Remove Internet Security 2010 Virus Effectively
Ok, as we have seen, a lot of computer users caught this new computer virus named Internet Security 2010. How to remove it effectively? What are the steps for you to safely remove this deadly computer virus?
Showbiz Galore has searched various computer forums to provide you with the most effective solution to get rid of this nasty Internet Security 2010 computer virus.
Some websites posted ways and steps on how to remove this Internet Security 2010 computer virus but nothing works. Here is an effective way to remove Internet Security 2010 computer virus from your computers.
A computer user has found these steps to be effective in removing the Internet Security 2010 computer virus in his computer:
How to remove Internet Security 2010 manually:
Manual removal of Internet Security 2010 is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.
The files and folders to be deleted are listed below:
- %Program Files%\InternetSecurity2010
- %Program Files%\InternetSecurity2010\IS2010.exe
- %WINDOWS%\system32\41.exe
- %WINDOWS%\system32\winhelper86.dll
- %WINDOWS%\system32\winlogon86.exe
- %WINDOWS%\system32\winupdate86.exe
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
- %UserProfile%\Desktop\Internet Security 2010.lnk
- %UserProfile%\Start Menu\Internet Security 2010.lnk
The registry entries that need to be removed are as follows:
- HKEY_CURRENT_USER\Software\IS2010
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Internet Security 2010″
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “winupdate86.exe”
One computer user was able to follow these steps and got the virus removed from his computer. He shared the steps in which he did it:
I’ve managed to kick out the IS 2010 by:
- changing my account privileges to simple user,
- setting the simpliest startup possible with msconfig (You can edit Windows Registry by accessing the registry editor. It can be done by choosing ‘Run’ and typing in ‘regedit’.)
After this I could manually remove the IS 2010 as written above.
When I removed the IS 2010 and rebooted the system, I’ve discovered that I can’t logon into any of my accounts. It appears, that some versions of IS 2010 change the Windows registry.
The solution is to set the key:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ WindowsNT \ CurrentVersion \ Winlogon
to point into windows userinit.exe file.
When I’ve finally logged into my computer I’ve discovered that:
- the task manager isn’t working,
- I can’t change the wallpaper.
The solution to this problems is again a registry edit. Find in the current_user and local_machine branches the following path:
software > microsoft > windows > currentversion > policies
Then remove the keys:
noactivedesktopchanges
nosetactivedesktop
nochangingwallpaper
Conclusion: When just surfing in the web use a simple user account rather then an administrator one – the IS2010 won’t have a chance to install, mix up the registry and do any harm.
January 25th, 2010 at 6:50 pm
very bad
Reply
January 27th, 2010 at 3:17 am
I clicked the X on this pop-up, which I guess is what invited the Trojan Horse virus onto my computer. I immediately did a Spy-Bot and Norton 360 scan. Both said they found the trojan, but couldn’t delete it until I rebooted. I also ran an AVG scan, and deleted some registry items I believe were associated with this “program.” I rebooted. The Windows screen came up with our three users. I clicked on mine, it led me to a window with my screensaver, but no program icons or toolbar and then immediately “logs off.” I can’t access F8 to get to the Safe Mode. I’ve gone on to F2 and F12, changed the settings on what drive to use to reboot and have chosen the CD/DVD where I’ve inserted a recovery disk and can’t reboot. Did I delete something important from the registry? Is my computer fried? Do I have to reformat? Any clues? If I thought that by rebooting after Norton and Spy-Bot’s scans would do this, I wouldn’t have rebooted, but performed all the tasks outlined above. What the heck did I do?
Reply
Damien Reply:
January 28th, 2010 at 4:11 am
Download Windows Diagnostics and Recovery Toolset, sometimes called Microsoft DaRT, and install this program on a computer that is not infected by the virus. The unaffected computer must also have a cd burner and burning software as you will have to burn a program to a disc.
Run through the install instructions of Microsoft DaRT until you eventually create an .ISO image called something similar to ERD50.ISO or ERD60.ISO. Mount this image to a cd using nero or some other similar burning program.
On the affected computer that you cannot log into, turn it on and access the BIOs, by pressing F2 or a similar F Key. You can find a list of what computers let you access the BIOs by pressing what F Key on the internet somewhere. I know you can’t access the internet on your computer, but you will have to use someone else’s. To be honest just try tapping F2 as soon as it starts up, before you see the XP screen. Works for a lot of PCs.
When you are in the BIOs, set the primary boot device to the cd/dvd drive of the computer. Be careful what you are doing in the BIOs and remember any changes you made or write them down, so you can change them back later.
Now Save and exit the BIOs, put the disc you burned into the disc srive and restart the computer. Let the machine boot from the disc and when it asks, select the operating system you want to repair, such as C: windows XP service pack 2 or something similar.
When the computer completely starts you will have a small bare essential operating system instead of your usual layout.
Click:
Start
Run
type in: erdregedit
navigate to the registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\
click and modify the entry:
C:\WINDOWS\System32\wsaupdater.exe
so that it reads:
C:\WINDOWS\System32\userinit.exe
Exit registry Editor by clicking File and then Exit
Click on the Start tab and restart.
As soon as the computer swithces off and then back on to restart, remove your boot cd so that it can boot up normally and you should be able to log back in as normal.
Reply
Castleexplorer Reply:
January 30th, 2010 at 7:57 am
Joe Public cannot download the DaRT.
Reply
Dennis Reply:
January 28th, 2010 at 11:29 pm
I am having the same issue where my computer logs on, then immediately logs off. I followed instructions on bleeping computer. I thought I was rid of my problems yet now I cannot access my computer.
Reply
January 27th, 2010 at 11:10 pm
need to know it it really works
Reply
January 27th, 2010 at 11:10 pm
need the help
Reply
January 27th, 2010 at 11:11 pm
what do you do to make it work
Reply