Internet Security 2010 (also known as IS2010) is a rogue antivirus program. Please read the removal instructions and get rid of this fake program from your computer as soon as possible. InternetSecurity2010 is a clone of
Advanced Virus Remover malware. If you take a closer look, you will see that both programs use the same graphical user interface. This rogue application is promoted through the user of Trojans. Most of the time, Trojans have to be manually installed and may come from various misleading websites, for example fake online anti-malware scanners. When running such media player processes as QuickTimePlayer.exe, AdvancedDVDPlayer.exe, tvp.exe, realplay.exe, windvd.exe, winamp.exe, setup_wm.exe, LA.exe, PowerDVD.exe, mplayerc.exe, wmplayer.exe, Internet Security 2010 additionally displays many fake error messages, such as:
Windows can`t play the folowing media formats: AVI;WMV;AVS;FLV;MKV;MOV;3GP;MP4;MPG;MPEG;MP3;AAC;WAV;WMA;CDA;FLAC;M4A;MID. Update your video and sound codec to resolve this issue!
Internet Security 2010 imitates a system scan and reports many false system security threats. Then it will redirect its victims to vs-codec-pro.net where it is asked to pay for a full version of the program to remove those security issues or infections. However, do not buy it - this is a scam.

[Figure 1. Internet Security 2010 graphical user interface]
When running, Internet Security 2010 will also display fake security alerts. Those alerts will state that IS2010 has found critical vulnerabilities on your computer. The rogue program displays these infections:
Rogue:W32/XPAntivirus.gen!
AdWare.Win32.Zwangi
Trojan-Spy.HTML.Visafraud.a
Worm:W32/Agent
Trojan-PSW.W32/Steam
Net-Worm.Win32.DipNet.d
Trojan-Dropper:W32/Trojan-Dropper
Worm:W32/Downadup.gen
Trojan-Downlaoder:W32/Fakerean.gen!A
Net-Worm.Win32.Mytob.t
Trojan-Spy.Win32.Hookit.11
Trojan-Clicker.HTML.IFrame.g
Virus:W32/Alman.b
Trojan-Dropper.Win32.Agent.sd
Email-Worm.Win32NetSky.q
riskware.Win32
Rootkit.win32.agent

[Figure 2. Internet Security 2010 - fake security alert]
The supposed infections are usually detected in Windows System or System32 folder. If you decide to remove these infections with Internet Security 2010, you will get an activation windows [Figure 3] with further information what to do. This fake window states that application cannot be executed, the file is infected and a currently installed version of InternetSecurity2010 is for trial purpose only. You have to buy an activation code to remove the infections, which of course do not even exist.

[Figure 3. Internet Security 2010 - activation pop up]
Internet Security 2010 will also display fake notifications from Windows Taskbar. The fake notifications state:
System warning!
Intercepting programs that may compromise your privacy and harm your system has been detected on your PC. It's highly recommended you scan your PC right now.
System warning!
You've just launched an IS2010 Setup program. Please wait for 1-2 minutes till installation will complete.

[Figure 4. Internet Security 2010 - fake notifications]
At the same time you will be taken to the pay page of the InternetSecurity 2010. It is shown in the image below [Figure 5]. As you can see, it costs almost $50 dollars and even state that now they include AVG Firewall and Email Protection for free. That's obviously not true.

[Figure 5. Internet Security 2010 - purchase page]
There should be no doubts about this fake application. It's totally useless and even dangerous. Please use the removal guide below and remove IS2010 manually for free or use an automatic removal tool for this infection. If you have inadvertently purchased this bogus software, contact your credit card company and dispute the charges. Also note that this infection can block antivirus software. If you can't launch an automatic removal tool, please end the Internet Security 2010 process first. Open Task Manager or use
Process Explorer and terminate IS2010.exe. Good luck!
Related files:
Internet Security 2010.lnk,
IS2010.exe,
41.exe,
winhelper86.dll,
winlogon86.exe,
winupdate86.exe
Internet Security 2010 properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.
By Downloading any provided Anti-spyware software to remove Internet Security 2010 you agree to our
privacy policy and
agreement of use.
Internet Security 2010 manual removal:
Kill processes:
IS2010.exe
41.exe
winlogon86.exe
winupdate86.exe
Delete registry values:HKEY_CURRENT_USER\Software\IS2010
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Internet Security 2010"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winupdate86.exe"
Unregister DLLs:winhelper86.dll
Delete files:IS2010.exe
41.exe
winhelper86.dll
winlogon86.exe
winupdate86.exe
Internet Security 2010.lnk
Delete directories:C:\s
C:\Program Files\InternetSecurity2010\
Then follow the above instructions.
Jan
Any ideas?
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
在右窗格, 連按兩下 DisableTaskMgr 。
[ 數值資料 ] 方塊中鍵入 0 , 然後再按一下 [ 確定 ]
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
double click DisableTaskMgr 。
Input 0
I did get a download from the 3rd alternate site and did a Spyware Doctor install. Just got it started running now...very slow process.
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonUserinit
from winlogon86.exe
to userinit.exe
If don't, windows performs an automatic logout.
and no taskmgr, cmd prompt or regeit is opening..
m worried..
shud i download the software
i tried malware it detected it and stuff but i still had.
I then deleted it and it whent away but came back!
Cristian de Argentina.
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
it will say internet security 2010..
just delete it..
and delete the one in C: program files INTERNET SECURITY 2010
What can i do
Do i have to wipe the harddrive
How do I get rid of this damned thing?
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonUserinit
from winlogon86.exe
to userinit.exe,
(yes you need to comma)
This is important to do otherwise it will keep coming back.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "winupdate86.exe"
Rock on.
i am still unable to change my desktop after removing the NoEDTWallpaper or whatever in the registry.
I have try manually, but failingly.
I need help
Paul
"netsh winsock reset" and restart the machine.
"netsh winsock reset" and restart the machine.
Start/Programs/Accessories/System Tools/System Restore
Thanks for providing it.
excalibur (sweden)
Rebooting my pc in save mode, gave only the Windows Explorer.
Lucky I had Spyware Doctor to help remove it. After going back to a restorepoint, IS2010 was gone.
I'll download the remover up here to be sure, now.
good luck guys! DON'T buy this shit!! If i found out who made this i swear to god i will beat the shit out of them!!
It's a pretty stupid virus and is actually pretty easy to remove.
... also turned off the m/soft firewall ... my malware had to be different :o)
... went to "start" run (type) regedit .... OK ... follow path:
+HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center
i asking windows automatice remover
ooooooooooohhh
documents and settingsall usersISECURITY.exe
i deleted it an all instances in the registry and voila.
You can probably try this-
step 1 - find the folder for "issecurity shortcut icon (you can rigthclick to open file location)
Step 2 - rename file "issecurity" to any filename
Step 3 - Shift delete the entire folder (this will not allow you to delete file at first - follow the next steps)
Step 4 - restart your PC
STep 5 - find the folder for "issecurity icon (you can rigthclick to open file location)
Step 6 - Shift delete the entire folder (this time it will allow you to delete the file) - then you can delete the shortcut icon on your desktop
hope this works,...
Post Comment: