Security Essentials 2010 is a new rogue antispyware program, clone of Internet Security 2010, which is also rogue antispyware program. The rogue is installed through the use of trojans. When the trojan is started, it will download and install Security Essentials 2010 onto your computer without your permission and knowledge.
During installation, Security Essentials 2010 configures itself to run automatically when you logon into Windows. Once started, it will simulate a system scan and report a variety of infections that will not be fixed unless you first purchase the software. Of course, this is a scam, because the rogue is unable to detect or remove any infections. Important to know, all of these infections do not actually exist on your computer, so you can safely ignore the false scan results.
While Security Essentials 2010 is running, you will be shown nag screens and fake security warnings from Windows task bar. Some of the warnings:
System warning!
Continue working in unprotected mode is very dangerous.
Viruses can damage your confidential data and work on your
computer. Click here to protect your computer.
System warning!
Intercepting programs that may compromise your privacy and
harm your system have been detected on your PC.
It`s highly recommended you scan your PC right now.
Security Essentials 2010
Proactive system found several active vulnerabilities on your computer.
However, all of these warnings are fake and like false scan results should be ignored! As you can see, Security Essentials 2010 is a scam, that created with one purpose to scare your into purchasing so-called “full” version of the program. Most importantly, do not purchase it!
If you find that your computer is infected with the rogue, then be quick and take effort to remove it immediately. Follow the removal guidelines below to remove Security Essentials 2010 and any associated malware from the system for free.
More screen shoots of Security Essentials 2010
Symptoms in a HijackThis Log
F2 – REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon32.exe
O4 – HKLM\..\Run: [smss32.exe] C:\WINDOWS\system32\smss32.exe
O4 – HKCU\..\Run: [smss32.exe] C:\WINDOWS\system32\smss32.exe
O4 – HKCU\..\Run: [Security essentials 2010] C:\Program Files\Securityessentials2010\SE2010.exe
Use the following instructions to remove Security Essentials 2010 (Uninstall instructions)
Step 1.
Download HijackThis from here and save it to your Desktop.
If you cannot run HijackThis, then re-download it, but before saving HijackThis.exe, rename it first to explorer.exe and click Save button to save it to desktop.
Run HijackThis. Click “Do a system scan only” button. Now select the following entries by placing a tick in the left hand check box, if present:
F2 – REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon32.exe
O4 – HKLM\..\Run: [smss32.exe] C:\WINDOWS\system32\smss32.exe
O4 – HKCU\..\Run: [smss32.exe] C:\WINDOWS\system32\smss32.exe
O4 – HKCU\..\Run: [Security essentials 2010] C:\Program Files\Securityessentials2010\SE2010.exe
Once you have selected all entries, you will see a screen similar to the one below.
HijackThis
Close all running programs then click once on the “fix checked” button. Close HijackThis.
Step 2.
Download LSPFix from here and unzip it to your Desktop.
Run LSPFix. Place a tick in the “I know what i`m doing”.
In the KEEP box select helper32.dll (if the file is not listed in KEEP box, then close LSPFix and go to step 3). Press “>>” button and you will see a window as shown below.
LSPFix
Press Finish>> button. When LSPFix is done removing the LSP you will see a summary box. Press OK.
Step 3.
Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded you will see window similar to the one below.
Malwarebytes Anti-Malware Window
Select Perform Quick Scan, then click Scan, it will start scanning your computer for Security Essentials 2010 infection. This procedure can take some time, so please be patient.
When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure that everything is checked, and click Remove Selected for start Security Essentials 2010 removal process. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.
Security Essentials 2010 creates the following files and folders
C:\Program Files\SecurityEssentials2010
C:\Program Files\SecurityEssentials2010\SE2010.exe
Security Essentials 2010 creates the following registry keys and values
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Security Essentials 2010
this is my first malware on firefox,
sorted loads of folk out with this on ie but never on firefox
You saved my butt!! thanks so much for posting this…
yes, thank,
got my computer rid of it also
much appreciated
Thank you very much for that nice tut, it works nice !
Malwarebytes Cannot Remove This Trojan! It Makes Your Computer ADMIN Inoperable And All Systems! ONLY Way To Remove And Restore Your Computer Is To Install New System Leaving “Files Intact” Do Not Reformat! Very Important! Do Not Change File System! Re-Install As Directed. Once Installed Set Up New System Then Once In Windows On Your NEW SYSTEM Install Malwarebytes Update It Then Run A Scan And Delete All Trojans Then Restart Windows And Log Into Your Old System Then Run Malwarebytes Again!!! It Will Then Detect “Security Essentials 2010”! Select All Files And Delete! Then Reboot And SELECT Your Old System And It Be Cleaned! Your Screen Will Still Be Distorted By Security Essentials But Then Right Click On Screen And Click Properties Then Select Your Fav Screen! Then It Will Be Good As New No Files Lost!!!
thanxxx a lot….. its working!!!!
I downloaded and scanned using the anti-Malware. Removed all threats. Restarted to allow some removals to take effect, and now my computer cannot run windows in normal mode.
Suggestions anyone?
Amy, before Malwarebytes, you have done firsts steps ?
Thanks…it worked
I tried 2 other uninstall procedures for this pesky rogue anti-virus program and yours was the one that worked. I appreciate your user friendly instructions and will definitely remember this website if I have any further malware problems. THANKS SO MUCH!!!
As of April 8 2010 these instructions no longer work.
Daniel, ask for help in our Spyware removal forum.
Looks like it worked for me, thanks so much. Also really easy to understand intructions.
Thankyou Thankyou Thankyou.
Your instructions worked seemedly perfectly. My PC is happy again and me moreso. What a nasty little intrusion that was.
The infection would not allow me to google your site or go to the download pages, it kept taking me elswhere so I had to use another PC to do all the downloading and copy the files to the infected PC. Then run them per your instructions.
Kindest regards John
I did the steps listed but now after i have restarted it said i need to authorize windows but is dosent find a internet connection
and help would be appreaciated
Vaughn, you using licensed Windows version ?
thank very much! Did you know that security essential 2010 is FUCKING software. Don’t also touch it!
thanks a lot guys, helped perfectly!
I cannot say anything bad about that program, I did get what I was looking for and never had problems with skanning
Thank you for the useful information. It helped me to get rid of the Security Essentials virus. However, it’s in a new package now (November 2010) and it’s called “Security Essentials 2011”, although the executable file is still named “SE2010.exe”, so I suppose it’s the same thing. Another difference is that (in my case, anyway) it installed itself in a different location, namely C:\Documents and Settings\User (your Username here, if any)\Application Data\Security Essentials 2011\SE2010.exe. Plus it was “Hidden”.
Here is a brief description of my experience:
Before performing the uninstall instructions, I did a search on my local disks using the term “SE2010”, and the search returned two files containing “SE2010”, the first being the exe file, and the second one was called “SE2010.EXE-259AEBC.pf”, a Prefetch file type, located in C:\WINDOWS\Prefetch folder, which I deleted manually. Of course I tried deleting the exe also, but it came back with an error message saying it is being in use by another program (evidently). I also tried deleting it by using the Task Manager to stop it running before deletion, but the Task Manager was blocked by the virus and it kept popping up the false security alert instead. That is when I did a search on the internet and found this page on myantispyware.com.
Step 1: after downloading the HijackThis program from http://free.antivirus.com/hijackthis/ (the link provided by this page returned a “HTTP 404 Not Found”), I ran HijackThis and it gave only one result related to Security Essentials: O4 – HKCU\..\Run: [updatesst] C:\Documents and Settings\User\Application Data\Security Essentials 2011\SE2010.exe. I selected the entry and pressed the “fix checked” button. After this operation, the false security alerts (every 2 – 3 minutes or so) stopped suddenly.
Step 2: after downloading and running LSPfix, there was no “helper32.dll” in the KEEP box (only the other three entries), so I went directly to pressing the “Finish>>” button. It resulted in a summary box with all values being “zero” so my presumption was that Step 2 had no utility in my case.
Step 3: after downloading and installing Malawarebytes’ as presented (including the update), I selected “Perform Quick Scan”. The scan took 59 minutes for my computer. I checked everything and selected it, and clicked on “Remove Selected”. After the completion and the log file I was prompted to restart computer. Seconds after pressing on “Yes”, a power failure occurred, so I was left in darkness (literally) not knowing if I got rid of the virus. After restarting the computer, it was still there, alive and kicking (including the Prefetch file), so I proceeded from the beginning. This time though, after Step 1, I took the opportunity that “SE2010.exe” was not running and I deleted it manually. I restarted the computer twice, just to be sure that everything is OK, and it was. After that, I performed Steps 2 and 3 again, and the Malawarebytes’ detected two entries: a folder, this time in Program Files (C:\Program Files\Securityessentials2010), which was empty, and a Registry Key, HKEY_CURRENT_USER\SOFTWARE\SE2010. After removing them and the log file, I restarted again the computer (just in case) and everything was OK. Thanks again.
Cheryl I carried program of and I want to delete it several times try to remove was not delete I hope help me to with thanksgiving