How to remove Internet Security 2010

Why would you want to remove this security product?
Well, it is NOT a security product. Internet Security 2010 is a rogue piece of software that pretends to be antivirus security software. In fact it itself is a virus which renders your computer unusable.

So how do I know if I have Internet Security 2010?
Well this part is easy. If you are infected with IS2010 it will pop up on screen when you turn on your computer and kicks off a fake scan. Your screen will be plastered with several warning messages saying that your computer is infected, do not use your computer etc etc.

What exactly does Internet Security 2010 do?
IS2010 renders your computer unusable and presents you with warning messages stating that you have several viruses. The software will present you with a page where you can purchase the professional version of the software "that can remove the viruses and make your computer usable again". Of course the makers of this virus only want your credit card details to get their grubby hands on your hard earned cash.

How did I get this virus?
Users with up to date,active antivirus scanners can still get infected with this virus. Most of the time the virus gets in by fooling the user into installing it. This can be through banners and ads on web pages that promise funny pictures and money amongst other things. USER BEWARE!

How do I get rid of this virus?
There are a few things you can try to get rid of this virus. I have removed this particular virus from 2 machines to date.

(1) Download and run Combofix. The link provided will give instructions on how to use the file and also where to download it. If the virus stops you from running combofix, try renaming the file to a random name.



(2) Download and run Malwarebytes Antimalware.


or

(3) Find the following files and registry entries and delete them.

Associated Internet Security 2010 Files:

c:\s
c:\Program Files\InternetSecurity2010
c:\Program Files\InternetSecurity2010\IS2010.exe
c:\WINDOWS\system32\41.exe
c:\WINDOWS\system32\winhelper86.dll
c:\WINDOWS\system32\winlogon86.exe
c:\WINDOWS\system32\winupdate86.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
%UserProfile%\Desktop\Internet Security 2010.lnk
%UserProfile%\Start Menu\Internet Security 2010.lnk


Associated Internet Security 2010 Windows Registry Information:

HKEY_CURRENT_USER\Software\IS2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winupdate86.exe"


Will I run into any difficulties along the way?
I advise to try the steps in order. IS2010 may stop combofix and malwarebytes antimalware from starting. in this case you have to try step 3.

IS2010 might stop you from opening regedit to get at the registry entries. In this xase rename regedit to regedit1.

If step 1 and 2 fail, complete step 3 and then retry step 1 and 2.