Virus Removal Guru is here to help you remove viruses and spyware from your computer for free. Currently, it is estimated that tens of millions of computers are infected worldwide with anything ranging from spyware to viruses to adware. Currently, Virus Removal Guru receives tens of thousands of visitors each week and hopes to provide them with solutions to their computer problems. Virus Removal Guru is here to provide advice for free to help you keep your computer clean. It is essential to keep a clean computer to help it run faster and to keep your personal information safe.

Below, you will find updates on new spyware and viruses that come out on the web. Please feel free to comment on any posts since your feedback is useful to other visitors and us.

The three largest infections currently in December 2009 are Total Security, System Security, and Windows Protection Suite. Other major infections include Windows Police Pro, GreenAV, and MS Antispyware 2009.

Internet Security 2010 (InternetSecurity2010) Virus Removal Guide

December 10th, 2009 / 29 Comments » / by Guru

Internet Security 2010, or InternetSecurity 2010, is a fake antivirus program, known as a rogue security application. The program is bundled with other forms of malware, including Advanced Virus Remover, winlogon86.exe, and winupdate86.exe. Internet Security 2010 is a copy of Advanced Virus Remover, which is also a fake antivirus program. Internet Security 2010 hopes to trick the user into thinking that it is a real program by using various tactics, such as creating fake virus scans and having a professional look to the program. Also, Internet Security 2010 hopes to scare the user into purchasing the program by displaying fake virus scan results.

Internet Security 2010 will tell the user that their computer is infected and will use tactics to convince the user to purchase it. It will also use other tactics, such as the use of pop ups to warn the user. However, the program itself doesn’t work to remove viruses. It has a website which it uses to advertise the fake program.

The following messages are used by Internet Security 2010 to scare the user into purchasing the program.

warning1

“System warning!
Continue working in unprotected mode is very
dangerous. Viruses can damage your condifential data
and work on your computer. Click here to protect your
computer.”

warning2

“System warning!
Intercepting programs that may compromise your
privacy and
harm your system have been detected on your PC.
It’s highly recommended your scan your PC right now.”

Common symptoms and characteristics of Internet Security 2010 and other rogue security programs include:
1. Internet Security 2010 is generally installed without user permission through a trojan horse.
2. Internet Security 2010 uses pop ups and fake virus scans to scare the user.
3. Internet Security 2010 website is unprofessional, with fake testimonials and fake awards.
4. The payment website for Internet Security 2010 looks suspicious.
5. Various antivirus and system programs on the user’s computer will stop functioning.

Virus Type: Rogue Security Application
Threat Level: 8 / 10

Internet Security 2010

Below is our recommended removal tool for Internet Security 2010. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

download

If you are unable to run the removal tool, or are unable to run any programs in general, you may need to stop the processes associated with Internet Security 2010 with task manager. If task manager has been blocked by Internet Security 2010, try using Process Explorer.

Manual Internet Security 2010 Removal – In order to manually remove Internet Security 2010, the processes associated with Internet Security 2010 must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before Internet Security 2010 entered the computer.

Note: Internet Security 2010 has multiple versions; therefore, the files created by Internet Security 2010 may vary.

Stop Internet Security 2010 Processes (Learn How To Do This)
IS2010.exe

Remove Internet Security 2010 Files (Learn How To Do This)
C:\Program Files\InternetSecurity2010\
C:\Program Files\InternetSecurity2010\IS2010.exe
C:\WINDOWS\system32\winlogon86.exe
C:\WINDOWS\system32\winupdate86.exe
C:\WINDOWS\system32\AVR10.exe
C:\WINDOWS\system32\winhelper86.dll
C:\WINDOWS\system32\41.exe
C:\WINDOWS\system32\IS15.exe
C:\WINDOWS\system32\helper32.dll
C:\WINDOWS\system32\smss32.exe
C:\WINDOWS\system32\winlogon32.exe

Remove Internet Security 2010 Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\IS2010
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Security 2010

Remove Internet Security 2010 Startup Entry (Learn How To Do This)
IS2010.exe
winupdate86.exe

Block Internet Security 2010 Related Websites (Learn How To Do This)
buy-internet-security.com
downloadavr30.com

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean. Please Click Here to View Our Safety Tips.


Personal Security (PersonalSecurity) Virus Removal Guide

December 2nd, 2009 / 6 Comments » / by Guru

Personal Security

Personal Security is a rogue security application, also known as a fake antivirus program. Personal Security is very similar to Antivirus 360, Total Security, and Cyber Security, which are all fake antivirus programs. Personal Security hopes to trick the user into thinking that it is a real program. Personal Security hopes to scare the user into purchasing the program by displaying fake virus scan results. Personal Security is fake and doesn’t work.

The program has three different versions; therefore, the executable file for Personal Security will generally be located at one of the three following locations –

C:\Program Files\PSecurity\psecurity.exe
C:\Program Files\PersonalSec\psecurity.exe
C:\Program Files\PersSecurity\psecurity.exe

Personal Security will tell the user that their computer is infected and will use tactics to convince the user to purchase it. It will also use other tactics, such as the use of pop ups to warn the user. However, the program itself doesn’t work to remove viruses. It has a website which it uses to advertise the fake program.

When accessing the web, the following alert from Personal Security may come up –

“This website has been reported as unsafe
We strongly recommend to discontinue the use of this website.
Register your computer’s security software
This website has been reported to Microsoft for containing threats that might steal personal or financial information from your computer.”

Common symptoms and characteristics of Personal Security and other rogue security programs include:
1. Personal Security is generally installed without user permission through a trojan horse.
2. Personal Security uses pop ups and fake virus scans to scare the user.
3. Personal Security website is unprofessional, with fake testimonials and fake awards.
4. The payment website for Personal Security looks suspicious.
5. Various antivirus and system programs on the user’s computer will stop functioning.

Virus Type: Rogue Security Application
Threat Level: 8 / 10

Below is our recommended removal tool for Personal Security. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

download

If you are unable to run the removal tool, or are unable to run any programs in general, you may need to stop the processes associated with Personal Security with task manager. If task manager has been blocked by Personal Security, try using Process Explorer. You can also try renaming the removal tool to make it run.

Manual Personal Security Removal - In order to manually remove Personal Security, the processes associated with Personal Security must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before Personal Security entered the computer. Please exercise caution when manually removing the virus.

Stop Personal Security Processes (Learn How To Do This)
psecurity.exe

Remove Personal Security Files (Learn How To Do This)
C:\Program Files\PSecurity\
C:\Program Files\PSecurity\psecurity.exe
C:\Program Files\PersonalSec\
C:\Program Files\PersonalSec\psecurity.exe
C:\Program Files\PersSecurity\
C:\Program Files\PersSecurity\psecurity.exe

Remove Personal Security Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\Personal Security
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Security

Remove Personal Security Startup Entry (Learn How To Do This)
psecurity.exe

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What is a rogue security application? (Click Here To View)
5. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

If you have any questions or comments, please don’t hesitate to comment below. If you need any help with any of the steps, please don’t hesitate to comment below. We recommend that you follow our safety tips so that you can keep your computer clean Please Click Here to View Our Safety Tips.

Your feedback is very highly valued by others so please feel free to comment.


Packed.Generic.294 Virus Removal

March 9th, 2010 / No Comments » / by Guru

Packed.Generic.294 is a heuristic detection for encrypted files which are attempting to hide from antivirus programs and therefore possibly avoiding detection (Source: Symantec). These files may also download additional forms of malware. Packed.Generic.294 is part of the Packed.Generic family of possible threats. Below are recommended removal tools for Packed.Generic.294.

Spyware Doctor (Click Here To Download)
AVG Internet Security Trial (Click Here To Download)

Common Questions -
1. What is a computer virus? (Click Here To View)
2. How did I get this computer virus? (Click Here To View)
3. What common symptoms show that my computer may be infected? (Click Here To View)
4. What are some antivirus and antispyware programs which I can use to remove viruses and spyware? (Click Here To View)

We recommend that you follow our safety tips so that you can keep your computer clean. Please click here to view our safety tips

Please post comments below. Your comments are both useful to visitors and to us.