Description
Although not treated as a computer virus, Internet Security 2010 is able to cause enough trouble.
Removal instructions
To remove this Spyware infection, download Spyware Doctor, install it and run full computer scan. At the end of the scan choose Fix Checked to start computer cleaning process.
Behavior
· Annoying pop-ups. Alerts and warnings appearring frequently and stating that the computer has been infected. It also can be promotional message asking to register or buy some rogue program.
· Desktop changes. Desktop background (wallpaper) is changed with advertising or warning message promoting fake anti-spyware software. Taskbar together with desktop icons might disapear as well.
· Disabled Task Manager. Blocked from opening either displaying some alert message or without it.
· Exaggerated PC scan reports. Even if the computer is clean scan report stating that the system is infected is generated.
· Fake security warnings. Warnings stating that the computer system is not secure.
· Fake virus alerts. Alerts stating that spyware or viruses have been detected on the computer system.
· Slow computer. Slower computer performance noticed.
· The risk of fraudulent payment. Frequent user persuading to buy rogue program license.
Files
C:\Program Files\InternetSecurity2010\IS2010.exe
C:\Documents and Settings\[username]\Desktop\Internet Security 2010.lnk
C:\Documents and Settings\[username]\Start Menu\Internet Security 2010.lnk
Symptoms in Hijackthis
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon32.exe |
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon86.exe |
O4 - HKLM\..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate86.exe |
O4 - HKCU\..\Run: [Internet Security 2010] C:\Program Files\InternetSecurity2010\IS2010.exe |
O4 - HKLM\..\Run: [smss32.exe] C:\WINDOWS\system32\smss32.exe |
O10 - Unknown file in Winsock LSP: c:\windows\system32\winhelper86.dll |
O10 - Unknown file in Winsock LSP: c:\windows\system32\winhelper86.dll |