How To Remove Internet Security 2010
How To Remove Internet Security 2010
How To Remove Internet Security 2010
Have you ever infected by Internet Security 2010? Do you feel it is really difficult to remove it? Actually Internet Security 2010 is just one of many fake antivirus applications like Antivirus Live, Advanced Virus Remover, and others that hold your computer hostage until you pay their ransom money. They tell you that your PC is infected with fake viruses, and prevent you from doing anything to remove them. Today we will take a look at how to remove Internet Security 2010.
Anatomy of an Infection
Usually these infections start with a popup message like the screenshot shown below, coming from a rogue site or malvertisement and they are often served up from porn sites (though these viruses are not exclusively from there).
IMPORTANT NOTE
Maybe you're probably savvy enough to know how to avoid actually installing these things, but there's a good chance that your mom isn't. If you've got a relative that doesn't know what they are doing, here's what you should tell them to do when they get a popup like this one:
HOLD DOWN THE POWER BUTTON FOR 10 SECONDS!
If they really are infected with a real virus, powering off won't be any worse. Some of these things are tricky and will try and install themselves no matter which way you click, and they look just like a real Windows error message. Powering off is just the simplest and best option for non-tech-savvy users.
Moving Forward
Once you click the popup message, you'll be presented with a page that looks like your My Computer view, telling you that your PC is infected. Nevermind that no real antivirus looks like this, regular PC users don't know any better.
Then you'll be presented with a popup dialog in the web page that says your PC is infect, and you can click the button to Remove all. The dialog looks real and can even be dragged around the page.
After you've clicked it, you'll be prompted to run an installer which you might note has a number of warnings.
You are infected as soon as the installer is able to execute.
You won't be able to open up any applications any more.
What's worse, you can't remove it from Control Panel.
Remove Internet Security 2010
First kill the virus that's currently running on the system, and there's a really easy way to kill Internet Security 2010 without downloading any special software just to kill it.
Then open up the Start Menu, click the Run button or use the Win+R shortcut key, and then type in the following:
taskkill /f /im is2010.exe
Hit the Enter key, and the main virus window should go away. After you've done that, you'll want to quickly execute the following commands:
taskkill /f /im winlogon86.exe
taskkill /f /im winupdate86.exe
Now the virus isn't currently running on your system (but it's still lurking in the shadows). But you can actually run any malware removal tools that you'd like.
Use SUPERAntiSpyware to Clean the Malware
Now we've killed off all those processes, we'll turn to removing the actual malware from the system by downloading SUPERAntiSpyware and installing it. You should be able to grab the full version, or you can use the portable variety.
If you grabbed the full version, make sure to use the Check for Updates button, and then click the Scan Your Computer button. Check to perform a Complete Scan, and select all of your drives.
It should easily find and kill all of them. You'll probably note that on this particular machine that there was a lot of other bad stuff that it caught as well.
Once it's done, it'll let you remove them all in a click and then prompt you to reboot. Keep in mind you shouldn't reboot yet since job isn't done!
Install Malwarebytes and Scan
Now you'll want to install MalwareBytes and run it, making sure to run a full scan.
Install Microsoft Security Essentials
After you finished, you should definitely install Microsoft Security Essentials and run another full scan.
Note: If you used a thumb drive at any point during this process, you should make sure and scan that as wellI've had viruses hop over to the thumb drive, ready to infect the next machine.
Sidebar Note
Here's an interesting fact for you...the two processes that we killed earlier are actually from Advanced Virus Remover which is another awful malware. Clearly they are both developed by the same jerk.
The winlogon86.exe seems to be mostly used to show messages like this one:
winupdate86.exe is responsible for blocking you from opening other apps and re-launching the main Internet Security 2010 window.
In fact, you can often just leave this window open, and then continue to install any malware removal tools you like. When it pops up with the error message saying; "Application cannot be executed. File is infected." ..etc Simply *MOVE* that message box to the corner of the screen, and you can install SuperAntiSpyware just fine. There appears to only be one instance of that "error message" that will run at any given time. You will get multiple errors, you won't get that obnoxious sound that computer makes when it tells you that you can't do that. Now, if you hit "OK" you're just asking for a headache.
Conclusion
Looks like there might be some stronger versions of this thing out there. I recommend you had better not reboot your machine after you run the initial SUPERAntiSpyware scan, and installing and running MalwareBytes right away.
You can get more Windows 7 tips, Windows 7 Wallpapers, Windows 7 Software from http://www.Newton360.com
Top Guide of MP3 Player Downloads The Diet Solution Ebook Free download Expert of internet marketing is acting like a captain of the ship for advancement of online businesses- Danny Demichele! Search Marketing: Going Local With A Social Networking Profile Use Rj-11 Connectors For Instant Internet Connection How Worthy Is Internet Advertising Network Cameras- Surveillance at Your Work Place Online Courses Are A Boon of Internet Network Attached Storage My Magic Collections Revealed (Free Download) How To Select A Vibrant Computer Networking Company Internet Marketing Tips For The Complete Newbie Benefits Through Internet