I've been trying to remove this "virus" but everytime I restart my computer, it's just keeps coming back. I deleted the folders, I ended the process with the Task manager, I even scanned it with Windows Live OneCare Safety Scan, I also scanned it with the Malicious Software Removal Tool, and nothing. If there could be another solution, that would be awesome, as long as I don't have to download other software, because I just can't trust them.

Hi, Thanks for posting in Microsoft TechNet forums. If there is any antivirus installed, I suggest we perform the following steps to protect the system: Step 1: Update the definition file for the antivirus program. If you do not have an antivirus program installed, I would suggest install Microsoft Security Essentials to protect the system from being infected with virus. Step 2: Disable and Enable System Restore to clear the virus permanently. Many viruses infect restore points. In order to clear the infected files permanently, we should clear the restore points. Please use the steps below to do so: 1. Click "Start, input "SYSDM.CPL" (without quotation marks) and press "Enter". 2. On the "System Protection" tab, click to turn off System Restore on all drives, and click "OK". 3. Please repeat the above steps to enable System Restore again. Step 3:Boot your computer into Safe Mode and then run your antivirus software on your computer to scan for and remove any possible Virus and Malware infections. 1. Restart the computer. 2. Keep pressing the F8 key until the Windows Startup menu appears. 3. Choose "Safe Mode", and press "Enter". 4. Run the computer in Safe Mode. 5. Start your antivirus program and scan the system in Safe Mode. Step 4: Scan for virus in Safe Mode with Networking Note: If you are using a cable modem or home LAN connection, please start from item 1 below. If not, please skip items 1~3 and go to item 4 directly. 1. Restart the computer. 2. After "POST" (the Power On Self Test usually has a text mode screen at the beginning when a system boots up), keep pressing the F8 key until the Windows Startup menu appears. 3. Choose "Safe Mode with Networking" and press Enter. 4. Please open Internet Explorer and visit http://safety.live.com 5. Please click the "Full Service Scan" button and follow the instructions on screen to scan for viruses on the computer. Please check if you can remove the Trojan now. Best Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I've been trying to remove this "virus" but everytime I restart my computer, it's just keeps coming back. I deleted the folders, I ended the process with the Task manager, I even scanned it with Windows Live OneCare Safety Scan, I also scanned it with the Malicious Software Removal Tool, and nothing. If there could be another solution, that would be awesome, as long as I don't have to download other software, because I just can't trust them. This is the Uninstall Guide of removing the rogue program..... http://www.bleepingcomputer.com/virus-removal/remove-personal-internet-security-2011 If you google for it, you'll see more " uninstall guides " about this particular rogue program.

3 times I ran Microsoft Security Essentials, and Personal Internet Security 2011 still resides. As mentioned in the article, PIS 2011 cleared restore points and disabled the service. When rebooting to SafeMode with Networking, I could not get an internet connection. Still MSE did not find any of the infected PIS 2011 files. I am running safety.live.com. While running, the PIS 2011 continually presents its offer for protection. Please, Any other recommendations? Some other security companies which I do not recognize offer a solution. PIS 2011 has copied the MS logos and icons carefully. Even the Taskbar shows an identical Red Shield with an X as Windows Security Alert, but it says Personal Internet Security 2011. The Windows Shield is on because I have the MSE real-time protection turned off while running the safety.live.com.

I have a similar problem and in my case, I can't even access the internet anymore. This malware/virus (whatever it is) won't let me open IE or even, Firefox and keeps running scans on my computer without my activating it. I am wondering if this thing came embedded in IE9 which I downloaded last night. And since I am not a tech person, I have now got to wait for someone knowledgeable to come and take a look at my comp and see if they can fix it. Lesson learnt - never download any software - even from the Microsoft site. :-(

Actually I tried everything, and still didn't work. But then after two days of trying everything, I remembered that my computer everytime it does one of those automated upgrades, it ALWAYS makes a restoration point. So I went to "Control Panel", then to "System and Maintenance", and then to "Back Up and Restore center" and select "Create Restore point or change settings" and then "System Restore" and it gave me a prompt saying "Restore system files and settings" and it gave me the a choice if I wanted the "recommended restore" or "choose a different restore point" so I chose "choose a different restore point" and it gave a list of all the restoration points that it had so I chose a date when my computer wasn't inffected by the virus like two dayd before it had the virus. That's how I removed and it hasn't been affected ever since. And also I updated my "Microsoft security essentials" so it is a big help. So the steps are, and I hope this works for some of you: 1. Control Panel 2. System Mainence 3. Back Up and Restore center 4. Create Restore point or change settings (left side) 5. System Restore 6. Choose a different restore point I do hope it works ;)

I have tried both of the suggestions listed in this forum but neither have worked to remove the virus. The suggestion to go back to an earlier restore point seemed both simple and elegant, but when I went there, the only entry was for one that had been created within the past hour of trying it, so it would have contained the same virus. I also worked my way through the other suggestion, but I cannot access the internet from any browser (IE, Firefox, Chrome). I have also looked at other malware removal sites, and they all say to remove a "pw.exe" (or similar) from the startup file. When I use msconfig and go there, there is nothing that even slightly looks out of the ordinary. They also say to close down the processes associated with the virus, I don't know what processes these are, but I cannot close down lsass, csrss, and smss exe processes. The message " This is a critical system process. Task Manager cannot end this process." comes up. I have also looked in my program files and cannot find any files that they should be there. Finally, I have tried downloading Spydoctor program on this computer (thank goodness for 2 computers), but cannot get it to load to a CD to be able to run on the infected computer. Any other ideas? ****** I was able to remove the virus by using a combination of CCleaner, which enabled me to get internet access back and then was able to download the Microsoft Security Essentials package which cleaned up the program files and registry. ************ Thanks