How I beat the IS2010 Malware

ldervish · #1 12-24-2009, 07:18 AM

My adult son's laptop was attacked by IS2010 ("Internet Security 2010"), a particularly nasty piece of malware that covers the Windows desktop with fake warnings, alerts, and 'scans' purporting to show infections. Well, at least that part is true, your computer is infected. Big Time.

It links (I think) to allow other malware to download, one of which was eventually caught by an AV program, and importantly it attempts to block the common ways of removing malware, e.g. it blocks internet access so you can't research the malware and can't download removal applications, blocks System Restore, blocks Task Manager, blocks RegEdit, etc. The fake alerts and warnings multipy until they cover the desktop, and eventually the computer is useless.

What I did was do the research on my desktop, download removal applications to the desktop, then copy them to a cd. The cd allows you to introduce the removal application into the infected computer, and can then be accessed and initiated via 'My Computer'.

Before introducing the removal app, I went into Control Center > Add/Remove Programs and uninstalled a couple programs I didn't recognize and which were recently installed. I'm not sure if this was necessary or effective, but it couldn't hurt. Then I introduced the removal app cd. In this case, the app was "MalwareBytes Anti-Malware". The initial setup is an older iteration, but the scan turned up 29 bad guy files, which I removed. After a restart, I was able to update the MBAM database, but the IS2010 was still splashed on the desktop, although much weaker than before. The second scan (with the updated database) caught the IS2010 files and they were removed. Then I ran an updated AV program, which caught the linked virus.

All told it was about 5 hours of work, researching, downloading, trying various things, waiting for the full scans to run and etc. before I could finally declare the laptop pest-free. I hope with this information, a problem on one of your computers can be cleared much easier.

As a side note, there is another similar malware named AV 360 (a play on the name of Norton 360) which also blocks common avenues of removal. This same procedure may be helpful with it.

Merry Christmas.

Dan B · #2 12-24-2009, 07:53 AM

Gotta love Malwarebytes. I was infected with a Vundo (malware/virus that keeps displaying popups, basically something similar to what you had) and after 2 scans everything was gone. Also check out SuperAntiSpyware. Unfortunately it's demo only (for the full version) but it's just as effective as Malwarebytes.

Which AntiVirus did you use? I use Avira now (Nod32, although good, did not want to work on my computer) and it's awesome.

iamlowsound · #3 12-24-2009, 08:57 AM

I am so glad that I have a mac.

lowsound

Ziltoid · #4 12-24-2009, 09:10 AM

back up what he needs + fresh install ?

**Eric Perry** · #5 12-24-2009, 09:20 AM

Macs are NOT impervious to viruses, as so many people like to think. No more so than any Windows machine. Hackers are sleaze that take the time to write these viruses, and simply want to infect as many machines as possible. Windows remains exponentially more popular among computer users. Why make a virus that targets one machine when you can make one that targets 10?

Malwarebytes ans SuperAntiSpyware are my two favorites as well.

Sizlack · #6 12-24-2009, 09:29 AM

Ad-Aware, Spy bot Search and Destroy, and Panda Cloud AV all work rather well.

**Eric Perry** · #7 12-24-2009, 09:32 AM

Ad-Aware used to be great. I think it's turned into a resource hog and has become quite ineffective. I do like Spybot, however. Never used Panda.

Sizlack · #8 12-24-2009, 09:38 AM

Panda cloud is pretty cool, runs like a P2P network for updates. Instead of having to download large updates that cover several different possible viruses it shares smaller updates constantly between all users.

I started using it over AVG since it never seems to slow my pc down when it scans.

SSINTENSE · #9 12-24-2009, 10:59 AM

Quote:

Originally Posted by iamlowsound

I am so glad that I have a mac.

lowsound

What?? Macs aren't virus/malware free. In the past, macs were "virus proof," because people never bothered to code viruses for them! Most people use PC's so that is where most of the damage can be done!

Lately though, as Macs have gone up in popularity, the viruses have started to circulate. My friend had to get a new Mac because his was infected with a real bad one.

SSINTENSE · #10 12-24-2009, 11:01 AM

Macs not having viruses in the past due to lack of popularity was a freebie brand value because over half of mac users aren't very computer literate.

SSINTENSE · #11 12-24-2009, 11:02 AM

Try Malwarebytes, as others suggested already.

Ziltoid · #12 12-24-2009, 11:04 AM

Thing is, on a mac, if you're somehow aware, you won't get anything, on Pc it's not so true.

ogrossman · #13 12-24-2009, 11:04 AM

Quote:

Originally Posted by SSINTENSE

My friend had to get a new Mac because his was infected with a real bad one.

Okay, now I've heard of one Mac that's been infected... That makes it about 10,000 to 1.

ogrossman · #14 12-24-2009, 11:10 AM

Quote:

Originally Posted by SSINTENSE

Macs not having viruses in the past due to lack of popularity was a freebie brand value because over half of mac users aren't very computer literate.

Are you implying that under half of PC users aren't very computer literate?

SSINTENSE · #15 12-24-2009, 11:11 AM

It's because there are alot more PC's than Macs. Obviously, if Macs were in the majority, hackers would be more interested in infecting Macs. By getting a mac for the purpose not getting viruses, you are only hiding from the hackers' attention.

Plus, most businesses use PC's, a perfect opportunity to steal financial data with the use of a trojan.

SSINTENSE · #16 12-24-2009, 11:12 AM

Quote:

Originally Posted by ogrossman

Are you implying that under half of PC users aren't very computer literate.

No. But alot of people who buy macs do so because of the brand image, when in reality a mac is nothing but a PC.

SSINTENSE · #17 12-24-2009, 11:15 AM

I have a PC and a MAC that are (to my knowledge) virus free. I notice that the only times I start getting viruses are when I porn surf. Thank God for the invention of youtube.

ogrossman · #18 12-24-2009, 11:20 AM

Quote:

Originally Posted by SSINTENSE

...in reality a mac is nothing but a PC...

But a PC is not a mac.

Quote:

Originally Posted by SSINTENSE

...By getting a mac ... you are hiding from the hackers' attention.

That's enough right there to make me happy to own a mac.

SSINTENSE · #19 12-24-2009, 11:30 AM

Quote:

Originally Posted by ogrossman

But a PC is not a mac.

This is where things get real complicated. Ever since Mac switched to Intel architecture around 2000 (which Microsoft traditionally used), they have been alot more interchangeable, though still not 100% compatible. It gets pretty complicated from here and I don't want to bore you with details. You probably don't care to look but there are explanations on the web.

SSINTENSE · #20 12-24-2009, 11:33 AM

I only know this stuff because my Dad is a computer nerd who literally has about 20 PC's and I've been hearing it all my life. lol