Comments on: Internet Security 2010

By: shyamsunder

shyamsunder — Mon, 25 Oct 2010 09:03:42 +0000

hi this is shyamsunder

By: highlanderRI01

highlanderRI01 — Tue, 14 Sep 2010 15:13:27 +0000

Ok, this virus thing stinks, especially when your mom s’ PC is infected and she knows or wants to know zero about it except getting on internet.
Went to house with flash drive full of tools to help her with what sounded like an easy problem to solve. Not this time. If I had known, I would have brought a Linux distro with me.
Anyhow her system was locked up, unless clicking on the fake security software icon, which brought you to there site. Everything else not happening including safe mode and accessing my usb key.

Had to do complete reinstall of Windows XP, plus all her dell drivers and reformat the hard drive, plus partitions. because it got really late still have 2 more hrs work to do to make computer work the way she needs it to. Got to luv this stuff! it could have been worse, not likeley

By: bav

bav — Sun, 29 Aug 2010 09:18:28 +0000

If you can’t get your programs to run because of the virus. (Anti-Spyware Programs and rkill), turn off your computer and turn it back on. When your home screen comes up click your programs immediatley because the virus takes a few seconds to initiate. They should start running before the virus does. I used AVG for this and it worked like a charm.

By: tdss

tdss — Sun, 08 Aug 2010 15:59:21 +0000

Well ? got rid of this manually but this also installed the tidserv rootkit on my pc. The authors of tidserv and ?S2010 should be punished!!!

By: badalmishra

badalmishra — Sun, 11 Jul 2010 01:25:46 +0000

please download a trial verson

By: Margil

Margil — Mon, 10 May 2010 05:37:10 +0000

By the way i used Firefox to access the internet. Internet Explorer was completely blocked. Go Mozilla Firefox !!

By: Margil

Margil — Mon, 10 May 2010 05:27:24 +0000

I got it this weekend, on mother’s day.
I ran Spybot in safe mode and that allowed me to use the internet. Then i downloaded RKill and malwarebytes. It took several attempts but finally managed to stop the pop-ups. Malwarebytes deleted most of the rest. But some remained. And i noticed that the offending programs are written under Apple’s quicktime names. Check your task manager and look for QuickTimeQwickTime.exe. (Yes, it is double), and other Quicktimesomethings. These are the programs that everytime you open windows media tell you that you need a special codec, and if you click on the “get the codec”, it downloads the original security 2010 all over again!.
Apple’s Quicktime is one word. Security 2010 is the same word eithere double or with something else beside it. If in doubt, delete all “quicktimes”. The real Quicktime program can be downloaded again later.

By: Stephanie

Stephanie — Wed, 28 Apr 2010 23:13:06 +0000

So… I got this virus MONTHS ago. I followed instructions awhile back to get rid of it using the system restore and i thought it was gone but today they pop-ups returned. Thankfully my internet worked because I had deleted most of it a few months ago so I was able to download Malware Bytes and it deleted the virus.

Now that i restarted though, I have no internet access. It says there is limited or no connectivity and when i try and repair the connection it says it cannot be repaired. ANyone know how I can get my internet working again?

I have windows XP by the way

By: Joe

Joe — Mon, 19 Apr 2010 04:16:04 +0000

Yes this is a tough virus. I’ve had it twice.

1. If you already have it and its bad enough you can’t log in, you have to interrupt prior to login to force it into safe mode. You should normally be able to hit the F2 or F12 key during boot up depending on make and model.

With my Gateway laptop, just putting in the restore disk prior to boot up was enough to send it into restore mode if I remember.

If you can’t get that to work after many tries:
***This is not recommended as there can be risk of damage***, but if the problem is so bad you are thinking of trashing your PC… with a lap top you can disconnect power cord, start log on, then interrupt the boot up procedure by yanking the battery, ***wait 2 mins*** to allow electrical components to discharge (lessens chance of damage), put battery back in, hook up power, and relog on. This time your notebook should automatically go straight into safe mode or give you that option because normal boot up was interrupted. ***ONLY TRY THAT AT YOUR OWN RISK and as a LAST RESORT***

While in safe mode, you will be able to run a restore disk.

2. This bug spawns itself into many areas.

One thing you can do once you can get the task manager running (Control Alt Delete) is to go to processes and click “Process Name” to cause it to sort the programs by name (This will stop them from jumping around if it is set to sort by CPU usage) Then look for any program that keeps showing activity over and over and that does not seem familiar to you. Program names like “systemsystem.exe” “UCNC.exe” and “m.214.tmp.exe” were culprits on mine.

If you are in safe mode you should be able to search and delete them after turning them off. This virus seems to know when its parts are turned off (!) and will try to set up in another file until your antivirus quick or deep scan gets to the main bugs and quarantines them.

I deleted enough of these things enough to get it under ‘control’ , then rehooked internet cable, and then uninstalled McAfee which wasn’t helping and downloaded the free version of VIPRE by sunbeltsoftware dot com and ran a quick scan with that and then a complete scan.

I still had a few problems but VIPRE has a neat feature that helped…. in the Tools Folder, click PC Explorer and it will tell you everything that is running, everything that is set to start at startup etc. This is good for identifying any remaining problems after the scan, because not all malware is easily identified. Any programs running that do not have a publisher etc need to be looked at very closely.

I still have something trying to call dll files that have been removed (probably a registry problem) One of the .dll files is named effecc.dll. So on bootup, I get 3 error messages, 2 messages for effecc.dll and 1 message for another dll I can’t remember right now.

I’ll look at the malware detector mentioned above to see if it can help.

By: corey

corey — Sat, 27 Mar 2010 13:56:03 +0000

also part of the virus is ave.exe (kill the process tree)