Internet Security 2011. How to remove? (Uninstall guide)

removal by Olivia Morelli - -   Also known as InternetSecurity2011, InternetSecurity 2011 | Type: Rogue Antispyware
12

Internet Security 2011 is a program which you should never trust, no matter how trustworthy it might seem at the first sight. This scam is known to be connected with another dangerous program called Antivirus 2010 and it is mostly distributed through fake online anti-malware scanners. Moreover, this scam is extremely difficult to remove because it comes bundled with a rootkit that disables the access to security programs that scan a particular process. When stopped, these programs won’t be capable to launch again because of the security permissions changed by a rootkit. When Internet Security 2011 will change the permission on a program, you will be notified by this Windows message:

Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.

or

Access Denied.

Besides, this cyber threat will display tons of alerts that declaring about numerous viruses detected on your machine and will imitate system scan to convince you about the dangerous situation of your machine. Of course, users won’t be able to remove any virus reported by Internet Security 2011 – only after paying a required fee they are promised that their machines will be safe. However, these “viruses” are completely legitimate your system files that after being removed may cause problems connected with a normal computer’s functionality.
Fake messages of Internet Security 2011 mostly look like that:

Attention! Network attack detected!
Your computer is being attacked from remote host. Attack has been classified as Remote code execution attempt.

Attention! Threat detected!
NOTEPAD.EXE is infected with Trojan-BNK.Keylogger.gen
Private data can be stolen by third parties including card details and passwords.
It is strongly recommended to perform threat removal on your system.

Windows Security Alert
Your computer is making unauthorized copies of your system and Internet files.
You should immediately run full scanning of your system to prevent any unauthorized access to your data.
Click YES to run Antivirus scanner right now.

Remember, first of all you need to remove this rootkit that disables programs designed for scanning your computer’s processes or files. Being created only for swindling your money, Internet Security 2011 won’t stop its activity and you will find yourself disabled from launching any legitimate security program. Besides, if you have already purchased it, contact your credit card company to dispute the charges.

When doing a remove, you will need a good powerful updated antispyware. We would recommend STOPzilla or automatic removal tool from this web page.

do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Internet Security 2011 you agree to our privacy policy and agreement of use.
Reimage is recommended to uninstall Internet Security 2011. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Internet Security 2011 (2010-12-21)
Malwarebytes Anti Malware
We have tested Malwarebytes Anti Malware's efficiency in removing Internet Security 2011 (2010-12-21)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Internet Security 2011 (2010-12-21)
Webroot SecureAnywhere AntiVirus
We have tested Webroot SecureAnywhere AntiVirus's efficiency in removing Internet Security 2011 (2010-12-21)

Internet Security 2011 manual removal:

Kill processes:
exefile.exe

us?rinit.exe

[random].exe

Delete registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{9CB00F85-D96F-1C82-F5A4-A31D57D6528D}

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesuserinit

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesvbma22b4

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiSpywareOverride" = '1'

Delete files:
%AppData%.wtav

c:WINDOWSWinSxSx86_Microsoft.Windows.Shell.HWEventDetector_6595b64144ccf1df_5.2.2.3_x-ww_5390e909

c:windowsWinSxSx86_Microsoft.Windows.Shell.HWEventDetector_6595b64144ccf1df_5.2.2.3_x-ww_5390e909shsvcs.dll

c:WINDOWSassemblyGAC__AssemblyInfo__.ini

c:WINDOWSsystem32exefile.exe

c:WINDOWSsystem32mswmqnei.dll

c:WINDOWSsystem32us?rinit.exe (NOTE the question mark. Delete the file with Internet Security 2011 icon on top, there should be 2 in that folder).

c:WINDOWSsystem32driversvbma22b4.sys

About the author

Olivia Morelli
Olivia Morelli - Ransomware analyst

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author