Internet Security 2010 Removal Guide

See these Forums for Guides/Assistance


Internet Security 2010 is a rogue anti-spyware program that is installed through the use of malware. Once installed, Internet Security will be configured to start automatically when you login to Windows. It will then scan your computer and display numerous infections, but will not remove anything until you purchase the program. These infections, though, are all fake and are only being shown to trick you into thinking you are infected so that you then purchase the program. It goes without saying that you should definitely not purchase this program.

It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files suggested in this guide to another computer and then transfer them to the infected computer via a CD/DVD, external drive, or USB flash drive. If this is not possible, see the >>RescueCD>> section on home page.

Step 1.

>>BleepingComputer’s Internet Security (Uninstall Guide)<<

>>Malwarebytes’ Internet Security Removal Guide<<

NOTICE: New information from Bleeping Computer on

How to Remove the TDSS,TDL3, or Alureon rootkit using TDSSKiller

The tools needed for this removal are:


For cleaning of Temp Files

>See Screenshot’s<


Malwarebytes’ Anti-Malware

See the Tutorial for specific instructions.

>Malwarebytes’ Tutorial<

If Malwarebytes’ will not install see*****HERE*****


When Malwarebytes’ will not run see*****HERE*****

Common Issues,Questions,and their Solutions

Step 2. If needed

Download SUPERAntiSpyware!

>SUPERAntiSpyware Tutorial<

When SUPERAntiSpyware will not install or run see*****HERE*****

SUPERAntiSpyware Online Safe Scan

SUPERAntiSpyware Portable Scanner can be downloaded from a different computer and run on the infected computer. The scanner does NOT install anything on your Start Menu or Program Files and does NOT need to be uninstalled. It runs from the CD and requires NO internet connection. If the infected computer can not download, then this is a solution. Simply download the portable scanner and copy it to a USB/CD. NOTE: The portable scanner is random named to prevent the malware from stopping the scanner from running. For more software similar to this see the RescueCD software section on home page which scan an infected system and can recover personal data due to infection/defective or failing hard drive.

Ccleaner for a good clean-up



Step 3.

Clean System Restore

Four steps to this. #1. Have your antivirus open and set to full scan and running. #2. Turn off system restore. #3. Launch ATF and clean until “No Files Cleaned”. #4. When scan is finished, turn system restore back on and create a restore point.

NOTE: Make sure that your computer is clean before taking these steps.

See below for instructions on how to use System Restore.




If you are still having issues see

When should I re-format?

>>>Microsoft How to Get Rid of Malware<<<

>>VMSAR Virus/Rogue Removal Guide<<

>>How to Start Windows in Safe Mode<<

>>How to use the Task Manager<<

>>How to use the Microsoft Malicious Software Removal Tool<<

>>How to Install, reinstall, or uninstall Windows<<


Online Scanners

That Detect and Remove for Free!


Manual Removal Section:Caution,a mistake here could cause system failure.  😦

Internet Security Associated Files:

c:\Program Files\InternetSecurity2010
c:\Program Files\InternetSecurity2010\IS2010.exe
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk
%UserProfile%\Desktop\Internet Security 2010.lnk
%UserProfile%\Start Menu\Internet Security 2010.lnk

Internet Security Windows Registry Information:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Internet Security 2010”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “winupdate86.exe”

Issues that “may” be in a HijackThis log:

F2 – REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon86.exe
O4 – HKLM\..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate86.exe
O4 – HKCU\..\Run: [Internet Security 2010] C:\Program Files\InternetSecurity2010\IS2010.exe
O10 – Unknown file in Winsock LSP: c:\windows\system32\winhelper86.dll
O10 – Unknown file in Winsock LSP: c:\windows\system32\winhelper86.dll

Have your HijackThis log analyzed*****HERE*****Copy your log and paste it in the box at the site and wait for the results. Scroll down the page and you will see a detailed description of each entry and suggestion actions to take,if any, with each, but before you do use SystemLookup below to double check the results. A mistake here can cause Operating System Failure!

Use*****SystemLookup*****as a reference resource for HijackThis

>HijackThis Tutorial*****by BleepingComputer


If you run across a file that is not being detected or removed, you can upload the file to*****VIRUSTOTAL*****and they will analyze it and when the results are shown, it will give a list of whatsoftware’s are detecting the threat and which are removing it, kinda takes the guess work out of the equation.


Other Useful Infromation:

>Virus Identification Resources<

>Security Software, Online Scanners and Virus Removal Tools<

Video on “How to Remove Malware for Free” by Mirzo’s



Posted February 16, 2010 by Wide Glide in Virus Removal

All Things Equal

A fine site

Everything Anti-Malware!

Reviews, Step-by-Step Guides,Toolkits and News

TechNet Blogs

Malware Removal

SUPERAntiSpyware Blog

Malware Removal

Security Garden

Malware Removal


Malware Removal

miekiemoes' Blog

Malware Removal

Malwarebytes Labs

Malware Removal

Metallica's blog

About malware

Malware Removal

Opera News

Malware Removal is the best place for your personal blog or business site.

%d bloggers like this: