Sign in to follow this  
Christian Mairoll

Security Inspector 2010 Adware Removal Instructions

Recommended Posts

The Emsisoft malware research team has discoverd a new outbreak of the Security Inspector 2010 adware. Emsisoft Anti-Malware detects this malware as Adware.Win32.SecurityInspector2010.

Security Inspector 2010 is a rogue security program, this is another variant of Antivirus Studio 2010. A rogue application tries to trick you by displaying false positive/misleading scan results report, which says that your computer is infected with viruses or trojan, but you will not be able to delete them before you purchase.

Create new files:

  • %UserProfile%Application DataMicrosoftInternet ExplorerQuick LaunchSecurity Inspector 2010.lnk
  • %UserProfile%Application DataSecurity Inspector 2010
  • %UserProfile%Application DataSecurity Inspector 2010securitycenter.exe
  • %UserProfile%Application DataSecurity Inspector 2010securityhelper.exe
  • %UserProfile%Application DataSecurity Inspector 2010taskmgr.dll
  • %UserProfile%Application DataSecurity Inspector 2010Security_Inspector_2010.exe
  • %UserProfile%Local SettingsTemp_2.tmp
  • %UserProfile%Start MenuProgramsSecurity Inspector 2010.lnk
  • %UserProfile%Start MenuProgramsSecurity Inspector 2010
  • %UserProfile%Start MenuProgramsSecurity Inspector 2010Help Security Inspector 2010.lnk
  • %UserProfile%Start MenuProgramsSecurity Inspector 2010How to Activate Security Inspector 2010.lnk
  • %UserProfile%Start MenuProgramsSecurity Inspector 2010Security Inspector 2010.lnk
  • %UserProfile%Start MenuProgramsSecurity Inspector 2010Activate Security Inspector 2010.lnk

Create new registry entries:

  • HKEY_CURRENT_USERsoftwareMicrosoftWindowsCurrentVersionRun
    (String) %random% = %UserProfile%Desktopsecurityhelper.exe
    (String) Security Inspector 2010 = “%UserProfile%Application DataSecurity Inspector 2010Security_Inspector_2010.exe” /STARTUP
  • HKEY_CURRENT_USERsoftwareMicrosoftWindowsCurrentVersionUninstallSecurity Inspector 2010
    (String) DisplayName = Security Inspector 2010
    (String) UninstallString = “%UserProfile%Application DataSecurity Inspector 2010securityhelper.exe” /UNINSTALL
    (String) DisplayIcon = “%UserProfile%Application DataSecurity Inspector 2010securityhelper.exe”,1
  • HKEY_CURRENT_USERsoftwareSecurity Inspector 2010
    (String) BuyUrl = 27A7E7669B41CDB835AF9730D059250578C9FF9E82454E6F83646674E479310A7EDCFA80D573FC0 94DE757EC1A1359E60C406316556E26DE31CED7EBA0FBBB5FDFF528F1DCAF829FC20F
    (String) (Default) = %UserProfile%Application DataSecurity Inspector 2010
    (String) ADVid = 1
    (String) InstallDir = %UserProfile%Application DataSecurity Inspector 2010
    (String) SoftID = Security Inspector 2010
    (DWORD) ScanSystemOnStartup = 0×00000001 (1)
    (DWORD) AutomaticallyUpdates = 0×00000001 (1)
    (DWORD) MinimizeOnStart = 0×00000000 (0)
    (DWORD) BackgroundScan = 0×00000001 (1)
    (DWORD) BackgroundScanTimeout = 0×00000001 (1)
    (DWORD) LastTimeStamp = 0×000000D9 (217)
    (String) LastUpdateDate = 2010/10/18
    (DWORD) BaseStamp = 0×0001BB21 (113441)

Screenshots:

Adware.Win32.SecurityInspector2010_1-400

Adware.Win32.SecurityInspector2010_2-400

Adware.Win32.SecurityInspector2010_3-400

Adware.Win32.SecurityInspector2010_4-400

Adware.Win32.SecurityInspector2010_5-400

How to remove the infection of Security Inspector 2010 (Adware.Win32.SecurityInspector2010)?

To delete this malware infection, please download and install Emsisoft Anti-Malware. Run a full scan on all drives and move all detected items to the quarantine.



View the full article

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.