Saturday, January 16, 2010

How to remove Internet Security 2010 virus

The name of the virus is called IS2010 or Internet Security 2010 virus it cheated users think that is legitimated software but is a kind of Trojan virus

Details: http://www.myantispyware.com/2009/12/10/how-to-remove-internet-security-2010-uninstall-instructions/

There are 2 ways to remove it
1. MalwareBytes Anti-Malware
Run Windows in Safe mode with internet connection and downloaded and installed MalwareBytes. If you have 2 computers downloaded into USB Flash and copy it to infected computer than install the MalwareBytes. This is what I did for my system.
After installation, scan and remove. It works.
If your computer infected with this virus you cannot access twitter.com or youtube.com everytime you try to access this site it will return with `your system is infected. Please scan the antivirus`.

2. Do by Hand
Internet Security 2010 manual removal:
Kill processes:
IS2010.exe 41.exe winlogon86.exe winupdate86.exe
HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\IS2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winupdate86.exe"


HELP:
how to remove registry entries

Unregister DLLs:
winhelper86.dll
HELP:
how to unregister malicious DLLs

Delete files:
IS2010.exe 41.exe winhelper86.dll winlogon86.exe winupdate86.exe Internet Security 2010.lnk
HELP:
how to remove harmful files

Delete directories:
C:\s
C:\Program Files\InternetSecurity2010\

No comments: