Home � Malware , Removal , Tutorial � How to Remove Antivirus 2009

How to Remove Antivirus 2009

sparksspace | Wednesday, January 14, 2009 | 1 comments

Antivirus 2009 is a rogue anti-spyware application.It is is an updated version of Antivirus 2008. Antivirus 2009 is usually promoted via a ZLOB/MediaAccess Codec installer found on adult websites.It floods the user with popups and fake system notifications.The user might click on one of the popups or notifications, all of which claim they will take him to a legitimate security tool, but try to make him purchase Antivirus2009's "licensed version" instead. It redirect web browser to antivirus-premium-scan.com, antivirus-best.com webscannertools.com, livesecurityinfo.com,antivirusonlivescan.com,bestantivirusscan.com

secureclick1.com or premiumlivescan.com and websites that sell the malware.

Symptoms

"Critical System Error",

"Your computer is infected",

Hijacked homepage to obscure webpage.

Flashing icons appear on your system tray (Near of your system clock).

Manual Removal

Search the following files and delete

Antivirus2009.exe
av2009.exe
av2009[1].exe
AV2009Install.exe
Antivirus 2009.lnk
Uninstall Antivirus.lnk

Go to Start > Search > All Files or Folders.
In the "All or part of the the file name" section, type in "Antivirus 2009" file name(s).
For better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button

Stop Antivirus 2009 Processes

Click the Start menu, select Run.

Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys ALT + CTRL + DELETE or CTRL + Shift + ESC.

Click Processes tab, and find Express Antivirus 2009 processes.

Once you’ve found the Express Antivirus 2009 processes, right-click them and select “End Process” to kill Express Antivirus 2009.

Unregister and delete .dll files

shlwapi.dll
wininet.dll

“Start” and then click on “Run”

Now in the Run command box, type “cmd“, and then click on “OK”

Type “regsvr32 /u filename.dll” where “filename” is the name of the file that you like to Unregister

Delete registry values:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\ CurrentVersion\Run\15358943642955870504508370025739
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “%ProgramFiles%\Antivirus 2009\Antvrs.exe”
HKEY_CURRENT_USER\Software\Antivirus

Other programs to remove Antivirus 2009:

Malwarebytes Anti Malware – Download | Malwarebytes' Anti-Malware 1.30
Windows Defender – Download
Spyhunter –Download | SpyHunter_Security_Suite_v3

Prevention

Keep your Windows Security up-to-date
Download and install a reliable anti-spyware software

Category: Malware, Removal, Tutorial

Welcome to SparksSpace . This blog launched on Dec 2007 with a focus on Technology.You can find latest Computer Software, Tutorials, Tricks,Tips & Software promotions here!