Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My system is infected with Internet Security 2010.

I can't even go to task manager or boot in safe mode. I also can't even run any antivirus programs.

Are there any solutions?

share|improve this question

I would strongly recommend that you backup your personal data and then clean install your OS. I would never trust a system after accidentally infecting it with a trojan. I would suggest:

1) Back up your data to some external drive

2) Aquire a live-cd virus scanner from some other computer, for example by using a friend's computer to download and burn the CD

3) Boot your computer with the live-Cd and make sure your external drive is attached. Scan the external drive, cleaning up any corrupted/infected data files found by the scanner

3a) remove the external drive until later

4) Find the install cd, or acquire a new install CD, and clean install. Reformat the hard disk, and clean install. Do not upgrade or anything like that. Clean install.

5) Reinstall any application you need

6) restore your files

I would also suggest taking this opportunity to evaluate what applications you are using and how you are organizing your data.

share|improve this answer
Wiping and reinstalling applications as needed is not a simple process. Why are you recommending a hammer when a few surgical strikes can solve this problem? – Chris Jan 4 '10 at 16:03
I strongly disagree that a few surgical strikes can remove a virus or trojan infection. Once the OS is compromised, you can't trust anything that the OS tells you. I am not the only one who holds this viewpoint. – pcapademic Jan 4 '10 at 23:03

Install Malwarebyte's Anti-malware, run a full scan, and clean all infected files.

If that doesn't work, install and run the scan in Safe Mode. After cleaning, you can install free antivirus like Avira Antivir or Microsoft Security Essentials to prevent future infections.

You can also get further help at the Malwarebyte's Anti-malware Forum

share|improve this answer

You can use Process Explorer to terminate the processes IS2010.exe, 41.exe, winlogon86.exe and winupdate86.exe . Full removal instructions are here.

If that doesn't work for any reason, you may use a rescue live-CD virus scanner : I like best Avira AntiVir Rescue System because it gets updated several times a day and so the download CD is up-to-date. As a boot CD it's autonomous and doesn't work using your Windows XP system.

Once you succeed in erasing this virus, run antivirus scans by a couple of products. I recommend using at least Malwarebytes' Anti-Malware.

share|improve this answer

You need to go into Safe Mode, then run a program called "RKill", then run MalwareBytes. I got this trojan on my computer over the weekend and successfully removed it after following the steps on this site:

share|improve this answer

Jeff Atwood has a good article about how to clean up a spyware infection. Following these steps should get you pretty close. Using some of the products recommnded by harrymc will also help you remove this virus.

Good luck, and hope this helps some.

share|improve this answer

This thing about buying a particular new virus checker to cure the Internet Security 2010 virus is exactly what they want you to do, and is a complete waste of money. My system was hit by this horrible virus resulting in the “blue screen of death” and being deprived of access to any controls. What I could do, however, is reboot!

So I rebooted, held down Key F8, and got the boot options.

I chose “System Restore” option and turned the clock back by one week.

Although an error message appeared saying it had failed, it actually hadn’t! When I rebooted, the system was perfect again, and I hadn’t even lost any data – everything was right up to date, and I simply deleted the suspect file the virus came from.

Problem solved!

share|improve this answer

You must log in to answer this question.