Yet another fake anti-spyware application belonging to the WiniSoft family of malwares, InSysSecure is mainly targeted at European user groups, with versions in German, Italian and French. It uses scare tactics to try and trick users into buying its license. InSysSecure gets installed on a user’s system via Trojans that enter the computer through fake websites, codec downloads and shareware installations. Once established on the user’s system, InSysSecure creates some harmless and useless files within the hard disk. It then loads itself at startup and performs fake spyware scans, flagging the previously created harmless files as potentially dangerous spyware. InSysSecure then insists that the user should purchase the ‘full’ version of the software in order to be able to properly remove these ‘threats’. However, the so-called ‘full’ version of InSysSecure is no more capable of removing these ‘threats’ than the previously installed ‘trial’ version of the software, as they were falsely-generated threats in the first place. Hence users are strongly advised against falling for this kind of trickery.

In order to delete InSysSecure, it is necessary to stop its processes, deregister its DLLs, remove its files and folders and delete its registry entries. This process is outlined below.

File Removal Procedures

The first step to delete InSysSecure is to stop the following processes:

• “random”, like 29495zy1d5
• InSysSecure.exe

Then unregister the following DLLs which are related to InSysSecure:

• 103215zoj198.dll
• DLL files with random garbage names

The final step in file removal is to delete the following files and folders which contain InSysSecure:

• c:\Documents and Settings\All Users\Start Menu\Programs\InSysSecure
• %Temp%\.exe
• c:\Program Files\InSysSecure Software
• c:\Program Files\InSysSecure Software\InSysSecure
• c:\Program Files\InSysSecure Software\InSysSecure\InSysSecure.exe
• c:\Program Files\InSysSecure Software\InSysSecure\main_config.xml
• c:\Program Files\InSysSecure Software\InSysSecure\uninstall.exe
• c:\WINDOWS\103215zoj198.dll c:\WINDOWS\10543v5zus929.bin
• c:\WINDOWS\system32\29495zy1d5.exe
• c:\WINDOWS\system32\295859pz6ec.bin
• c:\WINDOWS\system32\2959spzrse1354.cpl
• c:\WINDOWS\system32\.exe

Once these steps have been completed, InSysSecure no longer resides on your hard disk.

Registry Removal Procedures

Removing files alone is not sufficient to delete InSysSecure completely. The following registry keys and settings, which are related to InSysSecure, must also be removed:

• HKEY_CURRENT_USER\Software\InSysSecure
• HKEY_LOCAL_MACHINE\SOFTWARE\InSysSecure
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InSysSecure
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “InSysSecure”

Now it is safe to say that your system is completely safe from InSysSecure.

Conclusion

Only experienced computer users should attempt to delete InSysSecure manually, as a wrong move could cause damage to the computer. Inexperienced users are advised to seek expert assistance, such as the consultant service offered by www.onlinecomputerrepair.org or to use legitimate antivirus software such as Spyware Doctor with Antivirus.