Results 1 to 10 of 10
  1. #1
    Mmmmmmmm.............Kate Tukapa's Avatar
    Join Date
    Feb 2005
    Location
    New Plymouth
    Posts
    791

    Unhappy Rogue security program - Internet Security - need to remove

    Hi all

    A mates father has been having issues with his PC. I said I would take a look.

    Microsoft Security Essentials has been disabled and won't run, there is browser hijacking and numerous other issues. After a while of running the PC a rogue security program, Internet Security, popped up and started doing it's fake scan thing.

    I had initially installed and updated Malwarebytes, Superantispyware and Spyware Terminator. I rebooted into safe mode and ran all these programs which found nothing.

    I did some research and found some pages with instructions on removal;

    http://www.spywarevoid.com/remove-in...ity-fraud.html
    http://deletemalware.blogspot.co.nz/...2-malware.html

    It appears that this program also gets around as Internet Security 2010, 2011 and 2012 as well as the plain Internet Security which this PC has.

    I followed the instructions and downloaded, updated and installed TDSSKiller but that found nothing. I ran Trojan Remover which apart from removing a rogue link to Internet Explorer rendering that program unusable it also found nothing else.

    I have tried the manual delete method but after all the above I am still having issues.

    I am just trying a couple of other security programs but otherwise am thinking I am going to be doing a format and reinstall.

    Unless one of you helpful mob can point me in any new direction?

    Thanks.
    Asus P8Z77-V LK, Core i5 3570K, 8GB DDR3 1600, 128GB SSD, 12TB HDD, GeForce GTX660 Ti 2GB, Blu-ray writer, Enermax 750W PSU, Coolermaster CM 690 II Case, Windows 8 Professional

  2. #2
    Member
    Join Date
    Dec 2004
    Location
    NZ
    Posts
    44,851

    Default Re: Rogue security program - Internet Security - need to remove


  3. #3
    Senior Member 1101's Avatar
    Join Date
    Jan 2008
    Posts
    6,674

    Default Re: Rogue security program - Internet Security - need to remove

    Quote Originally Posted by Tukapa View Post
    ..... am thinking I am going to be doing a format and reinstall.
    It sounds like a cop-out, but thats sometimes the quickest & best fix. Even after you remove the malware completely
    you may find that Win is left in a bit of a mess (eg . system files missing, services wont run, cant connect to internet etc etc)

    Have you run these AV scanners/malwarebytes in full mode ?? , ie NOT quick scan. Set them to scan all files
    They need to be updated before running the scan. This is a must do.
    You may need to remove the Hard Drive & scan it via a Clean PC.
    Or download Kasperky's boot CD & scan with that .

    these fake programs change often , even though they have the same names
    so the write up's on removal may not be relevant in cleaning out the last remains of infection
    Last edited by 1101; 12-03-2012 at 12:45 PM.

  4. #4
    Computer Technician wainuitech's Avatar
    Join Date
    Aug 2007
    Location
    Wellington
    Posts
    27,508

    Default Re: Rogue security program - Internet Security - need to remove

    This is going from memory. You have not said what OS it is, XP, Vista, W7 so the start of the path may differ.


    The little buggers hide


    Download and run Rkill rkill Look at where it finds a random named exe file.

    Go to My Computer / Computer open the tools, folder options under the view tab "show hidden files and folders" Navigate to the folder Rkill found the infection --- It may be something like this ---C:\Documents and settings\User Name\Local Settings\Temp or some other location.

    Once found it will be a random named .exe - delete it, thats the main "infection", then run Super Antispyware & spybot S&D to locate the rest of the left overs.

    Depending on which version it was, there may be other things to do.
    Update / Upgrades = Replace old bugs with new ones.

  5. #5
    amateur expert dugimodo's Avatar
    Join Date
    Dec 2005
    Posts
    7,959

    Default Re: Rogue security program - Internet Security - need to remove

    I removed it for a friend using instructions similar to what speedy linked. It worked except MSE would no longer function and I ran out of time so I just put avast on as a stopgap. That was 6 months ago, she's still running avast and I still mean to get around to having another crack at it It's a losing battle though, some people are just prime targets for malware.
    Ryzen 2700X, 16Gb DDR4RAM, 512GB M.2 NVME SSD, MSI GTX1070

  6. #6
    Mmmmmmmm.............Kate Tukapa's Avatar
    Join Date
    Feb 2005
    Location
    New Plymouth
    Posts
    791

    Default Re: Rogue security program - Internet Security - need to remove

    Thanks all

    Speedy - looks like a different malware and those files that the instructions identify aren't on this system.

    All security programs were updated and scanned in their full modes.

    Wainui - about to try your suggestion - OS is Windows XP Home SP3.

    Thanks again.
    Asus P8Z77-V LK, Core i5 3570K, 8GB DDR3 1600, 128GB SSD, 12TB HDD, GeForce GTX660 Ti 2GB, Blu-ray writer, Enermax 750W PSU, Coolermaster CM 690 II Case, Windows 8 Professional

  7. #7
    Member
    Join Date
    Dec 2004
    Location
    NZ
    Posts
    44,851

    Default Re: Rogue security program - Internet Security - need to remove

    Put teamviewer on it and I'll have a look. If it wont let you do it in normal windows. Boot into safe mode / networkling. Then install it

  8. #8
    X Tech pheonix's Avatar
    Join Date
    Dec 2004
    Location
    RotoVegas
    Posts
    475

    Thumbs up Re: Rogue security program - Internet Security - need to remove

    There is also another program that kills those fake Antivirus programs from Macafee. Haven't used it yet but the original Stinger program was a great program a couple of years ago.

    http://www.mcafee.com/us/downloads/f...s/stinger.aspx
    Ever stop to think, and forgot to start again?

  9. #9
    X Tech pheonix's Avatar
    Join Date
    Dec 2004
    Location
    RotoVegas
    Posts
    475

    Default Re: Rogue security program - Internet Security - need to remove

    There is another one I have come across and haven't tried yet as well.

    http://majorgeeks.com/RogueKiller_d6983.html
    Ever stop to think, and forgot to start again?

  10. #10
    Mmmmmmmm.............Kate Tukapa's Avatar
    Join Date
    Feb 2005
    Location
    New Plymouth
    Posts
    791

    Default Re: Rogue security program - Internet Security - need to remove

    Hi everyone.

    Thanks for all your suggestions - I actually found PC Tools Spyware Doctor which did the trick and the PC seems to be virus and malware free now.

    It was a nasty bugger to get rid of - the usual programs just didn't cut the mustard.

    Cheers.
    Asus P8Z77-V LK, Core i5 3570K, 8GB DDR3 1600, 128GB SSD, 12TB HDD, GeForce GTX660 Ti 2GB, Blu-ray writer, Enermax 750W PSU, Coolermaster CM 690 II Case, Windows 8 Professional

Similar Threads

  1. Remove XP Home Security 2011 Malware trojan?
    By chiefnz in forum PressF1
    Replies: 19
    Last Post: 07-03-2011, 06:52 PM
  2. "Security Tool" virus program - how to remove?
    By starrekin61 in forum PressF1
    Replies: 41
    Last Post: 05-01-2010, 09:20 AM
  3. Replies: 5
    Last Post: 13-10-2009, 08:05 PM
  4. Remove Windows Security Update button
    By sarel in forum PressF1
    Replies: 2
    Last Post: 05-04-2007, 07:57 PM
  5. Remove Windows Security Update button
    By sarel in forum PC World Chat
    Replies: 2
    Last Post: 05-04-2007, 07:57 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •