Comments on: Antivirus 2010

By: Remove Internet Security 2011, InternetSecurity 2011 removal steps

Remove Internet Security 2011, InternetSecurity 2011 removal steps — Mon, 20 Dec 2010 14:22:30 +0000

[...] protection tool. Internet Security 2011 is a computer infection and it is a clone of the infamous Antivirus 2010 [...]

By: Still

Still — Fri, 17 Dec 2010 09:23:12 +0000

First of all do search for the files that were created about the time you get infection. Short-list the to ones that is 200-1000kb in size. Doesn’t matter what’s the extention. Connect the disc to other PC as a non-booting slave. Move those shortlisted files in your newly created folder that is not in system %PATH% variable. Scan this slave disk using all the available newest real antivirus programs. Return the disk to the original PC and boot in safe mode, note all the error messages regarding non existing files and remove related link in registry.

NEXT:
Do not use Internet Explorer – AT ALL. It’s the biggest system hole. Use Firefox stuffed with NoScript, AdBlockPlus and NoFlash. That’s the combination that keeps me out of viruses for 5 years already, despite the fact that I do not use any real-time antivirus.

By: Remove New version of Antivirus 2010 malware

Remove New version of Antivirus 2010 malware — Wed, 20 Oct 2010 13:11:33 +0000

[...] Antivirus 2010 is not a new fraud but the scammers keep “releasing” new versions. If you are looking for a removal of old version, use this Antivirus 2010 removal tutorial. [...]

By: Luciana

Luciana — Mon, 11 Oct 2010 22:23:08 +0000

The files might be different on different computers. Have you tried running antispyware scan?

By: Kall

Kall — Thu, 07 Oct 2010 13:43:59 +0000

There is NO AV2010, Antivirus2010, wingamma etc nothing that was said above shows up but yet the virus is there and i cannot locate it. heeeelp

By: Craig Jeavons

Craig Jeavons — Thu, 08 Apr 2010 08:14:12 +0000

I found another tip I just wanted to share.

I had the XP AntiSpyware and it was blocking everything from running, Internet, programs everything.

I downloaded the malware programs menioned above to a USB stick and copied them to the infected PC. Double clicking them wouldn’t run as I was getting the error messages in the posts above. BUT…if you right click and select ‘Run As..’ Then untick the box under your username that says that protection is on. The program will then run and you can install the malware remover.

This might only work on XP but it worked for me and my laptop is now clean again within an hour or so.

By: Luciana

Luciana — Thu, 25 Mar 2010 07:32:52 +0000

There's no sure way of knowing if the scammers got your personal details, but you should call local authorities of your bank and explain what happened. These things are quite common and bank should have some procedure for this. They may even be still able to cancel your payment. Now, if Antivirus Vista 2010 is still on your computer, use this removal tutorial.

By: Mary

Mary — Thu, 25 Mar 2010 02:44:24 +0000

OMG…. I was suspicious it was fake, but it wouldn’t even let me get online, and so there wa no way for me to research about it. I Paid the anti virus vista 2010 to fix it…. So basically I paid money for something that is fake…. what should I do? do they have al my personal information??? whatshould I do??

By: srgrimm

srgrimm — Mon, 22 Mar 2010 01:49:08 +0000

Why can’t these guys who are doing this be found and shut down? I know my ip is all over the place when I visit sites….so why not these culprits…
Thanks for all the useful info.

By: Harris

Harris — Tue, 16 Mar 2010 22:44:42 +0000

Hi Everyone. i have Antivirus 2010 on my desktop sooo im using my laptopto look for sites tht will help me get rid of it. Almost every site ive been to has told me to get rid of the virus 1 of 2 ways. it says to either delete these files manualy by searching for them or to download sumkinda dleter program. i tried doing the manual search and typed in the file names but my search engine has already been hacked and i cant use it. so then i heard about restarting the computer to before u got the virus. NOPE! my restart has been hacked too so it doesnt show a calander and the program becomes unresponsive so i have to x out of it. ive tried everything i can think of and im usualy very good with computers but this is outa my league. -.- any suggestions on what i can do (besides uploading another program) to get rid of it?

By: Mjolnir

Mjolnir — Sat, 13 Mar 2010 06:29:28 +0000

A good antivirus program will protect you from being hijacked, and you should definitely get a firewall program. Comodo and Avira are great programs that you can get for free. I used to have AVG free and it was pretty useless. Avira caught a lot of malware that AVG completely missed. It’s also good to remember not to download anything in an email unless you were expecting it, like a receipt from a site you ordered from or a friend.

By: Mjolnir

Mjolnir — Sat, 13 Mar 2010 06:22:37 +0000

And as a sidenote: This virus literally gets worse as you try to fix it. Be careful and make sure that your important data is always backed up.

By: Mills

Mills — Tue, 09 Mar 2010 04:05:30 +0000

Got this Vista Anti virus pro from nowhere. Stopped me from surfing the internet no access to anything. I use windows vista. Failed to perform systems restore as unable to select a restore point, only dates available were the ones already highlighted.

So whenever l did a restore, it brought me back to the pop-ups. Used the task manager to analyse activities in the CPU, following a reboot watched ones with highest activity when pop-ups where active, my culprit was av.exe. As soon as l deleted the file the pop-ups stopped only to come back whenever l tried to use internet explorer.

In the end managed to leave windows for both the task manager and the vista anti-virus running (somehow managed to slow the virus down giving me time) and searched the net with success downloading the Spyware Doctor which successfully stopped all the problems. It took me nearly 10 hours.

Found all the advice and suggestions from everyone very helpful. Now l can get back to my research. Let’s continue to fight this alien. Thank you everyone.

By: Chris

Chris — Mon, 08 Mar 2010 13:50:40 +0000

Looking for assistance. I manually deleted the files for the XP Antispyware 2010 malware. Now, when I try to open programs, I am getting the message: “This file does not have a program associated with it for specifying this action. Create an association in the Folder Option control panel”.

Also, can not download Firefox, probably for the same reason.

Any help?

Thanks

By: Luciana

Luciana — Mon, 08 Mar 2010 11:32:21 +0000

Use the manual removal guide posted on this page; simply scroll up this page till you see note “Antivirus 2010 manual removal instructions”. You can print the guide on another computer if you can’t access it from the infected machine.

By: Rachel

Rachel — Mon, 08 Mar 2010 01:51:19 +0000

Same as Stan — this is the second time I’ve been hit with it in less than a month. I managed to get it off manually the first time, since I couldn’t get anything to run, but this time I don’t have any of those registry files listed.

By: sonicman

sonicman — Sun, 07 Mar 2010 18:22:54 +0000

Hey, i followed the directions perfectly, but whenever i log in on non safe mode, it freezes, and safe mode works fine.

Help?

By: Jasmine

Jasmine — Sat, 06 Mar 2010 19:13:21 +0000

How did you get rid of the virus. I have the same one and it is taking away my internet access also. Thank You

By: Bunky

Bunky — Fri, 05 Mar 2010 17:20:44 +0000

Dusty, you are indeed the man! This worked on both our computer and one at my brother in law’s, who both got it while visiting the same website. You saved us much money and time!! Kept trying to delete registry files, but we didn’t have any of the ones listed because we didn’t actually install. You Rock!!!

By: Luciana

Luciana — Fri, 05 Mar 2010 07:17:14 +0000

You may have different infection or Antivirus 2010 may have been updated by its creators. If it’s the latter, we will update the removal guide as soon as possible.

By: Stan

Stan — Thu, 04 Mar 2010 18:52:01 +0000

I cant find any of the registeries listed here

By: Fid

Fid — Thu, 04 Mar 2010 05:06:55 +0000

Thank you for the exe fix. Saved me a LOT of time.

By: Emm

Emm — Sun, 28 Feb 2010 21:17:57 +0000

Thank you so much! I was in a real fix there, it took away my internet access!

By: Kayode

Kayode — Sat, 27 Feb 2010 21:17:54 +0000

Amazing! Every website I’ve visited only gives solutions on how to remove this malware. Not one has mentioned how to protect your PC from being hijacked in future. Does anyone know of any program that will prevent this malware from installing itself and creating havoc?

I currently have the free version of AVG which obviously is useless as my laptop has been affected a couple of times but I’m willing to pay for a an antimalware as long as I know it will work.

By: Steven

Steven — Fri, 26 Feb 2010 10:17:18 +0000

i have gotten rid of the virus but doing so my computer fails to load the exe

when i open any exe files i have to go the the computer and actually find the exe file in my computer kinda like how you open a torrent and have to find utorrent to load it

any help on this situation ??

By: JR

JR — Mon, 22 Feb 2010 14:19:19 +0000

If you have managed to do a system restore i dont think you got hit with the virus or hit hard, i wasnt able to restore my system.
So as you did thats a good sign, normally most virus’s disable and delete all your previous restore points.
As you have restored and all is working fine? delete all your restore points as its in the restore file that can keep any virus’s or infected files.
To delete them you just need to turn off restore and then turn it back on again, its when you turn it off it will delete all previous restore points.

To create the bat file for taskmanager:
Right click desktop>New>Text Document
Rename the document to taskmgr.bat press enter and click yes on the prompt
Right Click taskmgr.bat click edit
In the notepad typr taskmgr.exe > click file and save close notepad via the red x
double click the bat file to launch taskmanager..

By: TD

TD — Mon, 22 Feb 2010 04:52:53 +0000

Found the solution for the task manager part : backup and restore to a point 1 week+. However, I am still concerned about any existing files that are potentially dangerous, please help.

Thanks again in advance.

By: TD

TD — Mon, 22 Feb 2010 04:27:45 +0000

Hello, I recently “recieved” the Vista Antivirus 2010, and I immediately restored my computer to a previous date. It doesnt seem as though i have it anymore, however, I cannot find nor start task manager.
@ JR, I need help with creating .bat files via right click> new> text document.
Whenever i save (for example), regedit.exe, and reopen the text document, it only shows the text and does not run the regedit.
If this helps, I have windows Vista.
When in safety mode command prompt, i tried tracking wingamma.exe listed above in the manual remove section, however, it cannot be found, does this mean i have rid of the virus? If that is the case, why can’t I start task manager?

Please reply Asap. Thanks in advance!

By: Khan

Khan — Sat, 13 Feb 2010 20:55:45 +0000

Thanks for your valuable information JR. I had the defender 2010 virus on my system due to my carelessness of not upgradeing my Mcafee anti virus. Once I identify the message as virus I upgrade my anti virus which removed all the virus files but then left me with the same issue as you where I could not open my regedit.
So when on to start my system in Safe mode with comand prompt
then entered : regedit
showed a the regedit window
follow exactly the same steps as above.
Thanks fully it is working now. Hopefully I shouldnt face any more issues.

Thanks once again JR.

KHAN

By: JR

JR — Mon, 08 Feb 2010 15:13:57 +0000

I had XP antivirus Pro 2010 on my work laptop windows XP, the files that the removal guides gave were different to mine.
However I couldnt run any exe files, there is two ways to run exe files with this problem, Safemode with command prompt or create a .bat file on your desktop.. right click>New>text document..
Rename it to text.bat right click the bat file and clcik edit..type the name of the exe file you need to launch, in my case regedit.exe then click file and save in the text editor.
Double click the bat file now and it should launch the program you entered when editing it.

My culprit file was called AV.exe which was found in C:\Documents and Settings\User\Apllication Data\AV.exe.
You will need to create a .bat file to launch taskmanager.exe as above and stop the process from running, in my case it was AV.exe. then delete AV.exe

Create a .bat file for regedit and launch it, navigate to:
HKEY_CLASSES_ROOT\.exe
Backup the .exe folder encase things go tits up: Right click the .exe folder and click export save it to your desktop.
Under the .exe folder in the registry editor You should have one subfolder called PersistentHandler, i had a load of sub folders which i deleted (right click folder delete)
This is the important part one of my subfolders was launcing the AV.exe program which is why all exe programs were blocked from executing.
Highlight the .exe folder, over on the right side of the regeditor you should have a entry called (default) Double click (Default) make sure the value is exefile and click ok.

Reboot your machine.. I cannot guarentee this will completly fix it but i have mine working fine with viruses found by zone alarm so far..

By: MC

MC — Fri, 05 Feb 2010 11:30:50 +0000

I removed everything by manual…. and may i ask why i cant open my task manager??

By: Luciana

Luciana — Thu, 04 Feb 2010 07:26:34 +0000

Proceed to other steps. You should be able to remove this infection without blocking the malicious websites.

By: ohmysweetstars

ohmysweetstars — Thu, 04 Feb 2010 04:09:26 +0000

Hi. Im having difficulties getting past the first stage- blocking the rouge websites. It wont allow me to save the updated host file. how do i do this?

By: Pete

Pete — Wed, 20 Jan 2010 13:26:32 +0000

Hi wooie and claudio, I have similar problem to you cannot get laptop to boot in any mode is there a way to jump it out of this loop it’s stuckin in so as to be able to try to start it and start removal? How did you start from the system cd? Can you save any of the data on the computer while doing this? Greatful for any help!

By: Steve

Steve — Tue, 19 Jan 2010 04:15:17 +0000

My system shows Advir2010. Is this just another version of Antivirus 2010?

By: Wooie

Wooie — Mon, 18 Jan 2010 20:29:06 +0000

uhm… yes it does cause what you’ve described, if you first run some sort of anti-spyware program and it partially removes the virus, assuming it’s just like “Internet Security 2010″, which just messed with my computer for two days of hell. If you remove anything (one of the bad virus files, that is) then the computer can’t even start. In our case we removed smss32.exe and we couldn’t start up any more… Search elsewhere online for advice on fixing Internet Security 2010. I personally started from system CD, deleted known bad files manually, then re-loaded Windows from the CD, ran Anti-Malware software, and now I’m free!!! Oh — and this virus prevents Safe mode from working too, unfortunately.

By: claudio

claudio — Fri, 15 Jan 2010 03:30:44 +0000

Any luck?Have the same problem after what I thaught was a successfull removal of this bastard.Won`t work in safe mode or any mode
Thx

By: Luciana

Luciana — Tue, 12 Jan 2010 08:02:29 +0000

Here's Antivirus Live removal guide. Follow the guidelines step by step.

By: rick

rick — Tue, 12 Jan 2010 00:01:56 +0000

I have something called antivirus live on mine. It places a shield like the microsoft shield on my tray at the bottom, but the shield is blue with a white stripe. I can operate a little in safe mode like now, but as soon as I log on in regular mode, every time I try to open an application it says the standard cannot do it, there is a corrupted file. Anyone heard of this one?

By: Luciana

Luciana — Mon, 11 Jan 2010 07:43:48 +0000

Antivirus 2010 doesn’t cause things you’ve described. There must be some other malware residing on your computer or some other kind of problem. However, possibility of malware is worth checking. Boot your computer in a safe mode and run anti-spyware scan.

By: Matt Morris

Matt Morris — Fri, 08 Jan 2010 23:12:20 +0000

I have this virus and can’t even start my computer. It get’s to the screen where Window’s XP logo comes up…then re-starts the process again. Hey hints on how I can start my computer?

By: Dodge

Dodge — Thu, 07 Jan 2010 13:55:53 +0000

Just managed to get rid of this or similar. I found a file named smss32.exe in sys 32 file in windows (not to be confused with smss.exe, which is fine).

Heres how I got rid once I realised that this may be the cause of the recurring hijack and pop ups after malwarebytes and combofix had removed it but the prob resumed within seconds.

1. run combofix (available from this site)
2. reboot and open task manager as soon as you can and turn off smss32.exe before it is hijacked again.
3. do a search for smss32.exe (found it in windows/sys32 file next to smss.exe).
4. delete smss32.exe (has to be turned off in step 3 to delete it).

took me 8 hours to find it, this worked for me, hope it helps.

By: Terry

Terry — Wed, 06 Jan 2010 02:53:05 +0000

I can’t do anything on my desk top because of this crap! This is stupid. I’m using my laptop for now.

By: sean

sean — Sun, 03 Jan 2010 20:02:00 +0000

this virus keeps changing the file names….i had one say yrvssysguard under my msconfig startup, i disabled that one plus the one that said IS2010 and i was finally able to access some of the programs needed to start the process of deleting this thing. i still cant find all the files for a manual delete, tho. it changes its name for different computers…..alot of the above named files are different than mine. and all of the scanners available are just that….scanners. i havent found a free utility to delete this thing. let this just be a lesson for all of us…..buy some real protection.

By: Luciana

Luciana — Tue, 22 Dec 2009 08:12:35 +0000

Congratulations on removing the infection. I must say something about the situation you’ve described. Antivirus Pro 2010 is installed by trojans and it is a malware. It’s not supposed to appear among regular programs.

By: Dusty

Dusty — Mon, 21 Dec 2009 15:54:41 +0000

I had client who’scomputer was infected with the Antivirus Pro 2010 but they had not installed it. There was no evidence in the program files folder and no obvious listings in the registry, but al executables were blocked an disabled by this rogue malware.
I started the computer in safe mode (WIN XP) and at the prompt to cntinue in safe mode or restore the computer to an earlier date, I chose to restore the omputer to an earlier date. After the computer was restored to a time before the virus was there, I was able to run the antivirus/malware sanner to get rid of any remnants of the virus.
The computer now works fine.

By: Vicko

Vicko — Wed, 16 Dec 2009 03:17:37 +0000

its disabled my registry editor and my task manger and then when i try 2 download and install the malware soft ware that you provided it says how the file is corrupted or sumthing and how i need to download it and try again which i’ve continuously done i’ve been able to delete the program file and the short cut and my avg internet security program deleted some of the malwares after i reboot my computer and deleted the program file but still everything is locked or disabled from me doing anything i miss my task manager :[ help please

By: Luciana

Luciana — Thu, 15 Oct 2009 06:31:14 +0000

Home Antivirus 2010 is another computer infection. Here's HomeAntivirus 2010 removal guide.

By: Keighley

Keighley — Thu, 15 Oct 2009 02:35:09 +0000

Well, I tried manual removal…I think I may have missed something in there, as several of the files listed weren’t anywhere to be found on my computer (not that I’m an expert who knows all the possible places to look).

However, since I’ve done it the “you have an infection” activity has gone down to operable levels…

For the record, it was calling itself HomeAntivirus 2010 on my computer…probably had something to do with the difficulty of finding it.

Thank you, know I know what to do.

By: beth

beth — Wed, 14 Oct 2009 23:54:08 +0000

does this virus disable laptop speakers? i can’t play cds….in the control panel – sounds and audio devices – under the volume tab it says “no audio device”. under the audio tab – everything is selectable and it says ‘no playback devices’, ‘no recording devices’, and ‘no midi playback devices’. then under the hardware tab everything shows ‘this device is working properly’. any suggestions?