sorry if this has already been asked b4 but i am panicking a program called personal internet security 2011 has just attached itself 2 my pc and is taking it over hiow do i get read of it i am using avast 5 home free and my opp system is windows xp :‘( :’(
Hi lets try this first, if it fails go to Plan B
Note: If using Firefox right-click on any download links and choose Save As
Please download OTH to your desktop
Please download OTL to your desktop
Please download the attached file Scan.txt to your desktop
Double click the OTH file to run it and click Kill All Processes, your desktop will go blank.
http://oldtimer.geekstogo.com/OTH/OTH_Main.gif
Then select Start OTL. OTL will now run
[*]Double-click on the Custom Scans box and a message box will popup asking if you want to load a custom scan from a file
Select Scan.txt that you downloaded
[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Click the Internet Explorer button, post these logs in your Virus Removal topic.
Plan B
Download Rkill from here : there are several flavours to choose from, if one does not work then try the next
* rkill.com
* rkill.scr
* rkill.pif
Once it is downloaded, double-click on rkill in order to automatically attempt to stop any processes associated with Security Central and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, do not be concerned. This message is just a fake warning given by Security Central when it terminates programs that may potentially remove it. If you run into these infections warnings that close Rkill, a trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that rkill can terminate Security Central . So, please try running Rkill until malware is no longer running. You will then be able to proceed with the rest of my instructions.
Do not reboot your computer after running rkill as the malware programs will start again.
Then run OTL as above
thanks i have a friend who knows more about computers than me and i will let him try what u have suggested when he visits me on sunday
No problem I am subscribed to this thread, a quick fix that sometimes works is to restore the computer back a few days, using system restore
did the factory restore and now i dont see it dose this mean it is gone or could it still be on my system hiding were dose the stuff go when u do a restore what happens to the files that are on your system before the restore are they delated
When you do a factory restore the drive is reformated - so everything is gone
thanks 4 ur excellent and prompt help
MSC “c:\Program Files\Microsoft Security Client\msseces.exe” -hide -runkey what is this i just found it in my startup menu is it legit or could it be part of the virus i removed a few days ago left behind on my pc should i disable it and delete or leave alone
This is part of windows defender, may be left safely
thanks 
Additional information
Personal Internet Security 2011 activation codes:
U2FD-S2LA-H4KA-UEPB
UEPB-H4KA-S2LA-U2FD
Use these codes to disable Personal Internet Security 2011. Then scan your computer with anti-malware software.
http://deletemalware.blogspot.com/2010/12/how-to-remove-personal-internet.html
The last thing I would recommend would be activating it if it were still present. The original poster has done a factory restore (reformat) and no longer sees the presence of Personal Internet Security 2011.
Also see http://www.bleepingcomputer.com/virus-removal/remove-personal-internet-security-2011