Internet Security 2010

10 December 2009 Rogue 101 Comments

Internet Security 2010 is another counterfeit security tool for Windows. This type of program is normally promoted as antivirus and protection software to deceive target. Internet Security 2010 virus gets into the system slipping antivirus applications. Related Trojan that earlier contaminated computer will redirect Internet browser to a malicious security web sites that make use of drive-by-download method. When residing inside the system, Internet Security 2010 together with Trojan make sure that user will have difficulties taking the rogue AV out of the system. Certainly, all options and tools found useful to eliminate this unwanted program will be rendered useless. Internet Security 2010 also kills running process of antivirus program causing it full disability. Windows system functionalities and Safe Mode are made inaccessible. Above all, Internet Security 2010 will alter system settings particularly the registry so that it will reign each time Windows is started.

Being in disguise as legitimate security product, Internet Security 2010 is successful in misleading computer users. In fact, some who have encounter with this fake antivirus end up appealing for the registration key. Worst, those that possess credit card account advances to online payment processing web site to obtain the full version of Internet Security 2010. This action is heading to stolen credit card credentials and redundant charges on transaction.

Screen Shot Image:

Technical Details and Additional Information:

Damage Level: Medium

Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7

Added Registry Entries:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run "Internet Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run "winupdate86.exe"

Associated Files and Folders:

%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
%UserProfile%\Desktop\Internet Security 2010.lnk
%UserProfile%\Start Menu\Internet Security 2010.lnk
c:\s (or any letter)
c:\Program Files\InternetSecurity2010
c:\Program Files\InternetSecurity2010\IS2010.exe
c:\Windir\system32\41.exe
c:\Windir\system32\winhelper86.dll
c:\Windir\system32\winlogon86.exe
c:\Windir\system32\winupdate86.exe

File Location for Windows Versions:

• %UserProfile% for Vista/7 user is C:\Users\<Current User> for Windows Vista/7, for Windows XP/2000 this is C:\Documents and Settings\<Current User>.
• %Windir% refers to the installation folder of the operating system.

Manual Removal Procedure

1. Unload any running Internet Security 2010 process by pressing Ctrl+Alt+Del on your keyboard. This will open Task Manager. Look for the following process and click on End Process.
IS2010.exe, ave.exe

2. If there is an antivirus program installed, connect to Internet and update it to have the latest database and pattern files.
3. Thoroughly scan the computer and clean/delete all infected files. Check if there are remnants of virus-related files, delete if found.

4. Edit Windows registry and delete Internet Security 2010 entries. [how to edit registry]
5. Close registry editor, changes will be save automatically.

6. Remove Internet Security 2010 start-up entry by going to Start > Run, type msconfig on the "Open" dialog box. System Configuration Utility will open. Go to Startup tab and uncheck these Startup items.
IS2010.exe, ave.exe
7. Click on Apply and reboot the computer for changes to take effect.

Internet Security 2010 Removal Tool

For automatic removal of this malware, please click here to download anti-malware tool. There are instances that Trojan will block the downloading of our recommended tool. On this situation, please download the file from a clean computer. Rename the file before installing it on the infected system.