Suite ran these programs as instru cted. Worked great! Something worth mentioning: when it was done, two things hap pened: my desktop turned white, as it went into Inactive Mode or something like th at. also, the bad programming left an image on the desktop WARNING, etc, lookied scary, but turns out it was only a desktop image created by the virus. Thanks g uys, real good stuff! Reply CJ says: January 14, 2010 at 11:12 pm worked great. many, many thanks! Reply Big Dave says: January 15, 2010 at 4:07 am Many thanks, it worked perfectly. Reply Chris M says: January 15, 2010 at 7:38 am This fix worked perfectly.Thanks for the solid info softsailor! This thing took over everything. No taskmanager no registry. All together the fix and scan took about 1 hr. Thanks again Reply nick V says: January 15, 2010 at 12:41 pm RKill and Malwarebytes Anti-Malware together did the job for me. We had the initi al virus for a few days, on my daughter s laptop. We think it arrived through a bo gus Facebook email. It shut down Task Manager, and system restore and produced t he pop ups and the red cross , etc. I couldn t delete the registry entries or anythin g. Then IS2010 appeared today and I found your solution. I ve just followed your i nstructions and it worked perfectly. Thank you, thank you, thank you. You guys ( and whoever wrote Rkill) are fantastic. Reply Bakers says: January 15, 2010 at 10:14 am THANK YOU THANK YOU THANK YOU I followed the steps and it was removed successfully!!! Reply Ken says: January 15, 2010 at 3:02 pm I let MBAM run a fast scan on my PC,and when it stop scan I just deleted all tha t wich was shown,now my PC works great. Reply Whitney says: January 15, 2010 WOW thank you so today. It was a g. I did exactly you! (etc)

at 7:42 pm much! This is my parents computer and I saw that it was on there pain in the butt having this on the computer! It was so annoyin as you said and it worked PERFECTLY! Thank you thank you thank

Reply Bullwinkle says: January 15, 2010 at 9:16 pm Well, this bugger got past COMODO, AVG, and Norton (had it on four computers) an d managed to activate on the Norton machine. I can tell you it can infect XP HOM E, XP PRO, Vista Home Premium 32 bit, and Windows 7 64 bit. With the help of thi s post I removed it from the XP HOME machine after it activated and the others b efore it activated. It was hiding itself in a bogus HP\Drivers\ . set of directori es that actually looked like printer drivers. Only lasting problem is it hid itself in the recovery partition of my new HP Des ktop and most likely blew the partition up when it got deleted. Not to worry, I have the recovery DVDs. What a fun Friday night this has been!!!! Reply bryn morgan says: January 15, 2010 at 10:20 pm Should i download it as soon as possible or whenever the problem occurs? Thanks a lot. Reply Michelle says: January 16, 2010 at 6:48 am Thanks so much. My laptop was infected yesterday evening and I was so relieved t hat this removed all the nasties. So far all is running well. Thanks again. Reply Malware Attack says: January 16, 2010 at 7:33 am Great Advice: At first I had problems getting the RKILL File to work. Here s what you do: If the rkill file doesnt work and you get a pop-up saying its infected WHILE!!! you see that pop-up(without hitting ok or x ing out) run the rkill program again! I had to run it twice but it finally shut down the virus and allowed me to run the Malwa re program. Thanks for the excellant advice! it worked perfect!!! Reply wolfandbear says: January 16, 2010 at 9:05 am I really don t know how this stupid virus was downloaded onto my computer. It popp ed up that my computer was infected, didn t ask for to download, did it on it s own. This program ahs saved me a whole lot of money. Thanks. Reply Dabuek Torres says: January 16, 2010 at 9:55 am Thank you so much for this. Removal really is as easy as they say in the article ! Thanks again Reply Nick C says: January 16, 2010 at 10:13 am This is the nastiest biotch i ve ever had on a computer. I literally had to upload all the programs (rkill and updated malwarebytes) with my laptop and then insta ll them via cd, since this bastard disables your ability to upload the latest ve rsion of Malwarebytes. My previous scan found 8 infections with malwarebytes, wi th the newly uploaded software already found 6 more,this thing is pissed, my com

puter is only scanning about 10000 objects an hour. Hopefully, i will finally be rid of this god forsaken thing. Reply Franco says: January 16, 2010 at 11:03 am Got hit with this today. Immediately closed everything and then searched and fou nd this fix. It worked just fine. Thanks a million, fellas. Franco Reply Leer says: January 16, 2010 at 12:58 pm Brilliant work, everyone. The Internet Security 2010 virus came off my computer like taking off a a glove. This would have taken me hours to do myself. FYI, the RKILL program operated, but did not seem to stop the program from playing, howeve r, I invoked the Malwarebytes Anti-Malware and it just stripped trojans, rogues, hijack virus components out of the registry 1,2,3. Again, thank you; all is app reciated. Reply Angela says: January 16, 2010 at 1:29 pm THANK YOU SO MUCH! I tried everything, I even had Malware Bytes already, but wit hout downloading that rkill, but once I did it fixed it all. Thanks again! Reply Scott says: January 16, 2010 at 3:49 pm Seems to have worked thanks for the help. If you find out where the jackleg is t hat came up with this I will be more than happy to give him a donkey punch for e veryone! Reply Leer says: January 16, 2010 at 3:55 pm What were you doing when you got the virus? My AVG 9.0 was actually doing a dail y scan/block as I simultaneously listened to an MP3 audio file. Exactly at the e nd of the file, a message suddenly popped up saying the codec was insufficient t o play MP3, WAV, and 100 other audio types. Then a slurry of messages came up. ( Note to developers: I saved screen shots of the various messages; I can forward them if you wish.) Reply Mike says: January 16, 2010 at 5:27 pm Hey. My step-mom got this S.O.B. spyware garbage on her machine. If you get stuc k into the logon/quickly logsoff righback on off cycle, do a search for the thin k in pixels, log on/off. Chances the pukeware changed the userinit.exe file to s omething else. Once you get that done, then you can get to safe mode. Once in sa fe mode, YOU will have to make sure you remove all traces of it. Reply Hunter says: January 16, 2010 at 8:55 pm Great process, saved my computer and files from certain demise without the costl y computer tech fixes. ***IF YOU ARE GIVEN AN ERROR MESSAGE WHILE TRYING TO RUN RKILL, THEN TRY LEAVING

THE ERROR MESSAGE UP AND RUNNING RKILL AGAIN OVER IT. this was a problem for me , but otherwise follow the steps provided. Many thanks to softsailor, malwarebyt es and rkill

Reply Heather says: January 16, 2010 at 9:43 pm I cannot thank you enough for ridding me of this virus! Thank you so much Reply Roger says: January 16, 2010 at 9:49 pm Hi, I following the instruction, and removed the Internet Security 2010 successf ully. However, after reboot the computer, the network does not work. It shows Lim ited or no connectivity , anyone has seen the same problem? Thanks! Reply Roger says: January 16, 2010 at 10:03 pm I followed the instruction and Removed the virus successfully. However, after reboot the computer, it lost internet connection. The LAN connection status is: Limited or No connectivity . I tried Repair , get following error: Windows can not finish repairing the problem because the following action can no t be completed: Renewing your IP address. Please help! Thanks! Reply Roger says: January 16, 2010 at 10:11 pm I followed instruction and removed the virus successfully. However, after reboot the computer, it lost internet connection. The LAN connection status is: Limited or No connectivity . I tried Repair , get following error: Windows can not finish repairing the problem because the following action can not be completed: Renewing your IP address. Please help! Thanks! Reply Serenity says: January 16, 2010 at 10:25 pm Thank you so much for all the info regarding this biotch!! What a nasty little n asty this one was! It took several steps to get rid of it but I was finally able to by using the su ggested downloads. It just took several times before it took. Bless you!!

Reply Brooklyn says: January 17, 2010 at 12:56 am This was so easy just printed and followed instructions just like it said and wo rked Can t thank you enough Thanks Reply anirudh says: January 17, 2010 at 2:28 am THANKYOU SO MUCH! i finally got rid of this thing, all thanks to you! Reply Eddie says: January 17, 2010 at 4:10 am this thing is weird i have looked multiple times for it in the add/remove progra ms thing and i have yet to find it and the REG addHKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v Disabl eTaskMgr /t REG_DWORD /d 0 /f command in run will not work i just put malwarebyt es on my flash drive and its currently scanning but why does this program only l et me go on certain sites i mean i cant go on youtube but i can go on google vid eo? whats up with that?.. once i scan fully with malwarebytes will it just go aw ay? once again thanks for the help was a great post and helped alot! Reply Eddie says: January 17, 2010 at 4:13 am also i wanted to ask but forgot does anyone know where this comes from? like idk if my son or something did something on the computer to get this if anyone know s how they got it can you plz reply and tell me thanks once again eddie Reply Jeff says: January 18, 2010 at 6:47 am I just got this one around 5 am this morning while surfing the Pennysaver classi fieds online. I clicked a curious ad offering to sell you a new SSN and figured it was a scam but wanted to see. Well I went to their website and I think when I clicked the buttons that redirect to informational pages on the site is when I co ntracted the HIV. I ran a search for all files modified in the last 2 weeks and pretty much everything that was tied to this fast working trojan happened around 5 am today, while I was there. You could do a search for all files between a certain string of dates, and when the search is complete click the date header to organize list by date, then star t looking over them for 42.exe IS2010.exe and warning.html They will all be grouped together. (If you haven t removed already) there you will see the time. Then you can see what else is in that time frame on your web brow ser history. Reply Rebecca says: January 17, 2010 at 7:10 am All I want to say is THANK GOD for Soft Sailor!!!! I had 487 infected files!!! Y our process worked! Thank you, Thank you, Thank you! Reply jj says: January 17, 2010 at 12:57 pm

thx so much this help fix my family pc Reply Josee says: January 17, 2010 at 1:46 pm Hi, I ve been following various steps here and am making progress. HOwever I can t c hange the desktop image any advice on restoring that? My desktop is in active mo de and won t let me restore and won t let me go to properties and change the backgro und image. Thanks. Reply jaybug says: January 17, 2010 at 3:20 pm I am personally in love with whoever figured out how to fix this. My computer wa s about to bite the dust, but not anymore! And the steps were super easy to foll ow. I just had to restart my computer in between two scans, and it works perfect ly now! Reply MikeC says: January 17, 2010 at 5:11 pm After much trying and frustration, I could not get rkill.com to work. However i downloaded Process Explorer (free, and better than Task Manager) on another machin e, transferred it with Malwarebytes Anti-Malware by memory stick to the infected co mputer. I used Process Explorer to kill the Internet Security 2010? processes, an d Malwarebytes to clean up the mess I hope it s okay tomorrow! Internet Security 2010? became so frustrating because it was using up 75% of my C PU all the time, and doing everything in its power to block. The solution took m e 15 minutes, figuring it out took 5 hours Process Explorer is at: http://technet.microsoft.com/en-us/sysinternals/bb896653 .aspx Reply Amber says: January 17, 2010 at 5:28 pm Malwarebytes removed this virus from my computer by itself because the virus pre vented the rkill program from working (however I should mention that my firewall had blocked part of the virus in the first place so I was having all the issues EXCEPT actually seeing the Internet Security 2010? interface where I guess you a re told to give your credit card info) Reply jackchen says: January 18, 2010 at 12:42 pm Thanks for this article and another one I successfully removed IS 2010. Just wan t to provide some update information that might help others: 1. the malware hit my PC seems to be a new version of IS2010. I tired to kill it by rkill.com but it always shows application infected! and rkill.com won t run. whe n I try to run taskmgr,cmd, regedit or system restore in safe mode, they all sho ws the same application infected then start IS2010 scan crap. 2. Finally I found out if I copy the \windows\system32\cmd.exe and rename it to 1.exe, it can run and I got a command console. I runned rkill here and still no luck, then I found PsTools from Microsoft http://technet.microsoft.com/en-us/sys internals/bb896649.aspx are still working. So I runned pslist and found IS2010, killed it by pskill, tried to run rkill.com again but it still invoked IS2010, f inally found another process smss32 is the other process. After killed it, rkill

can run successfully. I checked program files\internet security 2010 and found it was created on 11:56PM, so I searched my harddrive for that time period and f ound three files : \windows\system32\windhelper32.dll \windows\system32\smss32.exe \windows\system32\winlogon32.exe I unregisted the dll, deleted those files. Scaned registry and found thos entris: HKEY_CURRENT_USER\Software\IS2010 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Internet Security 2010? HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run smss32.exe new : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon\Userini t winlogon32.exe changed it to userinit.exe. Reply Chris says: January 18, 2010 at 2:01 pm In my case the problem with no internet access and the application error in svch ost The instruction at 07d4caa9b referenced memory at has been solved with START RUN typing CMD and clicking OK (or RUN), then typing netsh winsock reset and restart the machine. Reply PO'd says: January 19, 2010 at 9:39 am Here is one for everyone out there. My desktop (using laptop for this) was infec ted with the lovely IS2010. After the many suggestions seen on the internet for Spyware Doctor and other free spyware removal tools, programs or whatever they re ca lled, I downloaded Spyware Doctor and ran a scan. It did in fact locate IS2010 a long with other garbage and to my shock (sarcastic) in order to have it removed I have to pay what happened to the free removal. Now that my computer is totally dis abled I am beginning to think that the J-O s that advertise their free removal tools , programs and such are the same tools that are creating the havoc in the first place. To the creator of spyware, malware and future ware s not yet named I have f our numbers for you to figure out 7625! Reply Richard says: January 19, 2010 at 11:48 am I have tryed spydoctor but can t access internet exployer i have manually deleted internet security 2010 just long enough to get malwarebytes downloaded running s can now but IS2010 keeps slowing it down I boxed ankled and selected full scan t aking a bit.How come they don t find out who started this junk and tar and feather the dirty dogs I m not normally a violent person but I think I could actually sho ot one of their toes off. Reply Bizerk says: January 19, 2010 at 1:53 pm I have followed all the steps, and now I cannot Load windows. It Says Loading Set tings then Logging Off and I cannot access Windows? What can I do now???

Reply Stephen says: January 20, 2010 at 12:56 am That was a close call.. thanks for the valuable info ! It just about fried my Th inkpad s custom XP pro load in short order. I tried to run rkill.exe and it didn t c omplete. I had to burn the Malwarebytes and rkill onto a CD on my desktop, since after the infection the laptop wouldn t recognize the thumb drive, or connect to the wireless after I disabled the wireless connection like a dummy.. it wouldn t r e-enable manually *connection failed* . The wireless revived after (a nervous) r estart. It took about 5 attempts to download the update for Malwarebytes, kept g etting an error, but with perseverance it finally updated. After the first quick scan, the system didn t reboot successfully. I had to hold down the power button for 5 seconds to shut down. I then ran the anti-malware program AGAIN, this time a full scan. It found and successfully removed 5 more infected files / processe s. I ran another quick scan following that, nothing found. I m not jumping for joy yet, but the beast appears to be dead. Hope my experience helps someone.. be careful what you click ! Update : AVG 9.0 found nothing on a whole computer scan, everything seems normal after a few restarts. Reply Mark says: January 20, 2010 at 4:28 am This thing about buying a particular new virus checker to cure the Internet Secu rity 2010 virus is exactly what they want you to do, and is a complete waste of money. My system was hit by this horrible virus resulting in the blue screen of death being deprived of access to any controls. What I could do, however, is reboot! So I rebooted, held down Key F8, and got the boot options. I chose System Restore option and turned the clock back by one week. and

Although an error message appeared saying it had failed, it actually hadn t! When I rebooted, the system was perfect again, and I hadn t even lost any data eve rything was right up to date, and I simply deleted the suspect file the virus ca me from. Problem solved! Reply Wendy M says: January 20, 2010 at 8:02 am My husband downloaded this virus by accident when he was trying to install new s ecurity on our home computer. It s complete BS and a scam to get your credit card info. It s from a company called task-bar and they re based out of Riga, Latvia. The y charged our credit card $109. We ve since cancelled our card. Anyway, I had to t ake my computer into work to get it fixed. They deleted all the programs manuall y (I have no idea how) and then installed Malwarebytes Anti-Malware program, so I guess it s a good program or my company wouldn t do it. They also installed an ant i-viral program called Sophos and said between the two, we should be protected. Reply asdf says: January 20, 2010 at 11:54 am

well somehow it work even though after the scan and removal process,, it said so me of the stuff cant be remove, thanx alot Reply Kda says: January 20, 2010 at 9:07 pm Got this bugger barely half an hour ago, bloody trojans; Either way, rebooted, had AVG find it, remove it, resulting in a bsod; rebooted again only to find that I can t even access my desktop only thing that pops up is this damn program; so I used it to open up an explorer window, and here I am, lo oking at how to remove the damn thing thing is, It s a brand new computer so I nee d to figure out how to activate safe mode, this is the last thing I need . Reply Andrew Schneider says: January 21, 2010 at 7:09 am Thanks for the great information worked like a charm!! I have Norton Internet Secu rity set at a high firewall level and updated regularly and this still snuck thr ough. Your simple instructions allowed us to remove this virus quickly and easil y. Thanks again! Reply ProF says: January 21, 2010 at 1:13 pm thanx u Reply MJ says: January 21, 2010 at 1:49 pm This happened to me as well. It took my computer guy 19 hours to restore my syst em and recover my important corporate files. The Internet Security 2010 locked up my computer tighter than a drum. Of course I was trapped like many others on here. My computer guy said since we had config ured the computer with NTFS and we did not have the administrator password, in a ddition to the effects of the viruses, trojans, etc it took 19 hours to recover m y lost data. This is what my computer guy told me when he brought back my computer. 1 iTunes m usic file, $1.29, 1 Email from my largest client, $20,000, Recovery of 9 months of email and all of your iTunes music files Priceless! MJ Reply Nate says: January 21, 2010 at 2:51 pm Hey when I do the scan on the thing they told me to use it says i have to purcha se it.. he said its a free download! It says, To remove them you must purchase Why ? Why can t it just fix it! Christ! Reply Mihai Andrici says: January 21, 2010 at 4:08 pm You might have things a little twisted. The Internet Security 2010 is basically a scam. It pretends to be an antivirus, but it says you need to purchase it before it can repair anything. Malwarebytes has a free edition, that you can download from the link in the arti

cle. Malwarebytes is the one you should be using to scan your computer, not Inte rnet Security 2010. IS 2010 is the actual problem. Please read again the article and you ll figure it out. If not, come back with a comment. Hope I was of any assistance, Myke Reply Graham says: January 21, 2010 at 8:56 pm My PC was infected by IntrnetSecurity2010 on 17 Jan 2010. I have used Malawarebytes with the rkill file, following instructions here, but my system is still infected. I have lost the on-screen warning message, and the annoying pop-ups, but my PC i s still not right. My main screen keeps going black and if I set an image for my desktop it keeps returning to black on start-up. I have scanned with Avast, SUPERAntiSpyware, Spybot Search and Destroy, SpywareB laster, Spyware Terminator, Microsoft Scan, all to no avail. I have found a file called atapi in C:/Windows/System32/Drivers, Description:IDE/ATAPI Port Driver Company: Microsoft Corporation File Version: 5.1.2600.5512 Date Created: 17/01/2010 19:19 Size: 94.2 KB I know this file is relevant to the spyware, as it was created on the day my PC was infected. I have tried to rename and delete/shred the file, also rename, change the file e xtension, and then delete/shred it, but every time I delete or shred this file, it keeps coming back. CAN ANY