BleepingComputer.com: Internet Security 2010 removal instructions didn't completely work. What do I do?

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Internet Security 2010 removal instructions didn't completely work. What do I do?

#1 User is offline   lethalaffairs 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 46
  • Joined: 09-December 09

Posted 15 December 2009 - 02:00 PM

I am on a friends computer now which was infected with Internet Security 2010 and it also looks like it is infected with a program called AntiMalware too.

The first thing I did before I found the removal guide for Internet Security 2010 was run Superantispyware. Malwarebyte was disabled by something. SAS found 18 infections. I ran it in normal mode because the computer would not start in safemode.
This computer is running Windows Xp Home Edition.

I then followed the instructions under the removal section for Internet Security 2010.

I first ran rkill.
Then I was able to download, install and update Malwarebytes. I did a full scan and it found 210 things.

I then ran the program you have on here to restore safe mode because before when I would try to boot to safe mode the computer would just restart. I looked in the registry and sure enough safe boot was missing before I ran the program.

I then restarted the computer and was able to boot into safe mode. I was going to run a scan in safe mode but when I went to update Malwarebytes I didn't have an internet connection. I even tried Internet Explorer and that didn't work either.
I tried the repair function in Superantispyware but to try to fix it but every repair I clicked on said it was not allowed by the Administrator. I was logged in as Administrator so I don't understand.

I exited safe mode to see if the computer would boot normally. It booted very very slow. I didn't think that the desktop was even going to load at first because the screen was black and only had the taskbar showing for a very long time. It was worse than when it had all of the pop-ups, the fake Internet Security 2010 and the AntiMalware thing. When the desktop finally loaded it was so unresponsive that I couldn't open anything.

I am now using a UBCD4WIN disc and running a scan with SAS again. What do I do now? This is worse then the virus I just had on my computer.
Is there a way to get Windows to boot like normal and not so slow like it is now? How do I restore the internet in safe mode? What about the other restrictions in safe mode that stopped me from using the repair features in SAS?

What do I do now?

#2 User is offline   Grinler 

  • Bleep Bleep!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Admin
  • Posts: 36,603
  • Joined: 24-January 04
  • Gender:Male
  • Location:USA

Posted 15 December 2009 - 04:06 PM

Check the proxy settings in Internet Explorer. Is it set to use a proxy?

#3 User is offline   lethalaffairs 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 46
  • Joined: 09-December 09

Posted 15 December 2009 - 04:30 PM

I am not really sure. I have never had to configure that before.

The internet is working now using this UBCD4WIN disc.
When I boot into safe mode though it doesn't work and Malwarebytes won't update.

The scan I just ran with SAS didn't really find anything else when running it from this bootable disc.
Should I try MBAM again using this disc? Its about a month old and I can't update it.

I don't even know if MBAM is going to find anything else even if I did run it in safe mode.

#4 User is offline   Grinler 

  • Bleep Bleep!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Admin
  • Posts: 36,603
  • Joined: 24-January 04
  • Gender:Male
  • Location:USA

Posted 15 December 2009 - 04:44 PM

In safe mode, open up internet explorer. Click on Tools, Internet Options, Click on the COnnections tab, click on Lan Settings, and tell me if the proxy is enabled. if it is you need to disable the proxy before you can update MBAM.

May want to run rkill.com beforehand in case a trojan keeps enabling the proxy settings.

#5 User is offline   lethalaffairs 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 46
  • Joined: 09-December 09

Posted 15 December 2009 - 05:10 PM

No proxy is not enabled. I am back on the bootable disc now. I tried out firefox and that didn't work either. So much for safe mode with networking support. Something is changed or network support is not starting. Now what?

#6 User is offline   Grinler 

  • Bleep Bleep!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Admin
  • Posts: 36,603
  • Joined: 24-January 04
  • Gender:Male
  • Location:USA

Posted 15 December 2009 - 05:39 PM

can you create a topic in theMalware removal forum with a DDS log and i will take alook.

#7 User is offline   lethalaffairs 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 46
  • Joined: 09-December 09

Posted 15 December 2009 - 05:50 PM

Can I run DDS is safe mode?

#8 User is offline   Grinler 

  • Bleep Bleep!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Admin
  • Posts: 36,603
  • Joined: 24-January 04
  • Gender:Male
  • Location:USA

Posted 15 December 2009 - 06:00 PM

Not 100% sure. I think you can.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users