Comments on: Windows XP Registry Fix: No More Worries

By: Casanova

Casanova — Fri, 12 Mar 2010 01:11:59 +0000

The possible way for removing internet security 2010 is as mentioned below…
Steps for its manual removal are…
Kill processes:
IS2010.exe 41.exe winlogon86.exe winupdate86.exe

Delete registry values:
HKEY_CURRENT_USER\Software\IS2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winupdate86.exe"

Unregister DLLs:
winhelper86.dll

Delete files:
IS2010.exe 41.exe winhelper86.dll winlogon86.exe winupdate86.exe Internet Security 2010.lnk

Delete directories:
C:\s
C:\Program Files\InternetSecurity2010\
But it seems that you will unfortunately have to format your system as it is too late now…
Alternatively you can look for last opinion from certified personals…
I know one of them log on http://www.iyogi.co.uk/
References :

By: Buzzdil

Buzzdil — Fri, 12 Mar 2010 01:09:59 +0000

Its not too late.d ont be worried, you should follow the manual removal instructions withint his link to remove Internet Security 2010 spyware virus http://techvts.com/security/internet-security-2010-virus-removal/
References :

By: voyager1

voyager1 — Fri, 12 Mar 2010 01:07:59 +0000

I would first try restarting your computer and boot into safe mode. Safe mode only allows the windows program to run. You can do this by restarting your computer and repeatedly press the F8 button until a black screen with white lettering comes up. Scroll down and select "safe mode". Be patient during this process as your computer will not run as fast. If the Internet Security 2010 does not pop up, update Malwarebytes and Eset and run a full scan. If Internet Security 2010 pops up again, run "rkill". You will see one or two messages that says "rkill" is a malware program but ignore it as it is trying to deceive you. Once "rkill" is finished, update both your security programs and run a full scan. After removing the rogue program, make sure you update your security programs before you surf the web so your security software can block these rogue programs and remember if you see any pop up that says your computer is infected and it is not from your installed security program, just close it out. Both Eset and Malwarebytes are great programs. Unfortunately, you installed Eset after your system was infected which prevented the program from working. Secondly, as good as Malwarebytes is, the free version is a on demand scanner. I recommend that you purchase the Pro version of Malwarebytes. It works in the background just like your paid antivirus program to protect you from infection plus it will auto update itself.
References :

By: The King

The King — Fri, 12 Mar 2010 01:05:59 +0000

Follow this guide. (You might want to print it).
http://www.bleepingcomputer.com/virus-removal/remove-internet-security-2010
References :
Rkill is safe. I’m pretty sure you don’t have to go into Safe Mode.

By: Casper

Casper — Fri, 12 Mar 2010 01:03:59 +0000

Reformat. If you really want to save your computer someone at http://www.bleepingcomputer.com/ may be able to help, although usually they wont even look at your post unless you also have a HijackThis scan result to go with it.
References :

By: Riley

Riley — Thu, 11 Mar 2010 20:01:42 +0000

How can I, and is it too late for me to remove Internet Security 2010?
For the past couple of weeks, my fathers computer has been acting funny. I had malwarebytes already installed to it and working until I noticed the differences on the computer (audio playing without any background processes responsible, and webpages acting peculiar). Today I installed ESET Smart security with an older update (after telling him i would add a different program). Also, remembering I had ended some startup processes, I opened up msconfig and checked the ones to start up that I unchecked a month or two ago and restarted the computer. This is where things went from bad to worse. If i can recall correctly, the computer was frozen during the restart. This is strange, but has been normal for awhile due to the occurrences already stated. So I hard-booted after awhile, and it got stuck at the startup. So i hardbooted again, and there was a popup describing how the computer was infected with a "stage 5" virus out of "0-5". It said a full system scan was required, and i clicked continue. Normally, i wouldnt do that stuff If it had been an actual pop-up from a web page or program. But this showed before the start bar or icons appeared, so i figured it was something I should click.. Well fuck my life.

Anyhow, the system rebooted, I saw the blue windows screen, and here came internet security 2010 (popup came up again, and i just closed).. I scanned with ESET and got nowhere. Then I updated ESET to the 4800 update. Scanned, and found some threats, then the scan stopped. Repeat that process a couple more times. I knew it was a fake already, since I had gotten a virus similar however not as severe. I noticed his wallpaper changed to something saying "SYSTEM HAS BEEN INFECTED!", and more popups urging us to buy the software. I checked the internet for any solutions, and the softsailor.com tutorial seemed to help a lot of people. It and many other sites had malwarebytes on it as a removal tool for this situation. That lead us to believe it was legit.
I tried malwarebytes, and ESET multiple times with the same results. No install, and an unfinished scan. Just now, i read through their tutorial thoroughly, instead of figuring MBAM will save the day itself. I noticed rkill needed to be used, so i used it. Well fuck my life…

rkill wasnt able to work. a popup said it was infected. And soon after more tries at the steps of removal, I heard audio coming from the computer. It wasnt normal audio. It was a russian guy saying "Hello, my name is Nikolai.." he continued to ramble about how he will steal money safely in his "left pocket". I heard someone else say something in the background agreeing with him.
This worried me more.

So please, what should I do now. I have run out of solutions. Turn of the computer? I cant system restore, it has been blocked too. I cant open the registry or task manager still. Help!
I will try the www.bleepingcomputer.com, hopefully it works (it has more information on what to do if MBAM doesnt work, but not rkill…)

My mom is currently trying spybot search and destroy. I am almost sure it wont work.
The computer WONT launch in safemode
*UPDATE* My mom was looking around the web and tried some other programs. I didn’t recommend this, but I wasnt going to object. One computer messing up was enough for me, wanted to let her do her thing. Now the computer wont turn on….
rkill.exe doesnt work. I close the window saying it is infected, and let it run until it closes. Then i run MBAM, and still nothing appears. I cant end processes or enter regedit from run