Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

XP internet security 2010

Updated: 06 Sep 2010 | 6 comments
MandarS's picture
0 0 Votes
Login to vote

Hi All,
Can anybody please help for the "XP internet security version 2010" having malware in the PC.& how to get rid out of this.

Regards,
Mandar

Comments

sbertram's picture
02
Mar
2010
0 Votes 0
Login to vote

Hi here are some things to

Hi here are some things to try.  First scan with the anti virus on the PC make sure it is updated.  If the virus is not gone do a free online scan from Housecall or another anti virus maker, remove what it finds.  Serach Symantec for XP internet security version 2010 for a removal tool then run the tool.  If noen of that cleans up the PC time to wipe.
good luck
 

Thomas K's picture
02
Mar
2010
0 Votes 0
Login to vote

If you have uploaded the

Follow the steps of Virus troubleshooting -

http://service1.symantec.com/SUPPORT/ent-security....

If you followed these steps and have uploaded the latest definitions and your AV still does not detect, then try removing this threat with Malware Bytes or Hitman Pro.

http://malwarebytes.org/

http://www.surfright.nl/en/hitmanpro

Sparky the IT guy's picture
03
Mar
2010
0 Votes 0
Login to vote

If I have SEP with current

If I have SEP with current maintenance why should I have to use a third party tool?   I have this same infestation on a PC (second time no less) and SEPwill not find it despite multiple references on other vendors websites.

riva11's picture
03
Mar
2010
2 Votes +2
Login to vote

SAV Corporate 10.1.9 Vs XP internet security 2010

Just for info, the SAV Corporate 10.1.9 version doesn't detect this rogue virus...

samTheman's picture
05
Mar
2010
0 Votes 0
Login to vote

Manual removal for XP Internet Security 2010

If you have XP Internet Security 2010, then a lot of virus and spyware scanners just don't install or work when this rogue is activated. XP Internet Security 2010 will shut down these scanners such as malware bytes and even has some issues with Norton.

However, what you can try to do is this:

Reboot your computer, and BEFORE XP Internet Security 2010 gets a chance to load, open task manager (ctrl + alt + del).
If you do this after the malware has loaded, then it will most likely close task manager.

Once task manager is up, look for the .exe file for XP Internet Security 2010, which is av.exe
Select that file and hit end process

That should temporarily stop XP Internet Security 2010 and allow you to run whatever virus remover you want.

Hope that helps, for Symantec compatible removal instructions, check manual removal instructions at XP Internet Security 2010

Vikram Kumar-SAV to SEP's picture
05
Mar
2010
1 Vote +1
Login to vote

 Find and Delete These XP

 Find and Delete These XP Internet Security 2010 Files

 
%UserProfile%\Local Settings\Application Data\av.exe
%UserProfile%\Local Settings\Application Data\WRblt8464P
%UserProfile%\AppData\Local\av.exe <In Antivirus Vista 2010 & Win 7 Antispyware 2010>
%UserProfile%\AppData\Local\WRblt8464P <In Antivirus Vista 2010 & Win 7 Antispyware 2010>
 
Remove These XP Internet Security 2010 Registry Values:
 
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″