Remove Antivirus 2009 (Antivirus’09/Virus Remover 2009 Removal Info)

By Pete on Jun 24, 2008 | Reply

I don’t have Antivirus 2009, but I have Vista Antivirus 2008. Are there any differences?

By TK on Jun 25, 2008 | Reply

No big deal. They are from the same family.

By Ma on Jun 25, 2008 | Reply

I believed Antivirus 2008 and Antivirus 2009 are the same thing. Just different names. Have anybody tried system restore? I ain’t sure if it works.

By connie nj on Jun 26, 2008 | Reply

Antivirus 2009 is installed this morning accidentally. I am planning to drop off the computer in BestBuy to have them clean but it would cost so much I’d rather pay for a removal tool so I can get permanent protection. Please help me.

By azreemy on Jun 29, 2008 | Reply

how to remove the annoying antivirus 2008?? Is it by downloading SPYHUNTER or KASPERSKY ??

By MarkII on Jun 29, 2008 | Reply

azareemy, both are good products to remove antivirus 2008. However, they’s a catch. They are not free. It’s free to use is as a scanner. After the scanning process is complete, they will display the infected files, registry keys and path, then you can deleted the files manually w/o paying for it.

By Gna on Jun 29, 2008 | Reply

I used it to scanner the drive and deleted the files that showed up. Now Antivirus 2009 is gone. Thanks everybody!

By Torry on Jun 29, 2008 | Reply

Son of B*tch! I never installed it. Antivirus 2009 crap got into my PC this morning.

By Silbakor on Jul 2, 2008 | Reply

OK, i know I have antivirus 2009, but something is preventing me from seeing my C drive in my search and even in my computer, any would be aooreciated, I even paid for the full version of spyhunter, the thing keeps finding and deleting the same prgrams over and oer again.

By Silbakor on Jul 2, 2008 | Reply

OK, i know I have antivirus 2009, but something is preventing me from seeing my C drive in my search and even in my computer, any would be aooreciated, I even paid for the full version of spyhunter, the thing keeps finding and deleting the same prgrams over and oer again.

By alex on Jul 3, 2008 | Reply

PLEAS HELP ME! i just recently downloaded “antivirus 2009″
and now i am not to vew just about any websites. this antivirus thing pops up and tells me that there may be a virus on this site, and then wont let me vew the site. i tried everything i could find to deleat it but it never works. pleas, i need my computer back so help me pleas!
if u have any ideas email me at alexr94@cox.net plz plz plz and thank you

By Howie on Jul 3, 2008 | Reply

Gosh! This thing drives me crazy. I couldn’t get anything done and I am so mad now. I want to put the creator of Antivirus 2009 in jail for life! Who can tell me where they hide?

By MikeFields on Jul 4, 2008 | Reply

My computer was just infected.

My brother in law was downloading videos and then the Antivirus 2009 came up.

By chance I happen to be near and was able to identify the exact time it installed and locate files based on this.

I was able to remote it by doing:

- Killed the av2009.exe process using Task Manager
- Took a look at where the Antivirus 2009 shortcut pointed (they put one in the desktop)
- Took a note on the date and time of the av2009.exe file
- Searched the Registry to see if they were any references to av2009.exe. Did not find any.
- Removed the C:\Program Files\Antivirus 2009 directory and all files
- Removed the desktop shortcut
- Removed the shortcut in the Start Menu (be aware they put it in the upper area, where Windows Update is located)
- Rebooted, but then discovered that IE was still infected, in particular when I tried to navigate to Sysinternals. Also discovered that the Security Center applet in Control Panel was not working
- Went to Windows\System32 and found 3 files from about the same time of the infection:
ieupdates.exe
scui.cpl
winsrc.dll
- Again before removing the files I searched the registry and deleted references to ieupdates.exe (register to start automatically) and winsrc.dll (registered as a COM file)
- Reboot again and tried IE and Security Center, both are working now

Hope this is useful

By Jender on Jul 5, 2008 | Reply

Can anyone help?

I accidently downloaded AntiVirus 2008. After downloaded it started off that I couldn’t view any websites and now my computer won’t start up. It says to press ESC, F1 or F10 but when I press it nothing happens. I think I have lost everything on the computor and I don’t know how to fix it now..HELP ME PLZZZZZ…

amanda.r@windowslive.com

By Swish on Jul 5, 2008 | Reply

Hi all,i got rid of antivirus 2009 the easy way(im lazy,lol). I downloaded SpyHunter and paid the money,ran the program and removed everything it found. Searched my system for any remnants of av2009 and found nothing left behind.

By Ed Stafford on Jul 6, 2008 | Reply

Dear Swish,
You are lucky, downloaded Spyhunter it detected all the files that are associated with Antivirus 2009,but when we tried to pay for it, good ole Antivirus 2009 prevented us from completing the task. Cannot get on the internet at all now, any suggestions besides taking the computer to Best Buy?

By Dorris on Jul 7, 2008 | Reply

Please help me. I don’t know how to follow your instructions to remove Antivirus 2009 on my daughter’s laptop. Can make it easier so I can follow? Thanks a lot!

By Christina on Jul 9, 2008 | Reply

Make sure you search your registry for this file:

winsrc.dll

Delete all registries it picks up associated with Antivirus 2009. I find that doing this on top of everything it mentioned above in the instructions will take care of it without having to buy SpyHunter, or use any antivirus program.

Good luck everyone! Feel free to e-mail me with questions.

By Missy on Jul 9, 2008 | Reply

this stupid thing will not go away
ive read through all of the rules and it really wont go away….

so, i didnt register because im not paying 50 bucks for this piece of crap… and i cant get rid of it
someone help me =[

By June on Jul 9, 2008 | Reply

All these responses and the instructions on searching seem to have worked perfectly! antivirus2009 started killing our computer Monday. Searching as you indicated led to finding winsrc.dll, ieupdates.exe, and scui.cpl which had all come in 7/7. (Just removing the antivirus2009 program didn’t work at all.)Many, many thanks! You are now one of our favorite websites.

By Susan on Jul 9, 2008 | Reply

I followed all the instructions and was able to delete all the offensive files. But, I still have the folder for Antivirus 2009 in the Program Files. When I try to delte it, it says it is protected or in use. If I open it, nothing is there (since I deleted it all). Any thoughts? Thanks!

By Lucy Jenkins on Jul 10, 2008 | Reply

Hi, I have just purchased McAfee will this get rid of the apyware?

By sabrina on Jul 11, 2008 | Reply

i totally cant find the files that u have asked us to delete.
the anti-virus files i’ve already removed from my computer. but when i go to the net, it stops me agn
HELP!

By TS on Jul 13, 2008 | Reply

Thank you so much for your help! I just wanted to pass along this information as well. I had issues when I was trying to remove the “winsrc.dll”. It wouldn’t allow me to, so I did some research and found this information:::

Information about the W32/Delf.INE Trojan:

W32/Delf.INE is a trojan. The trojan will infect Windows systems.

The trojan may be dropped by other malware or may be downloaded from remote website by other malware. It may also be downloaded unknowingly by a user while visiting malicious Website.

Upon execution, the trojan drops the following files and terminates itself.

ieupdates.exe in the Windows System folder,
winsrc.dll in the Windows System folder,
winsrc[1].dll in the Temporary Internet Files folder.

The trojan modifies registry at the following locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{037C7B8A-151A-49E6-BAED-CC05FCB50328}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{037C7B8A-151A-49E6-BAED-CC05FCB50328}\InprocServer32\ThreadingModel
HKEY_USERS\S-1-5-21-(SID)\Software\Microsoft\Windows\CurrentVersion\Run

It also tries to connect to http: // fastupdateservice .com/upload/.

This trojan first appeared on July 02, 2008.

Blueball Other names of W32/Delf.INE Trojan:

This trojan is also known as Win-Trojan/Xema.variant, Backdoor.Win32.Delf.ine, Win32/VMalum.DDEL, TrojanDownloader:Win32/Yektel.A, Backdoor.Delf.BERQ.

By Koby on Jul 13, 2008 | Reply

Darn it! I woke up this morning and turned on my computer. Guess what? This damn Antivirus 2009 is in my computer! Please help! I didn’t install it.

By bekki on Jul 14, 2008 | Reply

Hi, Im in the UK, not sure where you are all from, I too am having problems. I have tried several removal programs, i have fully installed Avira Antivir Premium which should have stopped it installing – but it didnt. I have windows Vista and am really stuck on how to get rid. My internet keeps collapsing and several of my programs will not load. Has anyone an easy way to remove this or does anyone know where it has come from?

Thanks

By Alen on Jul 15, 2008 | Reply

Hi am just a 10 year old kid i was just researching on Google and wen i press a link on google this website called http :// www .topsearchresults3. com/feed/click.php?p=http%
3A//64.69.44.40/click/go.php?id=33c498ad-b5e
f-44fc-9282-b6731373e7f6&sid=4467d0af255d4e80b4f1fc9
bfc403266 keeps on popping up and it says ATTENTION! IF YOUR COMPUTER IS INFECTED, YOU COULD SUFFER DATA LOSS, ERRATIC PC BEHAVOUR, PC FREEZES AND CRASHES. DETECT AND REMOVE VIRUSES BEFORE THEY DAMAGE YOUR COMPUTER! ANTIVIRUS
2009 WILL PERFORM A QUICK AND 100% FREE CAN FOR MALWARE NOW? (RECOMMENDED) AND IT SAYS OK CANCEL Wen i press
Cancel this website pops up and its called
http: // antivirus2009-freescan. com/2009/1/_freescan.
php?aid=880341 Plz help me my email is
Alenjames1@hotmail.com

By Lexi on Jul 15, 2008 | Reply

I never downloaded Antivirus2009 onto my computer and have checked for any related files and all searches have come up empty…but antivirus 2009 still pops up and blocks me from certain sites! How can I stop this from happening? THANKS!

By Aspen on Jul 16, 2008 | Reply

Hi, my computer is doing the same thing that Alen’s is, I can’t find antivirus2009 or 2008 anywhere in any files. Help, it is getting really annoying!

By Jon on Jul 16, 2008 | Reply

Got it also, ran Spybot and wiped out some, but it came back, turned off “system restore” and ran again. Helped enough that I could access McAfee and renew my security program that I had let lapse 2 months ago.

Downloaded it and scanned, and it removed it completely. Lesson learned, keep a good security software package on at all times, its worth the investment.

By itsme on Jul 17, 2008 | Reply

hey guys,

i have windows vista and also got Antivirus2009 this weekend… i downloaded windows defender and it found the program and seems to have completely deleted the bugger! Try it!

By moses omokaro on Jul 19, 2008 | Reply

i am happy to have come across this sight in the net, i hope he will work for me.

By Frantz Jean-Pierre on Jul 20, 2008 | Reply

I purchase the Vista antivirus 2008 and now my computer can not work properly you Guys ask me tobiught 2009 my computer is all mess up I can not go on line I can not do nothing please send me a phone number so I can talk about my trouble thank you.

By I Hate AV2009 on Jul 20, 2008 | Reply

I have been fighting with this for 3 days now! I searched the web and found the comments at the top of this page. This worked wonders so thanks to whoever put these up there. The main thing that I found that I wanted to share that is not in these instructions is this: When searching the registry, I found a folder called “Search Assistant” and this was full of the files pertaining to this! I deleted the whole folder and all subfolders and files after doing all the other steps listed at the top of the page and FINALLY it is gone!!!

By JohnnyTheGreat on Jul 20, 2008 | Reply

It’s a tough lesson for me. I should have stayed away from those bad websites. Antivirus 2009 attacked my computer after I stopped by one of those websites. Now I can’t uninstall it.

By TJ on Jul 21, 2008 | Reply

Thanks Mike. I was able to Antivirus 2009 following your instructions. You saved my day!

By steve doty on Jul 21, 2008 | Reply

I need help please.

By arafath on Jul 21, 2008 | Reply

this is antivirus2009

By putir on Jul 21, 2008 | Reply

Just back up your data and format the computer if you know how to do it. I spent only half day to get my computer to back perfection.

By c filion on Jul 21, 2008 | Reply

i just purchased your antivirus 2009 and i can`t activate with your instructions
i would appreciate the latter in french if possible
my registration key: 4412 8593 7701 2488

By Nick on Jul 21, 2008 | Reply

I wish I have found this site earlier then I would have wasted two days going blind. Antivirus 2009 was removed in 1 hr but I think it’s worth the effort since I am no computer expert. Thanks!!

By anonamys user on Jul 21, 2008 | Reply

we should hack thier site and put up warnings about it i bet government would let us rofl… wait why doesnt government get involved oh and they could tell who i am by tracing stuff to it soo im sorry government but i want to do something to those pepole or peoples

By jessica on Jul 22, 2008 | Reply

i followed Mike’s advice, found hidden items and the one that I Hate AV2009 mentioned, but my computer is still coming back saying that i cannot delete the file folder of AV2009…it says access denied. then a bubble from AV2009 pops up everytime i try to get rid of it.

Any suggestions?????

By Meg Williams on Jul 23, 2008 | Reply

for all people who have AntiVirus 2009 installed onto your computer……

here is a quick fix: trust me ive had it on there but i delete peoples computers al the time from this kind of malware….

1st: go to ( my computer)
2nd: click on the image that displays your type of computer
3rd. go into program files
4th: click on antivirus 2009
5th: RIGHT click and delete or send to recycling bin
6th: hit back and RIGHT click on the pervious anitvirus 2009 file and repeat step 5
7th: RIGHT click on your recycling bin and hit empty bin

After that there should not be anymore popups from antivirus 2009
**
If you are still having any trouble with antivirus 2009 then you should have your computer checked out by a professional ….
sometimes your computer has malware that you cannot delete manually: you hard drive will have to be erased. im sorry for any troubles you may be having but i hope this helped you in some way

By Johny II on Jul 24, 2008 | Reply

Shoot. This Antivirus 2009 spyware is annoying! I can’t even go to go to symantec.

By 2lotek on Jul 24, 2008 | Reply

Make sure you shut down the antivirus 2009 before you try to delete the file from you system. I followed this advise and it worked out. I would like to note one extra step that I did was to dump all internet temporary as well as all system temp files.

MikeFields Says
My computer was just infected.

My brother in law was downloading videos and then the Antivirus 2009 came up.

By chance I happen to be near and was able to identify the exact time it installed and locate files based on this.

I was able to remote it by doing:

- Killed the av2009.exe process using Task Manager
- Took a look at where the Antivirus 2009 shortcut pointed (they put one in the desktop)
- Took a note on the date and time of the av2009.exe file
- Searched the Registry to see if they were any references to av2009.exe. Did not find any.
- Removed the C:\Program Files\Antivirus 2009 directory and all files
- Removed the desktop shortcut
- Removed the shortcut in the Start Menu (be aware they put it in the upper area, where Windows Update is located)
- Rebooted, but then discovered that IE was still infected, in particular when I tried to navigate to Sysinternals. Also discovered that the Security Center applet in Control Panel was not working
- Went to Windows\System32 and found 3 files from about the same time of the infection:
ieupdates.exe
scui.cpl
winsrc.dll
- Again before removing the files I searched the registry and deleted references to ieupdates.exe (register to start automatically) and winsrc.dll (registered as a COM file)
- Reboot again and tried IE and Security Center, both are working now

Hope this is useful

Jul 4th, 2008 at 10:27 pm

By anti-antivirus-2009 on Jul 25, 2008 | Reply

I followed yahoo answer and got here. Thank god! Now I am spyware free. Thanks for your help! Antivirus 2009 is gone and hopefully it’s forever gone!

By Kdixon on Jul 25, 2008 | Reply

Do a system restore to remove it. That works.

By Computer tech on Jul 25, 2008 | Reply

Hello all,
I have been seeing this for several days on several of my clients workstations and have been reformatting and reinstalling to resolve the issue. I can see there are less drastic recovery methods available now… The question I have is this… If people are buying this antivirus2009 software then where is there money going to? That is the person who’s balls we should get. This is clearly a case of fraud and consumers should be contacting state and federal agencies to report this particular fraud. If the feds didn’t have their heads up there a$$e$ they would investigate this and prosecute the person collecting the credit card payments. Or if not they could at least let us know where these jerks are living………

By Nate Wilde on Jul 26, 2008 | Reply

Mike Fields,

Thanks!! That worked perfectly, for free! I really appreciate it, that sh** was driving me nutz!

By mad miller on Jul 26, 2008 | Reply

I DID A GOOGLE SEARCH THIS AFTERNOON TO GET PRICES ON USED LAWN EQUIPMENT. I CAME BACK TO MY COMPUTER THIS EVENING AND FOUND A WARNING FROM ANTIVIRIUS2009. I KNEW THAT SOMETHING WAS WRONG.SO I BEGAN LOOKING IN MY FILES AND DID NOT SEE A FOLDER FOR THIS. READING THESE RESPONES I NOTICED THAT WHEN I GOOGLED THIS AND WENT TO THE SIDEBAR FOR RESULTS FOR BEST 3. THIS IS WHERE I GOT THE VIRUS FROM. THANKS FOR THE INFORMATION STILL MAD!

By Kym on Jul 27, 2008 | Reply

This antivirus is just pissing me off. Who ever invented this thing is a sick minded bastard

By Jared on Jul 28, 2008 | Reply

I cant even access task manager. It blocked my acess to it.

By fitri on Jul 28, 2008 | Reply

hey i purchase the ‘antivirus 2009′ with a credit card. will it be charge? pls reply asap thank you

By Terry on Jul 28, 2008 | Reply

I was unable to download the Spy Hunter, Internet Explorer would stop working, and I was also unable to find the virus files (control “F” or find) due to Windows Explorer would stop working.

So, I found the av2009 folder by: Start, Programs, Av2009; I right clicked on the folder and deleted the folder. Then I right clicked on my desktop and deleted the shortcut. Then I right clicked on my system tray and deleted the av2009 icon from my system tray. I then rebooted my desktop. I may have been able to find the additional files by control “F”, but I chose to do a system restore about a week before this virus occurred. System restore emptied the temporary files, restored the registry, and corrected the problem. This took me about an hour to correct and did not cost me anything! I hope this helps and is detailed enough.

By Raleigh on Jul 28, 2008 | Reply

I have windows Vista, and was navigating through IE. I just had the Antivirus 2009 screen that popped up after I clicked on a google link. It went through the whole “do you want to install” pop up window. I clicked on no of course, but that didnt matter. It started going through the scan process but I immediately closed my explorer windows, killed the internet connection, restarted, and searched for “*2009*” and didnt find anything. Been surfing for a while now, haven’t had any pop ups yet. I’ve got Norton Antivirus (beta)(free trial version) doing a full scan in the background. So far only tracking cookies have been found.

By Drue on Jul 29, 2008 | Reply

my task manager got blocked…then half of the start menu…which left me completly stuck.

The best i could do was save a malware remover to my flash drive from another computer and upload it before the pop ups got bad…dragging them all to the bottom of the page helps…just dont exit them…leave them be and they won’t pop up as much…i also disconnected the internet while i was trying to figure it out…it cuts down on the internet pop ups…

and now….I WAIT!

By natalie cooper on Jul 29, 2008 | Reply

1st: go to ( my computer)
2nd: click on the image that displays your type of computer
3rd. go into program files
4th: click on antivirus 2009
5th: RIGHT click and delete or send to recycling bin
6th: hit back and RIGHT click on the pervious anitvirus 2009 file and repeat step 5
7th: RIGHT click on your recycling bin and hit empty bin

After that there should not be anymore popups from antivirus 2009

I JUST WANNA Y THANKS TO MEG WILLIAMS FOR THIS SOLUTION YOU REALLY SAVED MY DAY
IT WORKS AND IS REALLY SIMPLE!!!

By rol on Jul 29, 2008 | Reply

Used Spyhunter (bought it) and it’s gone. Has anybody thought that maybe it is an anti spyware company that comes out with this crap so that we need to buy their stuff?

By Very Upset on Jul 29, 2008 | Reply

Is this SpyHunter Spyware Detection Utility any good? I have not downloaded the antivirus2009 but it keeps popping up and i think it restricts me from accessing some websites, plus it made my computer a lot slower. Any suggestions?

By RedSoxNation on Jul 29, 2008 | Reply

WTF! I didn’t install Antivirus 2009 in the computer. I can’t do anything now. I don’t want this here. Whoever puts this Antivirus 2009 in my computer should uninstall it immediately or I will take further action!

By lisa on Jul 30, 2008 | Reply

I have antivirus2009 on my computer. I am trying to do the fixes that are being recommended, but my computer keeps shutting down after only a few minutes. Is this is happening to anyone else? Can anyone help?

By lucy on Jul 31, 2008 | Reply

Hi this software av2009 downloaded it’s self it’s making my life a living hell! How can I uninstall this off my computer?? Please help me ! It keep on popping up and I can’t get my work done ! Please help me !!!!

By KAYKAY on Jul 31, 2008 | Reply

Well I have the solution to those files that are “in Use”

Go to Start
then click Run
type in – MSCONFIG
Click the startup tab
Select the virus that keeps starting up for example AV2009
this will deselect it from starting up when you start your computer…it will not be in use anymore.
Click apply
Restart your computer

Then go to ur hard drive, program files, select the virus file and delete it.

IT WORKED FOR ME

By Leslie on Aug 1, 2008 | Reply

So the same thing is happening to me. but I looked everywhere on my computer and trashed anything that said AV2009. I followed the top comments and my computer is finally working! I seriously believed I had a virus.

By tornike2d on Aug 1, 2008 | Reply

I want uninstal Antivirus 2009

By Betsy Finkbeiner on Aug 2, 2008 | Reply

I bought antivirus 2009 and didn’t reseive a code

By Lise Hunt on Aug 2, 2008 | Reply

Here’s how we got rid of it..(System Restore thru MSCONFIG)
Go to Start
Go to Run
Type in MSCONFIG
Go to General tap
Click on to Normal Startup
Hit Apply
Hit Launch Restore
Pick a date prior to infection
Click on that date
Click next.
Restart computer.

By denny on Aug 3, 2008 | Reply

I got Antivirus 2009. I followed Lise Hunt’s steps but Antivirus is still there. I am getting so frustrated now.

By Patrick on Aug 4, 2008 | Reply

I want to download antivirus 2008 remover

By Jim on Aug 4, 2008 | Reply

here’s what i did. first off my norton and spy sweeper where out of date. i went and bought kaspersky antivirus from office depot. uninstalled norton and spy sweeper then installed waht i feel is the better kapersky. you can use any legit antivirus as long as its up to date. if you do buy new antivirus make sure you uninstall old ones first. then i ran kapersky found over 28000 infected files and deleted and or quarantined. upon reboot was still getting pop ups. Now the trick is you have to go to my computer then program files find the antivrus 2008/2009 folder and delete it, also delete any av2008/9 desktop icons. then you must delete all temp internet files cookies and such from internet explorer and or firefox. you can do this by opening ie then goto tools then internet options. delete all! then goto system restore and turn it off, that right turn it off. if need be you can do all this in safe mode (just reboot pressing f8 repeatidly will get you to safe mode.) after your finshed removing the program file, temp internet files and turned off system restore you can reboot and you should be relativly ok just run a full system scan with your antivirus software to remove anyting left. Dont buy av2008/9!

By Tindi on Aug 5, 2008 | Reply

I hate Antivirus 2009!!!! Go away please!!!

By GoGo on Aug 6, 2008 | Reply

I lost a lot of sleep and hair due to this annoying antivirus 2009. I tried Jim’s method. No avail. I tried natalie’s method. Same Antivirus 2009 here. I am about to throw my Thinkpad across the street. (((

By pat on Aug 6, 2008 | Reply

i couldn’t do a system restore. all restore points are gone. i believe antivirus 2009 deleted all of them. it really sucks… now i need to use my daughter’s computer. please help.

By Larry on Aug 6, 2008 | Reply

It appears I have recieved a gift .. Vista 2008 AV… nice.

All the suggestion are great expect the system will not let me boot into windows… it just keep crashing (blue Screen) when attemping to load desktop. Any suggestions… since I can not see my files to delete them.

Thanks
Rewards for the answer and let’s all post a boundy for the creator.

By Justin on Aug 7, 2008 | Reply

You just don’t know how much I appreciated everybody’s help here. I was able to tackle Antivirus 2009 hijacking website in less than an hour. Thanks everybody. You guys are amazing!

By Thomas Loser on Aug 7, 2008 | Reply

Dear Sirs: This Power anti-virus is very annoying….I am not a computer guru, however if you can give me detailed instructions for removal I will appreciate it greatly. Thank you! Thomas

By Ruth on Aug 7, 2008 | Reply

Hi Everyone,
I thought I was crazy or else I was going crazy. I spent all last evening fighting this. Nothing worked. I have 3 really good spyware programs so AV2009’s warning was stupid. I did complete scans, hours worth, removed some parts but not all. Found I had 4 spyware and 1 virus, all removed now, but this keeps coming back. I was going to contact Better Business Bureau but then found this and other sites with multi information about it. Thank you everyone for all the tips.

By Hashem on Aug 8, 2008 | Reply

Betsy-Finkbeiner, you really bought antivirus 2009!

Did your credit card get charged?

Someone should track these people down and put them in the slammer.

By Ruth on Aug 8, 2008 | Reply

I’m Ruth, I wrote a couple messages ago. After learning what a scam this was, I actually wrote a complaint to the internet fraud division of FBI. I’m sure they’ve had other complaints. Then I found that my existing antivirus programs weren’t as good as I thought. I went ahead and bought Ad-Aware 2008, scanned about 4 times all together, plus removed it from my “processes running”. Still a trace now and then, but it’s basically gone and I can use my computer again. Good luck everyone.

By Restore on Aug 8, 2008 | Reply

I just spent hours trying to delete Antivirus2009 that got on my computer. After reading the responses I tried “System Restore” and it worked !!!!!
START menu- ALL PROGRAMS – Accessories – Sytems Tools – System Restore. I went back a week … computer re-started and worked like before. Thanks for the suggestion.

By Elmer on Aug 9, 2008 | Reply

With Rol and Smith on getting rid of AV2009

Bought SPYHUNTER followed all the instructions. Restarted computer. It’s gone tool bar icon and all!!

If your nervous about messing around in your system or don’t feel capable just break down and buy the SPYHUNTER. It seems to work.

By Mike on Aug 11, 2008 | Reply

Hello to all, here all the responses have been very helpful I have been able to get av2009 off my computer. However when this all started it seems all my internet sites that need a login and password are not running properly. Some site I put in login and password and it just kicks me out to the home page, some sites they basically put in a XXX where login should be and XXX where password should be. Any suggestions so I can start going to my internet sites again.

By moritz on Aug 11, 2008 | Reply

it doesnt work tried it 3 times

By Ruth on Aug 11, 2008 | Reply

It’s a nasty little bugger. It has popped back on a couple times but now I’ve just gone into control-alt-delete and then processes running and highlight it (AV2009) and hit the button to stop it running. It goes away til the next time. The one suggestion of going back a few days and system restoring to back then, back when, is something I’m also going to try.

By Brnson on Aug 12, 2008 | Reply

O.K. I jusr removed it, I,think.
On the main page of this av2009 program @ the top right is a big box marked HELP.
CLICK ON IT & SCROLL DOWN TO REMOVAL INSTRUCTIONS.download the file.
then go to start button, programs,av2009 uninstall, run it, AV2009 GONE!

By Carol on Aug 12, 2008 | Reply

Downland Mozilla Firefox to use as your browser, it seems AV2009 like Internet Explorer. You can access websites with Mozilla, download that first then delete IE, you can always download again later if your prefer.

By justin on Aug 13, 2008 | Reply

How in the world did you clean 09 so fast?
brian,

By Gary on Aug 14, 2008 | Reply

My God am in trouble!In my office we share one computer for the internet and i am the “systems administrator” antivirus 2009 faked me and installed on the net pc. People are already complaining and are soon going to slaughter me! Guys outthere pliz someone with a working solution rescue me!!!

By Cathy on Aug 14, 2008 | Reply

No. I already have McAfee, and finally contacted them to see if they could remove Antivirus 2009. They said no, but told me to click on the ‘virus removal’ tab on the McAfee website. I did that, and saw that it costs about $80 to pay to have somone remove the virus and I don’t even know if it would work or not. Didnt’ do it. I’m checking out this ebsite first.

Cathy

By Cathy on Aug 14, 2008 | Reply

How can I get rid of Antivirus 2009 and keep it from infecting my computer ever again? Do any of the antiviurs programs work? Which ones? I’m willing to buy one, but only if I knwo it works for sure! Thanks!

By Shan on Aug 14, 2008 | Reply

Dude! It looks like I deleted everything about antivirus 2009 off my computer, but I CAN’T EVEN LOG ON MY YAHOO!!!
I try and my security center thing pops up, blocking it, and it has two choices at he bottom, I can either get “antivirus protection” or I can continue unprotected, but no matter which one I click, it’s going to take me to some antivirus 2009 add. Is there anyway you can help me. I don’t know if it’s my security system or what!
I NEED MY YAHOO!!!! please…

By Shan on Aug 14, 2008 | Reply

I GOT MY YAHOO BACK! System restore totally worked. Got to START- PROGRAMS – Accessories – Sytems Tools – System Restore. It worked! You don’t have to pay or anything!

By Kuruvilla on Aug 15, 2008 | Reply

Thank you mike….your info helped a lot….managed to get rid of AV2009. u have a great day man for making my day

By david fowler on Aug 18, 2008 | Reply

cant get rid of this anti virus 2009 crap of my
computer , can you help

By Jackie on Aug 18, 2008 | Reply

I didn’t install this **** of virus , but it just infected my desktop, can’t see anything, besides my screen saver, am just here without a desktop…s***t…

Does anyone know how i can get my desktop back?….thank you!

By Alan on Aug 18, 2008 | Reply

Is there anything that i can buy from a shop to get rid of this antivirus 2009? as i cant get on to my internet (because of this **** of a virus!) to download any of the recomended spyware.

By Sean on Aug 19, 2008 | Reply

I tried to delete the winsrc.dll file but it tells me I can’t delete it because access is denied. What can I do?

By Pascal on Aug 19, 2008 | Reply

Hello I can not delete anyone can accurately help, I ask no longer get down with me always open as thousands of internet sites

e-mail: Bushido14@t-online.de

By Kristen on Aug 19, 2008 | Reply

AV 2009 was a pain for me too. I tried everything I could but being a beginner at everything but surfing I was clueless. I broke down and bought spyhunter and if you have problems with it down loading do not give up. The biggest problem was when av was detected it attempted to shut down my computer but I caught it in the nick of time. Spyhunter has deleted it and I have no trace at this time . So if you are a beginner or have no clue it appears Spyhunter is the fix.

By Jose on Aug 19, 2008 | Reply

I assume the manual removal works, but I didn’t have the time and energy to deal with this anymore. So, I took the stupid but easy way out. I bought spyhunter as recommended here and it worked. Yeah, I am a sucka! I will find a way to prosecute these guys who created Antivirus 2009. I lost so much productive time ’cause of this.

By Aaron on Aug 21, 2008 | Reply

I seem to be having the problem with this AV 2009. However it is not installed on my computer and i cannot find it in either of my hdds. i haven’t tried any of the solutions yet. When browsing i do get the popup saying this and that buy me you have infections and so and so forth. i have found a way to avoid these though by opening a new tab and copying the website and pasting it into the url.

By Bob on Aug 21, 2008 | Reply

the easiest way to stop the pop ups is by blocking the websites i.p. address.

i’m using windows xp pro…(step smight be differant for other users)

go to tools in your internet explorer window…internet options…privacy…then click on sites

now add the i.p. address:

78.159.97.247

and

main-scanner.com

then click on “block”

this will block the annoying 2009 antivirus pop ups

By Aaron on Aug 21, 2008 | Reply

to Bob, will that work for firefox, because i have tried to block certain sites this way and is usually not the case with firefox.

By thegenius on Aug 22, 2008 | Reply

I have antivirus 2009 for 3 days. It is worse than all the women in my life! how to delete it?

By NOOBLING on Aug 22, 2008 | Reply

if you want to maually remove it by stopping the process in task manager and deleting the folders and files and so forth… but it wont let you delete the folder you can just renname the folder and that would enable you to delete it

By helen on Aug 22, 2008 | Reply

I am a patient, kind grandma type, but I’d like to choke the living crap out of the AH who
did this. It is sooooo annoying.
I am not a techy and don’t even know where to
start other than hiring help.
I have to go tomorrow for a little while so I’m disconnecting the computer. When I return next week I’m afraid everything will be this
stupid AV2009. It almost is covering everything now. Who the heck is buying it or why would they want to with such aggressive tactics. Like I said I would like to choke the living crap out of them. There has to be a special place in hell for them. hb

By Forum Zakkum on Aug 24, 2008 | Reply

Good

By Patz on Aug 24, 2008 | Reply

I found a soloution to all of your problems! Use this info to delete antivirus!!!!!! I am 10 years old. I deleted antivirus out of my computer for 2 weeks. i wanted to be sure before telling u so u dont mess up. There is NO DOWNLOADING NEEDED!!!!! Step 1. right click your mouse to delete a file. Click on “remove from list” or “delete”. When done click on recycling bin. Step 2.Go too recycling bin and delete anti virus 2009. Just in case search at all files. If doesn’t work i’ll try to look for more soloutions. Thank you very much. Oh and also i did this on window vista and not on aol or other kinds of brands just in case just try it.

By hmatty on Aug 25, 2008 | Reply

Hahahaha, you’re the admin, and you fell for it?? My GOD man… You SHOULD be tarred and feathered for such a dumb move.

By Jean on Aug 25, 2008 | Reply

Thank you Lise! We removed ours doing the System Restore steps she provided above. Yahoo! I thought my husband would have a nervous breakdown on this one!

By Charles on Aug 26, 2008 | Reply

Thanks for the help. This little sucker looks like Windows antivirus. It disabled my CA Antivirus and tried to install itself. Fortunately I woke up in time and stopped it.
Thanks for all the postings. It helped immensely

By Peter on Aug 26, 2008 | Reply

AV2008/9 is morphing. This morning, between 08:00 and 09:00 GMT on 26 Aug 2008, my XP Pro system was attacked by fake AV offering posing first as antivir-64.com and the as msscanner.com. I’ve added both to my BLOCK list in IE and await the next attempt. Beware!!

By Peter on Aug 26, 2008 | Reply

AV2008/9 is morphing. This morning, between 08:00 and 09:00 GMT on 26 Aug 2008, my XP Pro system was attacked by fake AV offerings posing first as:

antivir-64.com

and then as:

msscanner.com

I’ve added both to my BLOCK list in IE and await the next attempt.

Beware!!

By Brian on Aug 27, 2008 | Reply

when getting rid of the above mentioned registry entry there will also be one called av2009 in the same folder…which carries a long number attached to it, this corresponds with a folder in the “programs” folder which contains countless entries for adware etc…delete!

By Cindy on Aug 29, 2008 | Reply

re Bob #103

Thank you, thank you. I just blocked the IP address and those annoying, every minute, pop-ups have stopped compltely.

Yippee…it was easy…took less than 30 seconds.

By Antivirus 2009 on Aug 30, 2008 | Reply

Antivirus 2009 completely destoyed my PC. Popups consistently. It’s so annoying!

By Mike on Sep 7, 2008 | Reply

My PC is infected with both antivirus 2009 and ms antivirus. I have tried the manual removal for both but CAN NOT find any of the listed processes, files, or registry values. Please advise on what to do. Thanks.

By reythor on Sep 8, 2008 | Reply

I think I snared the devil; go to SEARCH and
search for “av2009″ when it shows up right click on the mouse and click Delete, and hopefully it will have gone to HELL.

By Carolyn on Sep 11, 2008 | Reply

Thank you so so so much for all your advice! I had several msa programs on my computer, and most of them I could delete through add/remove programs. MSA.exe however would not delete, and I kept receiving pop-ups. I followed the registry deleting instructions above and it’s completely gone. Thank you!

By MalwareFighter on Sep 12, 2008 | Reply

I think the fanily of XP antivirus scamware showed how actually vulnerable and imperfect popular antivirus suites are. People bundle their computers with loads of security programs only to find out that Antivirus 2008/2009 feels just great in their protected systems.
At Yahoo Answers it’s often recommended to install a dozen of all kinds of malware removers. Takes quite some time, but not always helps to clean out the pest.
Quite unexpectedly, best AV 2009 removal tools so far are free and don’t need installation.

By NO on Sep 17, 2008 | Reply

Antivirus 2009 got into my pc last nite and I am still fighting to clean it. What’s the most sufficient and efficient to clean this?

By Greensburg on Sep 17, 2008 | Reply

Well, I removed Antivirus 2009 spyware last night. However, it strikes back today. How can I possibly prevent this from happening again? Thanks!

By donnie on Sep 20, 2008 | Reply

I deleted Antivirus 2009 files but it still shows a bunch of popups. Is there anything that I missed?

By Maria on Sep 21, 2008 | Reply

Come to realization that I can’t remove this myself. It would be great if someone call send me a tool to get rid of Antivirus 2009 automatically. (note: I have no ideas how the computer works. I only check email and upload flickr photos) Thanks so much.

By nothappy on Sep 22, 2008 | Reply

screw those people who created antivirus 2009!!! it destroyed my laptop and i can’t do anything to it. now i have to spend hundreds to have something fix it. i am not happy at all. i hate those people!!

By Computer Xpert on Sep 23, 2008 | Reply

It is really hard to get rid of viruses there are places with in the computer called the registry were viruses can regenerate. The good way to get rid of them is safe mode other wise you would have to wipe your whole machine this is the most effective way to get rid of them. I can give instructions if you would like.

By The person who needs computer help on Sep 25, 2008 | Reply

ok, I installed it by accident antivirus, NOW I CAN’T GET RID OF IT HELP! I’ve tried doing the stuff it’s mentioned but some things jsut WILL NOT delete!! HELP! It tells me that like since it’s in use I am unable to delete it! but I CAN’T turn it off!

If you can help me please email uranaznwannabe@hotmail.com!!

By Connie on Sep 28, 2008 | Reply

Thank You!

By helper on Sep 28, 2008 | Reply

Please send me an email if you need any helps. I was able to follow the instructions and uninstall Antivirus 2009 from my HP laptop. Don’t be afraid to try.

By bill.s on Sep 28, 2008 | Reply

gone!!!! thanks everybody.

By Stacy on Sep 28, 2008 | Reply

My god! Antivirus 2009 is sooooooo annoying!

By robert on Sep 28, 2008 | Reply

REMOVE antivirus 2009 pro REMOVE off my PC REMOVE REMOVE REMOVE REMOVE HELP

By Grrrr on Sep 28, 2008 | Reply

So I went to stop the processes, and none of the listed processes on this site are even on my list. Then I went to delete the files, and I’ve only managed to even find one to delete from that list…I’m even searching the hidden files. Am I doing this right?

By Grrrr on Sep 28, 2008 | Reply

Okay, so then I went to the registry and couldn’t find exactly what this site said, but all those files I couldn’t find by searching I deleted from the registry. No antivirus pop ups yet…is it gone?

By Anonymous on Sep 29, 2008 | Reply

There’s a lot of people stating that they have boughts Antivirus 2009, and why is there PC now not working…I can only feel for you but surely you have realised now that you have been scammed.

Antivirus XP/2008/2009/Vista (family) is the virus itself if you click on the popup and install it to scan your computer.

So dont install it, and dont pay for it, you will not get your money back.

Get a good virus program (kaspersky 2009 is very good) and firewall (Kaspersky internet security includes this).

Otherwise use Mike’s instructions above to remove manually. Good luck!

By John on Oct 1, 2008 | Reply

Simple solution = backup data + reimage!

By Tiller on Oct 2, 2008 | Reply

I was a fool that bought the damm package. I have to admit that they have duplicated the windows stuff very well. I’m in IT and I think this is the first time I’ve gotten nailed like this.

If you have purchased this, make sure you dispute the charge with VISA or MasterCard right away. You should be able to get your $$$ back this way.

Given enough complaints the credit card folks will pull the accounts. Unfortunately these lowlifes just reopen under a different name and account.

Tiller

By Medo1312 on Oct 2, 2008 | Reply

today av2009 tried to install itself on my pc. because i had av2008 on my school computer, i cancelled the installation (terminated the processes in task manager).

You should end all processes trees (right click in task manager) that are unfamiliar – i had ‘b.exe’ and other ones without descriptions(they have descriptions on the right, DON’T END ANY SYSTEM PROCESSES).

Then i installed spywarehunter which found a trojan in the registry.
Now just go to start>run and type ‘regedit’. now find the registry which is shown in spywarehunter (By me it was ‘HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Somefox’).

Then on the right side you have under ‘data’ the location of a exe file that will run on every start up. find that file an delete it (and i had a same-named .cfg file, delete it too). then go back to regedit and delete the registry mentioned above. that should be it.

THIS IS ONLY USEFUL IF YOU HAVEN’T INSTALLED AV2009 BUT THE ‘your system might…’ BALLOON COMES SHOWING UP!

By Arturo Yanez on Oct 3, 2008 | Reply

I bought vista antivirus 2009 on 9/01/2008
online but I try to use this antivirus program
but I need the activation code, because I pay
for this program.
I need the activation code or the phone number
for talk with somebody. thanks for your help….

By naysayer on Oct 4, 2008 | Reply

Antivirus 2009 is so annoying! I removed it and av2009 came back..

By rockincindy on Oct 5, 2008 | Reply

Thank you soooo much, it really worked!!

By upton96 on Oct 6, 2008 | Reply

Antivirus has hijacked my google mail account.
Microsoft help desk got the major problem fixed but the google hijacking persist. Any ideas.

By Nathan on Oct 7, 2008 | Reply

These guys are a bunch of scammers who supposedly run their company out of a basement somewhere in China or the Eastern Europe (I’m not trying to offend people belonging to these communities). I was tricked into paying for this software too, but them when I called them to ask for a refund, they said, they were e-mailing the copy of their “Refund Policy” which I never received.

By B on Oct 8, 2008 | Reply

Nathan, you shut up! Don’t condemn the wrong people when you don’t know nothing about this.

By maha on Oct 8, 2008 | Reply

This is going out of control. Why nobody takes actions against these bad boys? Why no laws to govern against antivirus 2009 which is a fake product? it’s absolutely insane.

By Ted on Oct 9, 2008 | Reply

I got “Smart Antivirus 2009″ today, the bstarding thing is wrecking my head. Im assuming its of the same ilk as the ones mentioned.

Gonna just reinstall windows, canr be arsed with all this malarky.

Also, for those having trouble deleting files, try restarting in safe mode to delete them.

By DriveMeCrazy on Oct 12, 2008 | Reply

My computer was infected with Antivirus XP 2008 so I brought it to Best Buy and they cleaned it for me. Exactly one week later, I got Antivirus 2009 instead. I was just looking for some mp3 and lyrics. God damn it! I am broke and I don’t have the money for Geek Squad again.

By Jenn on Oct 13, 2008 | Reply

hey, i’m trying to manually remove anti virus2009. i’m in the step of deleting the files related to it. I keep on deleting it. Even in my recycle bin, I delete it but it keeps on coming back! PLEASE help me! pls email me the clear procedures on deleting the files I need to delete. or post the answer here. or talk to me via YM so I can perform the deleting of the files while you’re teaching me how to do it. pls. leaf_pretear is my yahoo ID. thank you.

By susan on Oct 13, 2008 | Reply

Hi, I had 2009 antivirus, was able to remove it by using a malware download. However, I still cant find/see my control panel. Any ideas on how to get that back?

By Toke on Oct 15, 2008 | Reply

One of the best ways to rid a computer of any malware is to switch off system restore,go into explorer page in Tools and tick box to show all hidden files and folders then reboot in safe mode then perform a scan online or offline. I find that Kaspersky’s free online virus scan is one of the best. It wont delete them itself but will give you the references whereby you can rid manually.Of course no malware scanner is not 100% so several different scans sometimes maybe required for a really nasty to be detected/deleted.

By Darko on Oct 16, 2008 | Reply

Article is not covering full list of malware files. There are other registry keys and also exe files.

It removed all files except

Program Files/Application/wcm.exe that is not removed, and it could not be removed manually.

By Mike on Oct 18, 2008 | Reply

This av2009 is clearliy a fraud. Why isn’t the law on this? Their probably paid off by the anti virus coroprations. I would not be suprised if the corp’s themselves made these virus’s or hired someone to make them.

AV2009 uses Microsofts our symbol, the sheild, to work behind. Were is MS on this fraud.

By guram baghdavadze on Oct 19, 2008 | Reply

I want cancel on my PC av.2009.exe.

By RB on Oct 19, 2008 | Reply

Followed the above instructions for removal, but am still getting the popups ad nauseum.

HELP!!!

And by the way, they do have a main website with a removal tool, but it doesn’t remove the interminal popups.

This is a church computer which was donated, but we can’t get any work done on it because of the popups.

Wish they could find these scam artists, because they need to be in prison.

By Robbyne on Oct 20, 2008 | Reply

To diable this pain in the butt so that you can make the changes….
Go to Start
Click Run..type in msconfig
then go to startup tab on that…scroll down and uncheck antivirus 2009…
This disables it from working…it was on there 3 times on mine so keep looking even though you find it once.
This disables it from startup and you can then work on taking it out of the computer…Hope this helps

By solvedit on Oct 21, 2008 | Reply

Hi, I just fixed this problem in a few mins after unsuccessfully trying alot of suggested ’solutions’. The problem is a file called brastk.exe. Find this file and delete from the machine, should be in program files\windows\system32. The go to the registry using regedit, and go to hkey_current_user\software\microsoft\windows\run\ and under there it will be an entry called brastk. Delete this entry. Restart PC and should be fine (no more red balloon in taskbar warning of infection).

By Linda on Oct 22, 2008 | Reply

My son had this on his computer last night while he was playing a “internet game”. I tried to use his computer to GOOGLE the virus name to see what was going on, but the virus had taken over GOOGLE and kept redirecting me to other search engines and would not allow me to search — evil virus! Went to another computer and found your website. Followed all the instructions above and it seems to have removed successfully. Took a lot of searching to find all the files. The brastk.exe file was the problem for me. I did a SEARCH for ALL the dll files (searched for *.dll) and right clicked and removed all the ones that had added themselves the day the virus appeared. Also did a SEARCH for all exe files (searched for *.exe) and saw the brastk.exe file – right clicked and removed it and the red X in the taskbar disappeared. Be sure to empty the RECYCLE bin so the virus is removed from the computer completely.

Will check laptop tonite after work to be sure it is really gone. Fingers crossed!

By tkman on Oct 22, 2008 | Reply

I’m involved with IT support.
I have had to remove this a few times and the instructions that I found most useful were from MikeFields. 2lotekalso had a good extra step which involves deleting temporary files.
For your reference the recommended steps are repeated here.

#

By 2lotek on Jul 24, 2008 | Reply

Make sure you shut down the antivirus 2009 before you try to delete the file from you system. I followed this advise and it worked out. I would like to note one extra step that I did was to dump all internet temporary as well as all system temp files.

MikeFields Says
My computer was just infected.

My brother in law was downloading videos and then the Antivirus 2009 came up.

By chance I happen to be near and was able to identify the exact time it installed and locate files based on this.

I was able to remote it by doing:

- Killed the av2009.exe process using Task Manager
- Took a look at where the Antivirus 2009 shortcut pointed (they put one in the desktop)
- Took a note on the date and time of the av2009.exe file
- Searched the Registry to see if they were any references to av2009.exe. Did not find any.
- Removed the C:\Program Files\Antivirus 2009 directory and all files
- Removed the desktop shortcut
- Removed the shortcut in the Start Menu (be aware they put it in the upper area, where Windows Update is located)
- Rebooted, but then discovered that IE was still infected, in particular when I tried to navigate to Sysinternals. Also discovered that the Security Center applet in Control Panel was not working
- Went to Windows\System32 and found 3 files from about the same time of the infection:
ieupdates.exe
scui.cpl
winsrc.dll
- Again before removing the files I searched the registry and deleted references to ieupdates.exe (register to start automatically) and winsrc.dll (registered as a COM file)
- Reboot again and tried IE and Security Center, both are working now

Hope this is useful

Jul 4th, 2008 at 10:27 pm

By john on Oct 22, 2008 | Reply

hi everyone. this virus is absolutely horrible. my problem is though that I havent actually downloaded the program antivirus 2009. all it does is show the little red circle next to the time in the bottom right of my screen and it says that i have a virus and i should download the program. does anybody have advice for getting rid of the virus if you havent actually downloaded the program yet

By frankie on Oct 23, 2008 | Reply

this is in reference to restore’s post. i followed what he did and it worked, no more pop outs. but when i search for the filename- scui.cpl,there were 3 files found–how can i delete these ???pls help

By frankie on Oct 23, 2008 | Reply

pls help. if i have used the restore system step,do i still need to do the find and delete process under the MANUAL ANTIVIRUS 2009 REMOVAL INS??? when i type the filename—scui.cpl–found 3 files under it. is there really a need for me to delete these??but how??right now, i don’t have any problem with the pop outs and thanks to RESTORE who posted the suggestion. pls reply on this querry.thnx in advance

By james on Oct 23, 2008 | Reply

You can call 1 800 geeksquad and pay $170 for them to remove the virus. Make sure you have several hours to hang out on the phone and watch them load programs that you can download on trial for free. I let them do their work, but lost the ability to open many programs (none that important). Decided to restore system to see if I could get back into these programs and it allowed some things to get back into my system. Now I am running multiple scans to try to find them all. Wish I would have tried some of these things before I paniced and called the first people I could think of.

By frankie on Oct 24, 2008 | Reply

hello TKMAN. Is it ok if I just used the SYSTEM RESTORE steps like the one posted by RESTORE(Aug.8,20008)? Do I really need to go through the 2nd part of the process stated in the manual removal instruction which is to find and delete the following files???? Right now, I don’t have any problem n my pc but I’m afraid it mght come back. Please do advise me.THANKS

By mike on Oct 24, 2008 | Reply

you might try rebotting in safe mode (press F8 while booting)and then deleting the folder.

By mike on Oct 24, 2008 | Reply

yes, you have a virus. It is very hard to get rid of yourself. good luck

By EgitimTUBE on Oct 25, 2008 | Reply

Thanks Very Good

By doeboy on Oct 25, 2008 | Reply

it wouldnt let me delete it so i went into safe mode and then deleted it and it seems to b ok for now . i did a search and for antivirus 2009 and nothing came up so i think im got for mow . thanks again.

By bv on Oct 25, 2008 | Reply

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
the guy who said use process explorer was a genius..it gets you going again
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

By ChaQ on Oct 26, 2008 | Reply

Also, I attempted to Unistall Antivirus 2009 from my computer because it has been causing me problems since downloading it from the internet. I wasn’t aware I had downloaded it. However, I went to my control panel add/remove programs & removed it, BUT , the ANtivirus 2009 Icon is still active on my taskbar/ start menu..[near the timeclock] right next to my ’security center’ red shield icon. How do i get rid of this ENTIRELY off my computer??

By ChaQ on Oct 26, 2008 | Reply

THak You in Advance

By frankie on Oct 26, 2008 | Reply

We have the same problem but it was solved. I tried using the system restore steps and it worked. I just followed these steps posted by RESTORE last Aug.8,2008.

“START menu- ALL PROGRAMS – Accessories – Sytems Tools – System Restore. I went back a week … computer re-started and worked like before. Thanks for the suggestion.”

By frankie on Oct 26, 2008 | Reply

hello mike. Is it safe to delete the folders C:\WINDOWS\Service Pack Files\i…, C:\WINDOWS\System32, —–I’m afraid I might lose some important files and will have problem with my pc.thanks in advance.

By frankie on Oct 26, 2008 | Reply

and is it safe to delete the folder C:\i386???? I’m sorry,I’m not really good about computers. When I searched for file scui.cpl–found 3 file/folders C:\WINDOWS\Service Pack Files\i…, C:\WINDOWS\System32,& C:\i386.Please I need help here.

By Nancy ANN on Oct 27, 2008 | Reply

I tried this, but I can’t get the program to close out. Help????!!

By Cortez on Oct 27, 2008 | Reply

That anti-virus2009 blocked my task manager and i cant use it when i press alt+ctrl+del this error comes out “admin blocked the task manager” !!!!

By Cortez on Oct 27, 2008 | Reply

Help me !!

By krys on Oct 27, 2008 | Reply

Please help me!

We used this website a few months ago to remove another version of this antispyware that we had downloaded onto our computer. Now we have the XP Antispyware 2009 virus that just keeps doing the popup in the corner, but we haven’t installed it yet, or had any other problems. I have tried to system restore a few times and it didn’t work. Also, I have searched all of my files and can’t find any that other people have deleted to get rid of this. Can anyone help??

If the popup is the only problem we are having, is there any way this “virus” is hacked into our computer in any way, and can get into our personal files??? PLease help ASAP!!!

By Craig Campbell on Oct 27, 2008 | Reply

Last summer I downloaded av2008 and eliminated it by restoring to a previous date. This morning av2009 popped up and resisted efforts to close it and move on. Repeated attemts at closing were finally successful and I can find no trace of it in my program list. Will install the block to eliminate further invasion.

By Steve on Oct 28, 2008 | Reply

I had this virus too and I got rid of it by going into safe mode and deleting the xp antivurs file. It’s the only way to delete the file completely. Hope that helps.

By Alison on Oct 29, 2008 | Reply

Im screwed. I’m an idiot when it comes to pc’s. Should i go out and buy a new antivirus thing. ?

By Troy on Nov 1, 2008 | Reply

Well I didnt install or download the program Av2009 but it got me in the end anyway. It started with a annoying pop up then progressed to a internet blocker with its own pregenerated security center that could only be viewed through classic mode otherwise it simply took over the existing Security center. Next it destroyed my internet connection and finally began to shut off my computer at about 1 minute intervals. Formatted hard drive reinstalled windows but I cant get computer to load windows beyond about 10 seconds. Now I am on my laptop and my main conputer gathers dust. Wow I mean wow if this wasnt happening to me it would be amazing. I am beyond pain and anger I am now in fear and awe. Perhaps we should start a cult and worship this Bl#@dy program.

By emma on Nov 2, 2008 | Reply

if its not installed, but only a red cross with that annoyinng popup, am i better off leaving it alone, or downloading it then doing the restore point method?

By Christine on Nov 2, 2008 | Reply

i deleted the antivirus pro file and its contents but the little x alert thing still wont go away?

By rachel on Nov 2, 2008 | Reply

hi you see i have this antivirus2009 but by
mistake i unlock the antivirus and when i try to install it again i need a code and i try to download it from here but it says (you need administrative rights on this computer to install this appilication)please help me because i have a lot of virus in my computer reply please

By BK on Nov 2, 2008 | Reply

This malware eventually evolved into not allowing me to start my laptop – so you cannot even get to safe mode. The people responsible for this program need to be caught and prosecuted or hung !!!

By suki on Nov 2, 2008 | Reply

I didn’t install Antivirus Pro 2009. How can I get rid of it?

By kobe on Nov 3, 2008 | Reply

antivirus pro 2009 is a new variant of antivirus 2009. watch out!

By rebreak on Nov 3, 2008 | Reply

no passable!That important?
Don’t have to make a fuss!
Internet virus was more….

By matthew on Nov 3, 2008 | Reply

i am 15 years old and this program automatically downloaded onto my computer. i am unable to uninstall this program and i am also unable to access internet websites. if anyone is able to help me with this, please email me at mscook@iinet.net.au. if u try to trick me with virus’ dont. i am not stupid. i am good with computers but am unable to sovle this problem

By ihsan on Nov 3, 2008 | Reply

Dear sir

thank you for all

By Joanna on Nov 3, 2008 | Reply

Somehow ended up on my desktop last week..

Ran spyware/anti-virus cleaners, removed the trojans but still had several “dll” files installed and running active and couldn’t terminate or delete..

Booted into safe mode (which kept them from loading) and then went into the file manager and manually deleted..

Re-ran spyware/anti-virus to make sure still clean… THEN did a system restore to a point the day before AV-2009 was installed.. Re-downloaded the software program I was trying to update (when AV-2009 installed) from a different mirror and manually did the upgrade instead of letting the auto-installer run…

System has been clean and no trace of AV-2009 since then.

SO… best bet if this hits you (and it will pop up “infection messages” the “second” it installs… is to stop everything you’re doing immediately (you will know within a minute after it installs if you’re infected).. Run your anti-syware/anti-virus (make sure you check for updates on a daily basis)… Go into your file manage and search for any files installed within the last hour (as I mentioned you’ll know within minutes if you’ve been hit).. Uninstall and delete everything you can.. Then, boot into safe mode and get rid of everything that’s still left (hopefully only a couple of files/dlls).. Then, do a System Restore to at least the day before (hopefully you have your system set to create automatic Restore Points on a daily basis).. Once the System Restore is completed, you should no longer have any trace of this nightmare on your computer. Once you’ve re-booted, then go ahead and manually create a new Restore Point (since the computer is clean) before you do anything else (like downloading or installing, etc)

By John Otto on Nov 3, 2008 | Reply

Watch out for iascan-pro (starts a security scan & download).
IF you get redirected to it DO NOT click on anything just IMMEDIATELY hit Ctrl-Alt-Delete go to processes tab, click on iexplore.exe then click “end process” button…so far I haven’t seen any damage…I HOPE I killed it in time
Good luck

By MJ on Nov 3, 2008 | Reply

Does anyone have the customer service number for Antiviruspor 2009? I need it ASAP

By killed antivirus2009 on Nov 3, 2008 | Reply

brastk.exe file was main culprit with other files above in my computer. Make sure to “End process” for *.exe files listed in instructions above before starting a hunt to delete all evil files.
After a couple of hours of hunting we were able to save my computer.

By scorsj on Nov 3, 2008 | Reply

For those of you that are unable to hit ctl-alt-delete because the program is blocking you:

Go to Start, Run and type taskmgr.exe to bring up the Task Manager.

Thanks for all the tips everyone, removed it with no problem.

By Helen on Nov 3, 2008 | Reply

Thank you – I am ‘virtually’ hugging you right now !!! Instructions, especially the idiot proof ‘how-too’s’ worked like a dream.

By Maya on Nov 3, 2008 | Reply

So I did a system restore like so many other suggested … and it worked!

The popups are gone and the huge red circled x is gone. I was able to run windows defender that says … my computer is running normally.

I hope that this nightmare is permanently over … and to whomever created this virus … go kill yourself!

By Rob on Nov 4, 2008 | Reply

I’ve done a system restore, checked for the brastk.exe file and removed everything resembling this file, emptied the recyle bin, temp files, searched Task Manager for every suspicious file named here and most of the other suggestions you all have made (thanks a Lot) but I still have that stupid pop up coming up telling me that I am infected. What is up?

By GeekAware! on Nov 4, 2008 | Reply

The most effective way to get rid of this crap program is to reinstall new Windows I was infected with the same program in my PC, and have done all the steps on the internet to remove it, the program and also the alert gone but I still had some problems ended up for me installing new Windows.

By mushtaq on Nov 5, 2008 | Reply

please send the registration key of antivius pro 2009

By Amanda on Nov 5, 2008 | Reply

No! they are not the same at all, antiviruspro2009 is evil and not any part of the 2008 program

By Kim on Nov 5, 2008 | Reply

Okay..I think I finally got rid of all of it…now is there a way to block it from returning (which it has already done once!)??? Please help!

By saira on Nov 5, 2008 | Reply

in my computer have some problem when i open any thing its come antivirus 2009 iclose it but its come again after few minutes plz tell me what i do

By janie Brickell on Nov 6, 2008 | Reply

I just did system restore, and everything seems good for now. I guess we will see.

By Hornets Baller on Nov 6, 2008 | Reply

I made a foolish mistake in purchasing and downloading antivirus pro 2009. I submited my personal info and clicked purchase and someone else info and email address was on the confirmation screen. Then, Immediately I knew somthing was up. I saved a screen shot of my bogus confirmation page. My credit card was charged 49.95. I emailed them at support@avpro09support and explained the situation. About 2 days later they emailed stating I must delete the software and i will get my refund within 48 hours. I checked my credit info today and I received a full refund. I was blessed and hopefully I’ve seen the last of antivirus pro 2009.

By Roj on Nov 6, 2008 | Reply

Just spent a few hours trying to get rid of this c***. It high jacked my Internet Explorer so I got out the laptop and found this page. It also disabled my McAfee Antivirus software. I couldn’t find most of the files or registry keys mentioned at the top of this page so rebooted in safe mode, deleted the folder in the program files, searched through the registry for antivirus2009 and also deleted brastk.exe and karna.dat from the windows and system32 folder as well as registry entries with brastk. Also deleted wini108010.exe whicj appeared to be part of it. Still got the problem, but this IS NOT going to beat me. I’ll post again when I have tried a few more things.

The ironic thing is I was testing out registry cleaning software yesterday so I hope this has not come from anything I was testing.

By Reff on Nov 6, 2008 | Reply

I did a system restore today but that didn’t get rid of antivirus 2009 pro or whatever. If someone has the time and generosity to help me, I would sure appreciate it. The shit is all over my task-bar. I know this is more complicated than I think and I don’t want to go to command prompt or the registry yet because I know I will really mess something up. I will send someone a goddamn gift card to Wal Mart if they help.

By Roj on Nov 7, 2008 | Reply

I finally got rid of this bloody thing after one and a half days of deleting files and registry keys. If you have trouble with browser hijacking check out your hosts file.
If anyone is really stuck with this feel free to drop me an email.

By sid on Nov 7, 2008 | Reply

its a stupid software..its worse thn worst viruses..f**k this antivirus 2009…rubbish

By Martin on Nov 7, 2008 | Reply

I had the AV pro 2009 for less then 12 hours. I put 4 hours into what you can do in 1 hour.

1st I deleted the icon off my desktop you can’t just do add / remove because it keeps pointing back to their website x out if it starts to process at any time.

2nd I ran a scan with McAfee and figured out that I had 9 quarintined files in my temporary files. so I went to RUN and typed in %temp% and deleted all the files that I could.

3rd I deleted the folder in my programs folder that said antivirius 2009

4th I stopped the process of brastk.exe and GetModule27.exe then I went in to run and typed in msconfig and unchecked these same files from the startup tab and when I tried to apply and save a message came up about administrator mode and I said ok but it worked.

5th step I rebooted the computer and I was free at last Good Luck – I did it with out spending $30 to $80 or taking it in to the computer store – You can to

By Bruce on Nov 8, 2008 | Reply

I had a total shut down. Best Buy said for $200 they would clean up the hard drive. The XP Antispyware 2009 was the name and the same as the others you all are finding. It says they are affiliated with Microsoft and use the log even. Well, where is Microsoft to hunt these guys down? I bought Spy Hunter on the new computer and it cleaned up the links after I had downloaded a second time the install but had not activated then. It worked

By veera Badveli on Nov 8, 2008 | Reply

first of all I would like to thank for this website for removing antivirus-2009.

For the past two days I struggled a lot with this virus.

IS THERE ANY CAUTIONS TO PROTECT THE SYSTEM PERMENENTLY FROM THIS TYPE OF VIRUS?

By mcCoy on Nov 10, 2008 | Reply

startup in safemode, it should let you delete the folder and while you are at it delete the index.dat file

By tannmann on Nov 10, 2008 | Reply

Hi All

I downloaded spyhunter and did the free scan, which showed the location. should be on the C drive. go to search and type C it will come up with uninstall Anti virus 2009.

seams to have worked for me, ran the spy hunter again and it didnt come up.

By tannmann on Nov 10, 2008 | Reply

should have pointed out that it wont let me delete the files but at least its uninstalled and coming up every 2 minutes and driving me insane.

By victor castaneda on Nov 11, 2008 | Reply

To whom it may concern, I purchase the Antivirus for my computer and I was unable to have it installed, can you install it for me or do I have to refuse the charge on my credit card, (Charge Back) pls. adv.

By ngoctr on Nov 11, 2008 | Reply

I got the same issue as above. Everytime I launch the IE then it popup a message say something about my system affected by spywares… then when I just close it, it then open up a webpage about Antivirus 2009 and starting scan my system…
But, I couldn’t find processes, files, and registries as listed above.

By Jak on Nov 11, 2008 | Reply

I’ve removed all of the listed files, processes, and registry items, or rather, I couldn’t find them to remove them, but Antivirus 2009 Pro is still on my pc. It’s not popping up, but there’s an icon, red circle with a white x, in my system tray, and when I click or right-click it, antivirus 2009 pro begins installing. I stop it, but I can’t get rid of it. Also, I can’t install antivirus software and have trouble loading web pages. I get sent to seemingly random pages when I click on links instead of where I want to go.

My pc is moving slowly as well. It’s like i’ve only half-removed the virus. I need help!

By Pc doc on Nov 11, 2008 | Reply

Watch it with this one folks, Norton wants $99.99
to remove it, and won’t guarantee it 100% what tech said.

By Pc doc on Nov 11, 2008 | Reply

People this Antivirus PRO 2009 is a malware and virus,and worm, and dooms day for PC, “BeCare full”!

This originated in Ukraine and attacts windows
interface and ad’s its own fake block interface
and it’s still changing.

By HolyFuck on Nov 11, 2008 | Reply

I’m having the same problem that Jak (Nov 11) is having, I’ve scrolled thru this whole page and nothing seems to remove the damn balloon in the system tray wtf?

By Pc doc on Nov 11, 2008 | Reply

Has any Nortn users had any success ? Tech I talked to a few hours ago said they are still working on this problem, and two days ago this variant A.V.P.2009.007 hit across PC’s everywhere over sea’s and U.S., and has changed since to .050 variant already in anticipation of and prevention of complete removal, and it could change still again right now, this is something that we all should slow down and look at this from a programmers and hacks and a cons point of view, Fear = big bucks and its there day with this new and very complex creation, a bunch of people are going to make a bunch big
bucks by conning us to remove this thing and it really sucks for all the people to have to go threw this Just because they didn’t even know that they didn’t know ! I will update in moment new info when find out from Nort, and over sea’s.

By Malolo on Nov 12, 2008 | Reply

I am rather annoyed. Been working on how to remove this and its been 3 or 4 hours. agh!!

By Pc Doc is gay on Nov 12, 2008 | Reply

Pc Doc….your fucking stupid, who cares what they want or where it originated from, no ones going to do anything about it anyway.

By Pc doc on Nov 12, 2008 | Reply

To the one above, “get a life” ! No don’t learn about this dumb-ass ! don’t learn about anythings, like it looks like in your reply.

Go call some more people names in your life, like it’s going to help anything ?

The Fed’s are into this one, smart guy !

You don’t even know that you don’t know !

By cresta on Nov 12, 2008 | Reply

My husband was on the computer while I was a way visiting family. He was trying to get on the computer when it told him he has thiry five virsus and the computer would not work, so he downloaded the Antivirus Pro 2009. The computer started working. Five days later I got on the computer. I thougt I would Pull up the virus valt and see what really took place. Well guess what I can’t get my computer to pull up anything. I e-maild and ask for my money back. We’ll see what happens. This is the shocker. I ran my AVG virus and I has VIRUSES FROM ANTIVIRUS Pro 2009. I’m not happy and trying to move the antivirus is another issue that I’m trying to figure out. This is bull shit.

By Pc doc on Nov 12, 2008 | Reply

This new Antivirus Pro 2009 .007 and .050 are a new variant of Antivirus 2009 and other Malware’s that go’s back a while now, it can kill your PC, It will try to prevent you from getting rid of it so it can do it’s damage. It makes it’s own windows interface in a type of classic mode and it anticipates what you will do to try to remove it. It is attacking PC’s
that are not completely up to date with windows
base systems, and it is getting in now from several different weak area’s, it is also now turning off windows update on some PC’s to prevent stopping of it. And all your info on your PC could be at risk. Beware !

This is Bull Shit folks ! and i feel for you all that are going threw this crap, call your internet provider and complain about this, and your internet Av Protection Provider, call your bank and credit card Co.\ and stop all payment’s “Now” for this thing. and keep a close watch out on your personal info !

By JUSTICER on Nov 12, 2008 | Reply

GUYS I’m say , DON’t i’m sayd DONT download a AV 2009 it’s a SPYWARE AND HAVE SO MUCH RISKS i’m download and now i’m paying for this , it is coleccting all i’m wrinting , please guys , don’t beleave on it , is a VIRUSES , av2009-2008-2007-2006-2005-2004-2003-2002-2001-2000 DONT BELIAVE ON IT

By Same problem on Nov 13, 2008 | Reply

I still have the red bubble with an X in it in my system tray, it warns me alot less frequently, but still there,,

AVPro09 is not installed on my computer tho

By brian on Nov 13, 2008 | Reply

I had the same problem on XP. I followed Lise’s system restore suggestion (posted Aug 2), restoring the system to a date a few days before I noticed the AV2009 problem and eliminated all trace of the nasty devil in about 15 minutes. Thanks Lise!

By Dezaray on Nov 13, 2008 | Reply

I have tried everything searching for these files and I cant even get on a website to download a removal program…I am so confused please email me with any suggestions….I also want this creator topay…

By Lam on Nov 14, 2008 | Reply

Thanks a bunch norton internet security I just paid to have you on my machine for another year, and you folded like a house of cards the minute this piece of crap hit my machine. What are we paying all this money for? Is this just another way of extracting our hard earned money from us again because YOU didnt do your job, or is this a conspiracy. I mean 200 bucks to remove, maybe, 75 for norton. Can we see where this is going

By Pc doc on Nov 14, 2008 | Reply

“Yes” The complete system restore to original factory spec’s did the trick. “Thanks All” !
in the end there were so many hidden files and all with different name’s,extensions, all from the time of infection, It’s a big puzzle Now in these
new malware spyware virus Peace’s of EVIL !

Good luck everyone ! Fight Back !
“NUKE THE BASTARDS” !

By Pc doc on Nov 14, 2008 | Reply

I Had “SNOR-TON” TO !

Update ! Update ! Update ! EVERYTHING !

By MKhan on Nov 14, 2008 | Reply

Two of our computers got it. I looked at our proxy server and the computers had downloaded a installer.exe file from av-pro-2009.com. It had a red x logo on the task bar warning that the computer was infected. When clicked it brought up antiviruspro2009 scanning the computer. I couldn’t uninstall it from add/remove control panel. It would not allow any other antivirus or antispyware software or tool to run. So, here is what I did to fix it:
1. I blocked the website from my proxy server.
2. I killed the brastk.exe and any other antiviruspro2009 processes.
3. Deleted these files and folders from ‘program files’, windows and windows\system32 directories.
4. Restored PC to a pre-infection date to restore registry.

By ljb2148 on Nov 14, 2008 | Reply

U should be able to sue this fuc*ing company–it downloaded automatically to my computer now i gotta screw around and remove it. Need to be tougher laws on shit like this

By Pc doc on Nov 14, 2008 | Reply

The Industry of Pc Protection is trying to catch up with the Bad guys of Tomorrow, The “Whole Protection Industry” needs to come together as a Whole, against what we face from Tomorrow’s Internet thats here Today !
But also A PC Operating System is only as good as what is put into it ! ? ! ?

I wonder how much this will Cost the USA Public and the World ?

“Good luck all” !

By lolz on Nov 15, 2008 | Reply

plzplzplzplzplzplzplzplzplzplz any one in this world help me i have a problem when ever i am busy on computer suddenly an message appears u have 53 infections wat shuold i do i am in a huge problem i have only one week help me i can get one month too but plz help me plzplzplz reply me on my mail.

By NZ on Nov 15, 2008 | Reply

EASY FIX

this only takes couple mins and is soooo easy to do. hope it works just as well for you.

Here’s how we got rid of it..(System Restore thru MSCONFIG)
Go to Start
Go to Run
Type in MSCONFIG
Go to General tap
Click on to Normal Startup
Hit Apply
Hit Launch Restore
Pick a date prior to infection
Click on that date
Click next.
Restart computer

By Krovas on Nov 15, 2008 | Reply

Ahhhh, it’s good to be a Linux user =D

By Fanny Uisn on Nov 15, 2008 | Reply

im going to freaking shoot whoever invented antivirus 2009 stupid

By Carrie on Nov 16, 2008 | Reply

I just realized that I got the stupid antivirus pro crap from www . myxer. com

By Jr. on Nov 16, 2008 | Reply

Krovas, I am with you. I don’t care if it’s Antivirus 2009 or Antivirus Pro 2009. I don’t seem to have the problems running Ubuntu 8.10.

By Katie on Nov 16, 2008 | Reply

stupid antivirus pro 2009 attacked my laptop and it wouldn’t go away. I rebooted 3 times and it keeps freezing up. what’s going on???

By Jacky on Nov 16, 2008 | Reply

Darn it. How did I get this Antivirus Pro 2009? And how could I uninstall it???

By RICARDO on Nov 16, 2008 | Reply

INFECTOU MEU DESKTOP E FUI ENROLADO, ADQUIRI UMA SOFT ====== ANTIVIRUS PRO 2009 ======== E CARTÃO VISA NÃO CANCELA A COMPRA.

É UM ABSURDO.

By anthony on Nov 16, 2008 | Reply

I got rid of Antivirus Pro 2009 completely. Guess what I did? I didn’t pay a dime. I backed up my data to a USB hard drive then FORMAT then install XP.

By BASQUIAT on Nov 17, 2008 | Reply

I got rid of Antivirus Pro 2009 completely. This is what I did? and I didn’t pay a dime either. I deleted the entire Internet
Explorer 8 beta., and Fire Fox, that’s were the antivirus pro 2009 is hiding at. Go to the Control panel and delete Internet Explorer and/or Fire fox. Restart your computer and it should be gone. Oh yes, but please download the Netscape browser first.
IF THIS WORKS PLEASE PASS IT ON. REMEMBER THIS NASTY VIRUS IS HIDING IN THE BROWSER ITSELF THE NEW “IE” INTERNET EXPLORER OR IT’S FRIEND FIRE-FOX. PLEASE PASS IT ON. THIS VIRUS TAKES RIDE WHEN YOU DOWNLOAD ‘IE OR FIREFOX.
LET ME KNOW IF THIS WORKS FOR YOU. I HOPE THE BEST 4 YOU.

By Gokul on Nov 17, 2008 | Reply

I got infected by antivirus pro 2009, I followed what Mike field said. But the red ballon was coming again and agian thats because of Brastk.exe and Karna.DAT. But I cleared all now. So here is the complete steps,

Step 1 to remove the antivirus pro 2009
Step 2 to get rid of Brastk.exe and Karna.DAt

Step 1 to remove the antivirus pro 2009

Mike fields steps to clear Anir virus pro from your syste, (Thanks Mike)

- Killed the av2009.exe process using Task Manager
- Took a look at where the Antivirus 2009 shortcut pointed (they put one in the desktop)
- Took a note on the date and time of the av2009.exe file
- Searched the Registry to see if they were any references to av2009.exe. Did not find any.
- Removed the C:\Program Files\Antivirus 2009 directory and all files
- Removed the desktop shortcut
- Removed the shortcut in the Start Menu (be aware they put it in the upper area, where Windows Update is located)
- Rebooted, but then discovered that IE was still infected, in particular when I tried to navigate to Sysinternals. Also discovered that the Security Center applet in Control Panel was not working
- Went to Windows\System32 and found 3 files from about the same time of the infection:
ieupdates.exe
scui.cpl
winsrc.dll
- Again before removing the files I searched the registry and deleted references to ieupdates.exe (register to start automatically) and winsrc.dll (registered as a COM file)
- Reboot again and tried IE and Security Center, both are working now

Step 2. To Remove Brastk.Exe and Karna.Dat

Boot to safe mode.

Delete karna.dat and brastk.exe in C:\Windows (or C:\WinNT) and C:\Windows\system32.

Delete wini10###.exe in C:\Windows\system32.

Replace beep.sys in C:\Windows\system32\drivers from a backup source or simply delete it. Make sure the good file does not exceed 10k.

Delete the entire Antivirus 2009 folder in C:\Program Files.

Remove the brastk string from the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run.

Remove the Antivirus 2009 string from the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run.

Modify the AppInit_DLLs string from the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows by removing karna.dat.

Remove the Antivirus 2009 key (entire subfolder) from the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall.

Restart Windows normally.

Reinstall your antivirus software.

Good Luck !!!
Gokul.

By Tapio on Nov 17, 2008 | Reply

My PC got infected with Antivirus pro 2009 and after reading suggestions, trying to manually uninstall it, won’t work. My system is so hosed, windows restore does NOT have any prior dates to restore to. Seems like they have been wiped out. I cannot even execute any spyware applications, it won’t let me. Even in a minimal boot configuration (using msconfig), that freaking av pro 2009 has that ‘X’ icon in the tool bar. So, I’m about to just hose down my system and reinstall XP. Seems like I have no choice unless someone has any other ideas, that would be really appreciated. Thanks.

By Pat Ellis on Nov 17, 2008 | Reply

Please contact me about the charges you made to my credid card

By eric on Nov 17, 2008 | Reply

go to staples. they now have a computer repair center and they did great work removing it for $70. I used to go to best buy but staples is more informed and friendlier

By Sonny on Nov 17, 2008 | Reply

Gokul you are DA f*cking man!!!

i tried EVERYTHING on this page, but NOTHING would help, but what you said did!!

w000t AVP09 Fckers!! take that!

By Emily on Nov 17, 2008 | Reply

please help!!! i am a student, i only use my computer for basic things, and im sure like many of you have already posted you have a problem with this, however i need help. i need to remove this and i dont know how. please help me!!! break it down if you can in simple terms cause i have no clue what i am doing!

thank you

By Oscar on Nov 17, 2008 | Reply

Omg! for some reason i cannot delte the brastk file from the registry! does anybody know why? please help =(

By Jared on Nov 18, 2008 | Reply

I tried a system restore actually. I wouldnt suggest it. It doesnt work and it caused my computer to freeze and lock up on a black screen (usually what it does before displaying the desktop, only it freezes permanently) I dont know why but when i system restore to any date, when the PC reboots, it says the system restore couldnt be completed.

By P on Nov 18, 2008 | Reply

Gokul, your fix worked for me for the most part BUT my internet explorer is still jacked:

- when i do a google search, the search results are really big and when you click on one, it takes you to an ad…
- IE won’t let me download any kind of antivirus programs

I was able to get my home page back to my original one (and not the fake Google one).

Help with this? Thanks.

By Jared on Nov 18, 2008 | Reply

Ok! Its gone! But i still cant access certain websites…If i totally deleted Internet Explorer and re-installed it again, would it maybe fix it? Thank you again. One problem down, one to go

By Jared on Nov 18, 2008 | Reply

I managed to remove the damn virus but my internet explorer is still messed up and I’m afraid it will transfer into my firefox. If totally uninstall and purge IE from my computer, and reinstall it, will it fix my website blocking problem?

By Kristi on Nov 18, 2008 | Reply

Ok, I’m retarded when it comes to this kind of stuff. I too have AntiVirus Pro 2009 and it is buggin the hell out of me. I tried to uninstall from the add/delete programs but that doesn’t do anything. I bought Norton over the weekend and it seems to have helped with the exception of anitvirus. Please someone tell me what I need to do to get this damn thing off my computer.

By Tapio on Nov 18, 2008 | Reply

FINALLY. Rid of that F’n AVP09. Thanks Gokul. I had to take it a bit further. Frustrating as H*ll, since my system, wouldn’t even run anti-spyware programs; would not all virus updates to download, blocked certain websites that have anti-spyware tools, etc. A royal pain. I also found 2 files in the \Windows root directory ‘and’ \System32 (the Brastk.exe and Karna.dat files). There were a few other registry entries, I found; just needed to ’search’ for them in the registry. All gone now.
(I was just about to re-install my OS).

By Jason on Nov 18, 2008 | Reply

Let me know how that works for you.

By Mashenden on Nov 18, 2008 | Reply

Gokul – Great fix. It is gone. Thank you very much

By P on Nov 18, 2008 | Reply

What all did you delete in your registry? I still am having issues with IE, ugh, same ones that you are (can’t run anti-spyware programs)

By Mike on Nov 18, 2008 | Reply

Yes, i got hit with antivirus2009 also. It happened when a popup on my itunes said new ipod software blah blah blah. i downloaded it and then all of a sudden i had the av2009 prg on my computer. it will not let me go to other sites, ahem, download the software to remove this thing. im trying to keep my data because i cannot back them up, and battling this thing. it will not even let my computer run other software programs. this is rediculous. just watch out i dont know how i got it from itunes. dont trust everything

By Tapio on Nov 19, 2008 | Reply

I deleted all the ones Gokul put down. I deleted a few extra ones, that I found by using the ‘find’ feature in regedit. If they had the word “Brastk” and/or Karna.dat — I nuked it.

Rebooted, and all was well….. Finally.

By helpme on Nov 20, 2008 | Reply

I did everything Gokul suggested, but I can’t delete the winsrc.dll from system32. It keeps saying, “access is denied. Make sure the disk isn’t full or write-protected and that the file is not currently in use.”

It’s not coming up in a search of REGEDIT, so I thought it would work. I deleted ieupdates.exe and scui.cpl, but can’t get rid of winsrc.dll.

By helpme on Nov 20, 2008 | Reply

I deleted winsrc.dll successfully when I logged off Internet Explorer.

By charlotte on Nov 20, 2008 | Reply

Thank You Gokul! Followed your instructions to the letter and my laptop is finally free of that nightmare.
Thanks again.

By Kathy on Nov 20, 2008 | Reply

I too have this bug.

Note: I am following removal instructions and have a question.

Under find and delete Antivirus Files:
It says to remove wscui.cpl. I search and find it in two places. One in system32 and the other in softwaredistribution\download. Do I only delete them if the file extension name also includes antivirus2009 or do I delete them both, even if antivirus is not in the file name or extension?

Thanks!!

By JoJo on Nov 20, 2008 | Reply

I got AV2009 a few days ago. I thought I had beat it, but then my google search links started re directing to health food sites.

I did the recommended actions –

start, run, start up tab, click AV2009 – now when my computer starts up, it will stay on for about 30-45 seconds, and then will blue screen (not long enough for me to read it), and restart itself.

It will not allow me to start my computer in safe mode.

I am going to reformat this weekend, unless anyone has any suggestions?

By sandeep on Nov 20, 2008 | Reply

this antivirus f_cks man . they are sending it in the form of anvirus those son of a bitch. such man
and this antivirus 2009 sucks

By Gokul on Nov 21, 2008 | Reply

Hi, Before you work on the steps suggested by me earlier, please make sure the following

1. System is booted in Safe Mode
2. Disconnect Your Internet

For those who have problem with IE, Firefox, Apple Safari, Google groome please use Opera

By justis on Nov 21, 2008 | Reply

i cant delete brastk.exe its keeps saying it might be in use.?
what do i do??

By justis on Nov 21, 2008 | Reply

and thanks for all your help on the other files it has helped a lot.

By Timmy on Nov 22, 2008 | Reply

Hello, Having trouble with the computer. I got the antivirus 2009 and corrupt the registery. I download number of antivirus but it hangs and now, my computer (OS XP) when it reboots after a min screen turns blue and restart. Please help ..i am trying to solve the problem for last three days.

Thanks
Timmy

By Adriana on Nov 23, 2008 | Reply

como faço pra barra iniciar aparecer de volta
ela sumiu depois q apertei ctrl+shift+esc
me ajude HELP me será q deleitei algo q não devia em?

By Zara168 on Nov 23, 2008 | Reply

I did all said above /thank you, Mike, and all the other ppl/, now the virus is nowehere to see, but I cant delete winscrc.dll,and my Google looks funny. What should I do???

By listhomal on Nov 24, 2008 | Reply

please help me, my pc is broken becouse countain virus from internet

By Nancy1125 on Nov 25, 2008 | Reply

I was on another website yesterday which suggested following these steps which I did and now I cannot get the PC to boot into safemode or windows….

Unregister Antivirus 2009 DLL Files:
shlwapi.dll
wininet.dll

Stop Antivirus 2009 Processes:
av2009.exe
Antivirus 2009.lnk
Uninstall Antivirus.lnk
Antivirus2009.exe

Find and Delete these Antivirus 2009:
av2009.exe
Antivirus2009.exe
shlwapi.dll
wininet.dll
Antivirus 2009.lnk
Uninstall Antivirus 2009.lnk

Remove Antivirus 2009 Registry Values:
HKEY_CURRENT_USER\Software\Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\W… = “%ProgramFiles%\Antivirus 2009\Antvrs.exe”

By Jeff on Nov 26, 2008 | Reply

I also found these to be re-curring files that I searched my registry for and deleted:
wuzojukita,
ziwemove.dll along with some others I did not write down.
Meaning I would detect and remove using SEVERAL antispyware and antivirus programs, only to have them come back and redirect me to the “antivirus2009″ download page. And there are MANY places in the registry these files are hidden away, some that no antispyware even found.

By Luis on Nov 28, 2008 | Reply

Run update microsoft SP1, will take 3 to 4 hrs to load and install. anti-virus 2009 will clear.

By rulitos on Nov 29, 2008 | Reply

well, thanks for your help guys, I will try to follow your comments, particularly Mike’s since everyone seemed to solved their problem through him.

I have one silly question: when Mike suggest to do this:

- Went to Windows\System32 and found 3 files from about the same time of the infection:
ieupdates.exe
scui.cpl
winsrc.dll
- Again before removing the files I searched the registry and deleted references to ieupdates.exe (register to start automatically) and winsrc.dll (registered as a COM file)

How do I do this? I mean, how can I delete references to an .exe? and what is a registry and how can I access it?

Thanks for your help. As you can see, I am kind of stupid for computers, but with your help, I know I can do it!

By patty on Nov 30, 2008 | Reply

I have found this as a hidden file in c:\recylcer that I cannot delete. neither can I seem to delete the brastk or any help would be appreciated.

By Lori on Dec 1, 2008 | Reply

I was fooled by this antivirus 2009. I ordered it a few weeks ago when it popped up on my computer saying I had viruses. Now I am reading that it is a scam. Here is my question. I downloaded the free SpyHunter scan and it said that I did have the Antivirus 2009 on my computer but when I did an scan with my Trend Micro Pc-cillin it did not show up. Also, when I went to delete it in my programs, it showed up but when I went to delete it, it said it had already been deleted. Also, I have tried to manually deleted using the instructions above and when I search for the files, they do not show up.

So..do I have this on my computer or not??

By Marie-Anne on Dec 2, 2008 | Reply

I was hit with antivirus 2009 in September.

Got rid of it thanks to your help.

Last week I started getting Norton PC pop-ups. I did system restore and am okay for now.

Has anyone else had these fake Norton pop-ups.

Is this new?

By happygirl on Dec 2, 2008 | Reply

Dear NZ,
God bless you, it worked, I did everything you said and it worked, I was pretty freaked out sinc emy boyfriend’s computer got messed up in a similar way,
thank you!

By cheerfulme on Dec 3, 2008 | Reply

I was unable to download any anti virus type file or pay for them. I went into internet options, security, and set my security to “default” mode. I tried to download the program again, and it worked! Now, running the reboot, and hoping to never see antivirus 2009 again!

By Hmmmm on Dec 3, 2008 | Reply

Hmmm I recently got rid of AVPro 09 thanks to Gokul, but now a couple of days later I started getting IE pop ups redirecting me to some sites that AVPro used to send me to, now some new ones too

And now it wont let me System Restore to any previous date cause it said all previous dates did not exist anymore and wont let me create a new one either

Help?

By melissa on Dec 4, 2008 | Reply

hi i am trying to register my computer with this antivirus soft ware but im finding it hard to register how do i do it?

By Janice on Dec 6, 2008 | Reply

Someone tell me how I can get my refund from these crazy people, I did not want this but was charged on my credit card

By joca 93 on Dec 8, 2008 | Reply

Mike Fields thanks for the help.i really apriciate people like you.your advice really helped me.thank you again…

By Justin on Dec 8, 2008 | Reply

I have not actually downloaded the virus but to have a small red icon with and x in the middle of it that says I am not protected. How to I get rid of this icon so these stupid messages never pop up again. Please help

By lawl catz on Dec 8, 2008 | Reply

im sorry but when i was reading this i started laughing. my mother did the same thing as you did to her computer and it was totally messed up. she dosent know the slightest thing about computers or how much harm can really bedone when u have this. i am a teenager and i am a copmuter wiz!! and i told her everything she needed to know on how to get rid of it and she didnt want to listen cause i was just a kid. when the computer tek guy came to fix it he did exactyly what i said to do hahah it just makes me laugh when i hear these stories and i really wish u luck on fixing this problem

By K on Dec 10, 2008 | Reply

I brought this crap, and was told through VERIZON/DELL that this is a VIRUS that you/I have downloaded. THANKS ANTI VIRUS

By boo boo on Dec 10, 2008 | Reply

that was stupid that’s the virus

By tommy on Dec 10, 2008 | Reply

Does this program wipe other antivirus software as well? Because my Norton software was completely removed and now I cannot re-install it. It keeps telling me a previous install/uninstall was completed and requires a restart, after every restart even. I was able to get rid of Antivirus2009 but now have no virus protection at all. Suggestions?

By mike on Dec 10, 2008 | Reply

im getting the same problem.

By sheila on Dec 11, 2008 | Reply

i was foolish enough to download this and now my computer is infected. i also bought the “licensed” version, and now my credit card is charged.

(1) how do i handle so that my credit card is NOT charged again on a cyclical basis?
(2) how do it get this crap off my computer? it’s completely slowed down and everything freezes (i am not tech savvy in that dept).

OY VAY.

By stealspyware on Dec 12, 2008 | Reply

An interesting news for all of you

http://news.bbc.co.uk/2/hi/technology/7779223.stm

At last this antivirus pro 2009 came to an end.

By todd on Dec 12, 2008 | Reply

By natalie cooper on Jul 29, 2008 | Reply

1st: go to ( my computer)
2nd: click on the image that displays your type of computer
3rd. go into program files
4th: click on antivirus 2009
5th: RIGHT click and delete or send to recycling bin
6th: hit back and RIGHT click on the pervious anitvirus 2009 file and repeat step 5
7th: RIGHT click on your recycling bin and hit empty bin

By clockman on Dec 15, 2008 | Reply

This thing is spread on many sites on the internet. Isn’t there no way to clean it from the internet sites to prevent it automatically installing its self to your system?

By kia on Dec 16, 2008 | Reply

plz help me i need codes

By Anne on Dec 20, 2008 | Reply

Help, I tried searching for these Antivirus things in my computer, but for some reason it says that the computer doesn’t have any even though i saw the AntiVirus2009 start to download and pop ups keep appearing while i use the internet.

And I’m not too keen on downloading some other program that will supposedly stop the virus. And paying for it doesn’t appeal ether. Is there something i can do to at least see these things on the computer?

By Damien on Dec 21, 2008 | Reply

hey like the antivirus 2009 downloaded into my computer and i go to delete the file in Program Files\Antivirus 2009 and it wont let me and i think i got rid of most of the stuff but it still pops up and tells me to buy something and it says something about all these viruses and its getting on my nerves…can you plzzz help me..

By Vincent K. on Dec 22, 2008 | Reply

I have accidentally purchased the Antivirus 2009 application without thouroughly looking into it. WOuld they steal my personal information sush as mycredit card? and Would they give me my money back?

By rebecca M on Dec 22, 2008 | Reply

This happened to me on the 7th december I stupidly bought it. If you have done the same go to your bank and delete your card immediately and ask fot a new one. I think I was charged twice for it on my bank statement it came up as CSH not merycoop. I’am still cnfused and need to go to Halifax and ask hem if it was the scammers that chared me. etc…

By VG on Dec 27, 2008 | Reply

Very useful tips. I just got the damn Antivirus 2009 out of my system.Thanks

By Krip on Dec 28, 2008 | Reply

I followed the following instructions posted by Todd… seem to work in getting rid of Antivirus 2009… only time will tell.

Thanks Todd/Natalie

1st: go to ( my computer)
2nd: click on the image that displays your type of computer
3rd. go into program files
4th: click on antivirus 2009
5th: RIGHT click and delete or send to recycling bin
6th: hit back and RIGHT click on the pervious anitvirus 2009 file and repeat step 5
7th: RIGHT click on your recycling bin and hit empty bin

By helpless on Dec 29, 2008 | Reply

It will not let me DELTE following what you said.

HELP!! please

By Will on Dec 29, 2008 | Reply

I know you will not be back to read this, however, your statement about US Law is incorrect. The Law dosen’t care where and when the “Fraud” was committed. The trouble for those people you pay taxes for to find these criminals, the police, don’t have enough time nor resources to track the millions of Hackers on the web. Then if you add in juristiction lines of the web being a worldwide enterprise you can see what a problem it really can become. I support hanging as an option in the town square of a few of these MF’s, live on CNN. Maybe after a few are linched the rest will for really knock the crap off. I figure if it worked in the 1800’s in the U.S. why not now. Steal my horse forfiet your life. Works for me. I am a God fearing man and this group of people equates to a gang of Horse thiefs lets track them down and string them up!

By Been working on computer for days now! on Dec 29, 2008 | Reply

okay, well…i have read as much as i could from the above and i keep getting this error when going to play a video on my computer. I dont know what to do! ……..

———————————————

Internet Explorer has encountered a problem and needs to close. We are sorry for the inconvenience.
If you were in the middle of something, the information you were working on might be lost.
For more information about this error, click here.

Internet Explorer
Error signature
AppName: iexplore.exe AppVer: 6.0.2900.5512 ModName: kernel32.dll
ModVer: 5.1.2600.5512 Offset: 00012aeb

To view technical information about the error report, click here.

——————————————–

i also keep getting a pop-up message from my security center along with the antivirus pro 2009 but to the best of my knowledge, i have deleted all aspects of this program from my computer. Any ideas? Please help! thanks!

By Jacob on Dec 30, 2008 | Reply

OK, I removed AV from my mother’s account, but now it’s sort of on mine. It’s only coming up on IE and the program doesn’t appear on task manager, nor can I find any of the other files I deleted to fix my mom’s account. Mehh. Help, please.

By Chocolate~ on Dec 31, 2008 | Reply

Help! pls someone help me get rid of antivirus 2009? i really need that help!I do not want to pay a cent for it…. pls help me… school reopening i need my computer for my project…..

By Chocolate~ on Dec 31, 2008 | Reply

someone pls help!PLs tell me the steps to remove those thing(antivirus 2009)!!!
PLs tell me in easy form i don’t really understand what u guys talking about….

By jem on Jan 1, 2009 | Reply

i really cant delete it,it appears you cannot delete the file? how is it possible? pls help me with this…blue screen appears every 10 mins…thanks… pls email me at francesh_01@yahoo.com

By jemjem on Jan 1, 2009 | Reply

hi chocolate,
this steps was from kaykay,i tried this now and it really works…. pls try this and hope this will really help you. and pls do delete it by doing the ff:

this steps fr:Todd/Natalie

1st: go to ( my computer)
2nd: click on the image that displays your type of computer
3rd. go into program files
4th: click on antivirus 2009
5th: RIGHT click and delete or send to recycling bin
6th: hit back and RIGHT click on the pervious anitvirus 2009 file and repeat step 5
7th: RIGHT click on your recycling bin and hit empty

Well I have the solution to those files that are “in Use”

Go to Start
then click Run
type in – MSCONFIG
Click the startup tab
Select the virus that keeps starting up for example AV2009
this will deselect it from starting up when you start your computer…it will not be in use anymore.
Click apply
Restart your computer

Then go to ur hard drive, program files, select the virus file and delete it.

IT WORKED FOR ME

By Lila on Jan 1, 2009 | Reply

hello,
i managed to stop antivirus 2009 in the task manager, and then deleted the program in Program Files, and emptied the recycle bin. i also deleted the short cuts etc that were in 3 different locations. i read the instructions that Mike Fields provided as posted by others, and searched those files that should be deleted…and i only have winsrc and ieupdates none of the others appear…does this mean that when i deleted the program most of the associated files were also successfully deleted? also when i open internet explorer, the google page in particular has all these warnings about updating AV2009…how do i know if it is really gone? also it blocks websites…but now im just opening things with firefox

any help is greatly appreciated!
lbonnardel@hotmail.com

By Lila on Jan 1, 2009 | Reply

i also just did a search for AV2009 to see what would show up and: AV2009.EXE-1BF04CE5.pf in C:\Windows\Prefetch showed up…is it okay to delet this?
thanks

By littlebit on Jan 2, 2009 | Reply

I have been dealing with the Anitvirus 2009 since October and it has been a pain in the rear end! I have tried MicroTrend, Kapersky, and nothing will remove it. I don’t want to take it back to best buy because they will charge an arm and leg to work on it and probably take 2 weeks to get back.

I hope you as well as others and myself can get this virus OFF our computers!

Luck to ya

By Mike on Jan 3, 2009 | Reply

If you delete the registry files first you should be able to run any other antivirus program to get rid of the rest of it. You have to manually delete them. Go to start run then type regedit. Push ctrl+f then type antiviruspro.
Any files it finds delete. After that you should be able to get rid of the rest of it.

By Johan on Jan 3, 2009 | Reply

I bought legitimate Bitdefender security programme at my regular computer shop, it says ANTIVIRUS 2009 on the box of the disc. Been working apparently fine. Is this the same as the antivirus 2009 that you all are talking about? I installed it because I am infected by VIRUSDEFENDER 2008 – this one is driving me insane, and nothing removes it!!

By Elaheh on Jan 3, 2009 | Reply

Hi
I used your instructions to stop the mad antivirus2009 from functioning.It was great.It seems that one can rid of its alerts and ahot downs this way?
But I can not remove the av2009.exe,because it is unremovable.
Recovery doesn’t do anything.I had tried it before.
Thanks again

By Joe on Jan 4, 2009 | Reply

Please help me. I am just a computer novice and accidentally picked up the Antivirus 2009 bug ! I see your instructions for removing it, but I am afraid to try them for fear of doing something else wrong ! As of now, the Antivirus 2009 is unregistered. will this make it easier to remove it ? Do you have a simple step by step instruction proceedure that even a Caveman can do to remove Antivirus 2009 ?

By Gerald on Jan 5, 2009 | Reply

Is there anyway to know if it is completely gone?

By Unknown on Jan 5, 2009 | Reply

Is AV2009.EXE-1BF04CE5.pf a file of AntiVirus 2009 too?

By Lee on Jan 5, 2009 | Reply

I think the only way to be sure it is completely gone is blow away the system and start fresh. This one was particularly troubling for several machines I have had to fix. What perplexes me is how people are installing it in the first place. I have yet to see how people are being prompted to install it. Is it via a pop-up or a trojan with another download? Is it from cross-site scripting using an insecure browser?

By Frankie on Jan 6, 2009 | Reply

System Restore will allow you to restore your system’s configuration to a previous state. In some cases that means that viruses or spyware will be “undone” as part of the process. But system restore does not remove infected files from your system, and you can quickly get infected again. It also does nothing to prevent new threats from arriving.

By jonjonthebadass on Jan 6, 2009 | Reply

Wow…I cannot believe some of you would be dumb enough to buy Antivirus 2009…it’s a goddamn malaware agent, not a security feature for Christ’s sake!

By kelvin maxwell on Jan 6, 2009 | Reply

I have been in touch with my bank over the fact that money was taken out of my account by this company even though a stop had been put on it, I however am not prepared to let this company get away with it, the bank gave me a phone number which was the reference number given i have since phoned this number and it turned out to be an estate agents in Bournemouth, i told the gentleman who answered the phone what had happened and that i was giving him till tommorow to report the fact a bogus company was using there number to the police. My band have also started fraudulant claims against the company in question, I can however now tell you that i have looked into it a little further and the company which took my money is called Chronopay.com, there is a form on there which can be filled in to claim your money back.

By Jackson on Jan 6, 2009 | Reply

This damn thing just popped up when I was looking at a Yahoo page. I closed everything I could by clicking the red “X”s, but I still get the popups all the time. I searched my computer for everything listed in this article, and found nothing except for “wscui.cpl,” which apparently is a normal Windows file that comes on all their computers.

I am at a complete loss here. If someone could help, it would be greatly appreciated.

By JOHN on Jan 6, 2009 | Reply

ANTIVIRUS 2009 WILL NOT LET ME SEARCH FOR FILES, LOAD FROM DISKS OR DOWNLOAD, BOOT IN REGULAR MOOD. CAMN ONLY BOOT IN SAFE MODE, WHEN I TRY ANY OF THE FOREGOING THE PC FREEZES. I HAVE A NEW DELL (MAY 2008) RUNNING HOME EDITION XP. PLEASE HELP ME

By blondie on Jan 7, 2009 | Reply

thanks for the advice tried it and it worked a treat no more problems at all, took about ten mins… great

By blondie on Jan 7, 2009 | Reply

thanks itsme run defender it worked a treat no more nasty antivirus 2009

By Sandy on Jan 8, 2009 | Reply

Bloody bitch i cudnt just knw how this bloody thng got in to my PC…pls help me anyone thr? Thanks a lot in advance….

By rebecca m on Jan 8, 2009 | Reply

I haven’t been to my bank yet since I saw the charges on my bank statement. I have been on the chronopay website and can’t find the form. Where aboiouts is it. Im confused as well as to how it was that company????????

By Greg on Jan 9, 2009 | Reply

Was able to delete all files except for 1 2009 in program files, when I try to delete it says it is protected or in use, any help?

By cdriggs on Jan 9, 2009 | Reply

hmmm…when trying to delete the brastk.exe file a windows popup tells me “Cannot delete brastk: Access is denied.” This is the file that runs the little red “X” tray right? How can one turn it off so it can be deleted then? Or better yet, how do I delete this file?

By Sombaylikme on Jan 10, 2009 | Reply

thanxxx

By Sombaylikme on Jan 10, 2009 | Reply

thankyou guys thanks to everyone i had antivirus 2009 for like 1 week and it was very fucking anoyying i was about to smash my cpu but u helped me alot so thanks!!!
im only 15 yo

By Sombaylikme on Jan 10, 2009 | Reply

somebody should kill or sue dis fucking bitch whoever made dis asshole bitch av09 dis shit is a piece of crap fuck them

By jessica on Jan 10, 2009 | Reply

somebody help please!! its antivirus2009 is pissing me off!!!

By Jake on Jan 10, 2009 | Reply

well I just fell victim to this shit too and bought it with my credit card has anyone had any problem from accidentally buying it??

By priscilla on Jan 11, 2009 | Reply

i just signed up on c/c this am and now cancelled notofied c/c suppose to be credited within 30 days-keep a file-print-out or file on computer for future ref. i went to google for write-ups should have done it before ordering–rating bad news have fun!

By John on Jan 11, 2009 | Reply

restore worked great

By Richard S. on Jan 11, 2009 | Reply

There is a way to get rid of this menace without spending your hard earned money on some programs that claims to remove this nemesis. Step 1: Restart computer and hold down F8. There will be some white on black printing on screen. Using the arrow keys, scroll up to the second choice- Safemode through networking. A bunch of printing will show on the screen. Go make yourself a cup of coffee. Upon return, your computer will be in safe mode. Step 2: Click start, my computer, C-drive, program files, and finally antivirus2009. Delete the sheild icon, delete folder. Open recycle bin and delete again. Reboot PC and the virus is gone. No expensive programs:)

By Richard S. on Jan 11, 2009 | Reply

Locate the file, and delete in while your computer is running in safe mode. Read my other comment on how to do this.

By enrqiue on Jan 12, 2009 | Reply

i have a trouble removing Inter Antivirus Pro from my PC. is there any remedy then please suggest urgently. Also i have tried removing it via Task Manager, Control Panel, Dos but then also it is there. So please if remedy is their then please reply me as soon as possible.

By Lisa666 on Jan 12, 2009 | Reply

Greetings from Willcox Arizona (:
I got this Damn Antivirus Pro about a week ago It has taken me this long to get it removed!
I was surfing your site after being up all night long searching for a (Prayer) When I read all of your posts. I tried three different fixs and the one that worked and cleared it for4 good was Windows Defender just follow instructions and be sure to reboot when the scan is done and (Presto The Bitch Is Gone)
Thank you to everyone who posted their Ideas!
Don’t give up it Can be REMOVED!

By tammy on Jan 13, 2009 | Reply

i do not want sparyware on my pc no more how can i delt it off here

By Nova on Jan 13, 2009 | Reply

Yes one is through Vista and is not Malware and the other is Malware

By Nadia on Jan 14, 2009 | Reply

just got hit with the antivirus pro!

lucky i did a google search to see it was actually a virus.

bought the spyhunter software as advertised on this site. worked a treat. cost money but rather that then all the crap attached to this virus.

some people are just sick…why create this stuff?

By Nadia on Jan 14, 2009 | Reply

you are lucky lisa. I have the windows defender too and it did bugger all!

spy hunter did the trick for me

By Jessie on Jan 14, 2009 | Reply

Did you get this antivirus 2009 off your computer? I can’t…it is driving me crazy.

By Bill on Jan 14, 2009 | Reply

I was infected about 3 hours ago, after reading some of the post, i did a system restore to yesturday, seems to have cleared up.

By janet on Jan 15, 2009 | Reply

I have followed all of the steps to remove antivirus 2009 and was able to remove everything except the wscui I click delete and it deletes it , then I empty the recycling bin and run the search again and it reappears saying it is in a file extension in the control panel. Any ideas on how to get it out of there?

By Jenny on Jan 16, 2009 | Reply

Yeah, that sucks >:[

There should be a website that lists all of those sites that have the fake alerts on them. I recently gave up on doing it myself because it still comes up even after I’ve done everything above (that I don’t have to go on the internet for, because it won’t let me!!)

So I’ll be searching for a REAL software that actually helps my computer for a change.

By Evee on Jan 17, 2009 | Reply

I called MICROSOFT help, it is nt an easy number to find, but after an hour it was done and gone!

By mike on Jan 17, 2009 | Reply

yes i did try a non destructive restore, and the sheild id still in the task bar !!!!

By frances on Jan 17, 2009 | Reply

evee could you post the number for us? i just got hit this evening and cannot access task manager. also, how are you all finding the files and their names? i search the registry and my c drive but none of the files are found in search.

By adevildog on Jan 17, 2009 | Reply

Thanks Richard S. ( jan 11,2009 ) . I just used your procedure to remove antivirus 2009 from my pc. It worked just as you wrote. I spent 4 hours d/l the supposed free fixes from multiple sites to find out that the system scans were free, but not the actual fixes. Thanks again !

By karl on Jan 17, 2009 | Reply

hello, the pup up window of antivirus 2009 show in my laptop, i search what it was about, and i find out that is a virus, i dont know if it is already installed in my laptop,i search any thing whit that name, but i did not find anything, if it is not installed how that window shows up?

By ray on Jan 19, 2009 | Reply

connie nj, do yourself a favor and try the removal yourself. Before attempting, back up all of your data to an external hard drive and then disconnect it. If you destroy the computer. Rebuild with the disks that came with it. The great thing about this process is that you learn to become self sufficient. Paying Best Buy is not only expensive and not worth the money, but over half of the “Geeks” I have spoken with don’t have a clue. I listen to them in the store and then tell the customers what they really need to remove the bad information from their brains… Good luck with the removal. Be brave and dive in…

By Tobin on Jan 20, 2009 | Reply

this information was really helpful…thanks
all the guys out there who this problem just download spyhunter & scan. delete all the detected files and registry entries. But make sure that you export ur registry to an external storage before making any changes.

By cheesewiz52 on Jan 20, 2009 | Reply

Did anyone get a refund for A.V. 2009?
And how do you get it?

By ted m hinerman on Jan 20, 2009 | Reply

antivirus 2009 poped up on my wifes computer. i couldn’t get it off so i did a system restore to a couple days before. it seems to be gone. do i need to do something else or do you think that took care of it. i use xp thanks ted

By mom is mad on Jan 21, 2009 | Reply

I spent 3 hours last night trying to get this crap off my son’s laptop. I was successful until the point I tried to quash the balloon in the system tray, at which point, I apparently deleted the wrong .dll files and now it will not launch windows, so after all that time and effort, and many choice swear words, I have called our expensive IT guy to come and get the damn thing and try to retrieve my son’s college homework. yay. thanks for stealing my time and money to the jerks who released this virus.

By kim on Jan 21, 2009 | Reply

Has anyone who bought this actually got their money back? If yes please tell me how!!!
Thanks

By Mike on Jan 21, 2009 | Reply

Contact your credit card company for reimbursement. They can file a claim against the “company” that billed you. Mine gave us fill reimbursement and said they would go after them, then they apologized! Hope it works as well for you.

By ibrahem on Jan 22, 2009 | Reply

always spyware comes to my computer and i do update but no usefulness how i can download update from computer<

By thenetguru on Jan 22, 2009 | Reply

Follow above steps. If still in internet explorer. Boot in safe mode and go to Windows/System32 folder. If you have file winsystems.dll then you have a rootkit version. Delete this file and disable it from your internet explorer addons. You have to have system restore off during this procedure, otherwise it may put it back in when you boot in regular mode.

BTW, this fixed it for me.

Good luck.

By Brian on Jan 22, 2009 | Reply

OK I can not find any more files. When I surf I get redirected to ab about:blank that displays links to get the antivirus2009 it states the web page is harmful. How do we get rid of that part?????

By kim on Jan 22, 2009 | Reply

Thanks Mike!! I hope it works!

By PCTSg on Jan 23, 2009 | Reply

Thanks, this will definitely help out. Can’t imagine why someone would create such a program

By Floyd Patrick on Jan 23, 2009 | Reply

Will you please get this darn stuff off of my computer… I am an American… who are you???

By greg on Jan 24, 2009 | Reply

The roadside bomb of my computer. FEEL the rush!!! Thanks to those who publish the solutions!

By FlapJack on Jan 25, 2009 | Reply

I would like to add something to the list above:

Antivirus2009 also hides itself under an alias “av360″

You can add that to the list of processes to stop and .exe files to delete.

Just thought I would add that.

By Mariecar on Jan 26, 2009 | Reply

HI!…I was able to remove some of the components of antivirus2009 but i cannot delete av2009 itself..my computer says i do not have permission to do so…av2009 is in quarantine. HELP how can i remove it permanently..my OS is Windows VISTA..

By Andrea on Jan 26, 2009 | Reply

i am trying to remove antivirusxppro2009. however, i cant find any of the above stuff in the task manager processes. i can’t even find any name anything like the avpro or any variation on it. can anyone suggest anything else

By GATOR on Jan 26, 2009 | Reply

u better contact ur bank and cancel that credit card as soon as possible!!! Y do u think they ask u 4 it?

By Rachel Cook on Jan 28, 2009 | Reply

I also got this virus and I did a system restore. All the icons and programs files are gone, but I still cannot use Internet Explorer. Any ideas?
Thanks

By cindy on Jan 28, 2009 | Reply

OK. Please correct me if I am wrong. I didn’t go to any porn sites as some of you stated here. I was doing some researches in google then next thing I found out is that my computer got infected by Antivirus 2009. This world sucks! My friend told me to get a Mac last month and I should’ve listend to him!

By barbara on Jan 28, 2009 | Reply

My computer was hit. I was getting pop-ups and purchased Advanced SystemCare Pro last night (don’t know if there was a connection) and came home from work to a big flashing box on my desktop. It has disabled my ability to use task manager, edit desktop, and add/remove programs. I tried to download SpyHunter, but it flashes on/off and won’t install. I am trying to search and delete the files manually, but it has taken an hour to search for the first two files and they were not found. Any other ideas?

By joan on Jan 29, 2009 | Reply

Just so you know, I renewed McAfee Security and immediately have this Antivirus 2009. So be careful with McAfee.

By Ellen on Jan 29, 2009 | Reply

I also got this virus after buying MacAfee privacy service.
My AOL virus detector said my computer was clean, even while the %#@ popups were running!!
The virus was under spyguard.exe in one file.
Also got Kollah as a bonus.Still fighting both.
I’m typing from my new Mac.

By Ellen (different Ellen) on Jan 31, 2009 | Reply

Don’t know how I got it. Have located the application on my c:\ drive, but when I try to delete it, I’m told I don’t have permission to move it to the Recycle bin. Any suggestions?

HP running Windows Vista.

By Alison on Feb 1, 2009 | Reply

I have HP windows vista.This morning Antivirus 2009 popped up and said that I have a virus so I went in there and had it scanned. And showed up 20 infected.So I purchased it ; almost 50.00.They gave me a registration code and they asked me to put that in along with my email address . I did that and would not allow me to activate.
I emailed to complain and yet to hear back.
Now , I have to call my bank tomorrow( Monday ) to get my money back.
I still have the antivirus 2009 popping up all the time. How can I get rid of it?!!!

By amber on Feb 4, 2009 | Reply

everytime i try submititng a comment in here it wont go or stay on.. but i had that damn thing and i took the advise and restored my computer.. i greatly appriciate it.. i went in to assesories and then to system tools and system restore to the date to when i didnt have this dman thing.. oh god ia m so happy.. thanks for the advice… greatly appriciate it…

By texas meme on Feb 4, 2009 | Reply

I just wanted to say that this worked!!! And it was easy and free – thank you.

By tbrown on Feb 4, 2009 | Reply

I just wanted to say thank you. I tried this today and it worked and it was easy.

By KAYKAY on Jul 31, 2008
Well I have the solution to those files that are “in Use”

Go to Start
then click Run
type in – MSCONFIG
Click the startup tab
Select the virus that keeps starting up for example AV2009
this will deselect it from starting up when you start your computer…it will not be in use anymore.
Click apply
Restart your computer

Then go to ur hard drive, program files, select the virus file and delete it.

IT WORKED FOR ME

By patw on Feb 4, 2009 | Reply

nasty thing about the newest version is that it attempts to connect to rapidshare and download an update…

By Bob Provencal on Feb 5, 2009 | Reply

Recover your operating system. This will completely remove everything including Antivirus 2009. Hope you have important documents backed up because you will need to reinstall them.

By Teddy the IT Tech on Feb 9, 2009 | Reply

Why go to BestBuy, The geeks will just wipe your OS and say that the damage was to bad to fix. Go to a mom-and-pop PC shop ask around find out what the best one. best buy has one tech the others are salespeople just used to get you to buy a new PC. At my shop to fix virus issues its 75 bucks that’s all not $300 or $150 just 75 bucks no matter how long we have to work on your box. My wife ( God love her ) got this last night so I have to find a way to get into the regedit but this dam AV 2009 will not let me but if i can get mal bites to work i will have a shot

By Bill on Feb 19, 2009 | Reply

I’ve read most of the solutions on here, but none seem to address my son’s issue: as soon as he logs in, is says ‘loading settings’, then ’saving settings’, and returns to login screen. It won’t boot in safe mode, safe mode with command prompt…Nothing works. He has no floppy drive, nor does his laptop check the cd for boot info before the C drive.

I can’t get to the registry or anywhere if it won’t load in the first place.

ANY help greatly appreciated!

Thanks!

By Matthew on Feb 22, 2009 | Reply

Alright lets fix this to where it will never be broke. after you install a full working version
of spyhunter. hit F8 start in safe mode only, IE no networking. click your shortcut to spyhunter and wooolahhhh all removed. Also disable system restore before you reboot to safe mode.
ENJOY

By Sophia on Feb 22, 2009 | Reply

HI!! CAN SOME ONE HELP ME FIND OUT HOW MUCH IT WOULD COST TO GET IT OUT?? IVE TRIED EVERYTHING ON THIS SITE AND I CANNOT FIX THIS PROBLEM!! PLEASE CONTACT ME ASAP AND TELL ME HOW TO FIX THIS!! I HAVE MID TERMS AND MY LAP TOP IS GONE FOR!!
ladi_sophia@hotmail.com
PLEASE PLEASE PLEASE THANKS THANKS THANKSS!!

By judies on Feb 23, 2009 | Reply

I found out that the owner is registered in Russia. I think its an intrnetmafia with many domains offering anti-spyware for removal of their own seeded spam and trojans… I spent 5 hours yesterday still couldnt fix it because my pc keeps on crashing

By Dave on Feb 27, 2009 | Reply

Antivirus XP 2008 and 2009 are not Anti-virus programs…

It IS the virus.

Do not use an infected computer to purchase anything even in the process of cleaning it, these programs are notorious for getting your credit card for ID theft and Credit Card Fraud.

Some folks just don’t get it.

By mark on Mar 1, 2009 | Reply

Ok, I’m really confused. A friend of mine got onto a malware site on my laptop, but my norton system blocked it. I belive it was the antivirus-2009 malware, which I have gotten before. I did not download it, but I still seem to be getting popups on my desktop. I even did a microsoft malware serch, and while the small search found it, the large one that delets it did not. can anyone help?

By Vince on Mar 20, 2009 | Reply

Theres a systematic antivirus thing i found, it opens antivirus 10.2 the moment i saw that name, I immediately deleted it and now im safe, whew.

By Rab on Mar 23, 2009 | Reply

(Small tip) start you computer in safe mode. This is done by pressing the F8 key when computer is starting. You will see everything booting once this is finished click enter then select run with networking. This should allow you surf the internet freely so you can at least do a virus scan. However I did this using eset and it disappeared for like two days then popped up again. I think I just need a better virus scanner. Good Luck!

By sami shaeri on Mar 25, 2009 | Reply

i wished remove virus, because computer lagging too much!! i must remove the viruses.

By scott n on Apr 3, 2009 | Reply

Hi, can any one help? My pc picked up the antivirus 2009 thingy which has screwed up my desktop so that i have nothing one it now. Having tried to delete the virus by deleting the program file folder, i ran spybot which found & deleted it, ran norton antivirus & downloaded a program from bleep.com, but after restarting the prog still persists. Finally i downloaded malware removal & still no joy as i have no desktop icons….can anyone offer any help. The only way i can get my icons up after booting, is to run explorer.ex everytime thru the task bar?

many thanks

By visit now on Apr 3, 2009 | Reply

I enjoyed this site very much and have taken away a better insight. I will recommend this site to everyone I know. More people should step into .

By sanja on Apr 3, 2009 | Reply

How effective will this be to remove the culprit that kils the pc

By gill on Apr 7, 2009 | Reply

help i need to remove the virus on my computer

By gill on Apr 7, 2009 | Reply

i hope you can remove the virus that got in to my computer thank you

By click here on Apr 7, 2009 | Reply

I have admire your unselfishness in taking the time to make this web site.

By Jean on Apr 8, 2009 | Reply

Ok I think I got rid of AntiVirus 2009, but it wont let me acess my Kapersky anymore. While I had AntiVirus on the computer it wouldnt either, now that its off how do I scan my computer?

By free poker game on Apr 9, 2009 | Reply

great site great site great site BRAVO!

By Jim on Apr 9, 2009 | Reply

if you adjust the Permissions for the user to standard, will that stop this from reinstalling?

By kendall on Apr 11, 2009 | Reply

Do I have any anti-virus systems on my Windows Vista Laptop I have only had for a few months it was brand new when i bought it

By Alec on Apr 14, 2009 | Reply

Yesturday my home computer became infected with Antivirus 2009. I dont know how, but iam clueless as to how to delete it. Could someone please email me and help me out!! Please, i dont want to pay the 500$ to have my whole system cleaned and be without a computer for a month!!
please, alec.arnault@comcast.net

By Desmond on Apr 16, 2009 | Reply

Antivirus’09 sucks! Well, I just got enough tax refund to buy a new computer. What do you think of a Nettop or Netbook? Are they powerful enough for email and net surfing?

By Steve on Apr 16, 2009 | Reply

I’ve tried taking this out myself, and have succeeded twice(or so I thought). Each time though, after about 3 weeks, it comes back full force. Just got rid of it for the 3rd time I hope, saying that cause I actually made it onto this site! Normally it blocks all websites I try to go to, so I blocked it’s site with McAfee…Well, that’s one less way to let them in(I hope). Just letting McAfee scan and searched for AV2009 on my comp using basic search and came up with nothing(not even in hidden-files). Hoping it’s gone for good.

By NoComment on Apr 16, 2009 | Reply

I have to say that the person who created this Antivirus’09 is a genius. If he used his intelligence in the good thing, the world would be better.

By sphinkstinks on Apr 24, 2009 | Reply

pls could any of u kind people write out the activation key for virus remover 2009. I will really appreciate it. thanks so much. I’ll be waiting.

By sphinkstinks on Apr 24, 2009 | Reply

thanks…still waiting

By Michael collver on Apr 27, 2009 | Reply

my desktop became infected with “antivirus xp 2009″ and i tried avg(free version) and nothing happened. i installed charter security suite from charter.net. i ran it and it found virus’s. when i rebooted, the computer starts then shuts down. i can’t even get it to go into safe mode. any suggestions.

By Tony on Apr 29, 2009 | Reply

Ok, so i had anti virus 2009 on this comp for quite some time and finally was able to get it fixed. I gave it to my buddy who works for the geek squad and he seemed to have fixed all my problems…after having my computer back for 2 days i found myself with another undownloaded “anti” service. Only difference is that this one is called SpywareRemover2009, anyone know what i should do to rid myself of these stupid programs once and for all?

By Gil on Apr 29, 2009 | Reply

McAfee found the virus and removed it.
The next time I started my PC, it was back before I did anything on the net. I was disconnected from the net. I have asked McAfee about the problem, but have not received a reply.

By Jason on May 13, 2009 | Reply

one thing I found to be useful is right after login get into CTRL+ALT+DEL taskmanager then you have a fighting chance at kill proccess and deleting files. The verison I got was 13465.exe in all users applications.

good luck

By tawfeek on May 13, 2009 | Reply

i need it necessary

By EMAD on May 26, 2009 | Reply

BACKDOOR.WIN32.DELF.NCY

By Shawn on May 30, 2009 | Reply

I got hit with a varient that is similar to above.

Kill Process called sysguard.exe

find files

C:\WINDOWS\sysguard.exe
C:\WINDOWS\Prefetch\sysguard.exe

look to see if registry link
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\RUN

refers to sysguard

When I manually scanned the files in C: My antivirus program McAfee did not recognize them as bad.

Apparently, the ‘criminals’ read these blogs too and fire off another varient.

hope this helps someone

By Joe Hallgarth on Jun 6, 2009 | Reply

I read that the removal of antiviruos Pro was free from spy doctor just 4 easy steps which I did three times and still have the infection. The removal was based on buying something which made the removal no longer FREE. THE FEDERAL INERSTATE COMMERCE nneeds to shut this practice DOWn with penalities. SEVERE PENALITIES. THIS IS FALSE ADVERTISING.

By Susana on Jun 10, 2009 | Reply

I deleted Antivirus2009 through safemode by deleting the whole “Network Associates” folder hoping it’ll be sucessfully removed. but it didn’t work. after I restarted my computer, there’s no longer pop ups but I can’t surf the web. It blocks many websites and doesn’t load anything that asks for passwords (IE. Aol Instant Messenger, etc).

Any other suggestions?

This is just so frustrating…

By antivirusvictim09 on Jun 18, 2009 | Reply

lol yea same family no diffrence fucking ANITviruS

By lala on Jul 30, 2009 | Reply

No system restore doesn’t work, it only makes it worse because of what that thing is.

By The guy who is very sad :( on Aug 1, 2009 | Reply

i got this and i tryed going on youtube or google and they say either like 400 error, a prima hosting page or a normal page where you go if you dont plug in you internet cable (and it was in!!!) are these caused by this virus?? PLZ HELP ME

By shawn on Aug 4, 2009 | Reply

See May 30′th entry
This time they try with
rfycsysguard.exe

Use task manager to kill process
RFYCSYSGUARD
then use registry editor to find registry entry

HKEY_CURRENT_USER\software\microsoft\windows\currentversion\RUN

has a key that refers to a folder in the c:\Program Files called
wvdejk\
that contains the file
rfycsysguard.exe
RFYCSYSGUARD.EXE-180BC224.pf

I killed the executible before it ran.

McAfee – are you listening???? You dont find this one either.

Listen everyone…. before infected:

Take a screen shot of Windows task manager with the Process tab open.
Then take another one with your browser open. minimize tasks open at the time.
Save these screen shots to a safe folder on the desktop.
Whenever the “Windows security alert” shows again, look at the task manager to see what new thing is running and be suspicious!
And dont push the scan button.

By brian on Aug 9, 2009 | Reply

This virus is being constantly updated. It will hide in different directories and under different names, so don’t just look for previously published pseudonyms. Also don’t assume your spyware or virus protector will save you. I had newest version of Kaspersky running when this thing popped up. Mine was under xmovsysguard.exe. As shawn wrote (see aug 4th entry), check your processes running to figure out the program name. Search out any associated names and delete files.

By Jody on Aug 22, 2009 | Reply

I paid for the antivirus software, $79.00. Does anyone know how I can get a return? When I ran McAfee, it removed the entire program which contained multiple Trojans.

By matt on Aug 28, 2009 | Reply

Thanks for all the advice guys, this virus seems to be constantly adapting and hiding under various names (see brian’s comment). I found mine under shgxsyguard.exe, I ended the process and found the file under Program Files\regsnm. All delated, all gone… I had Trend Micro Virus and Symantec running when I got the bug.

By jim on Aug 28, 2009 | Reply

I purchased AV program and was wondering if there is a contact number to stop payment. Does anyone have this info? please help.

By kim on Sep 8, 2009 | Reply

sucks

By ED on Sep 17, 2009 | Reply

Very simple. I got this the other day. I am not a wonk. Easy. Unplug computer from internet hookup. Go to All programs-Accessories-System Tools-System Restore. I set the date to go to as a week back. Restored. Turn off computer. Plug back internet connection wire. Turn on computer.
Antivirus Pro 2009 now gone. Took 10 mins. 1-2-3. gone.

By Marie-Odile on Sep 29, 2009 | Reply

Thank you . I got this virus yesterday and I tell you some keywords that I had to find and remove: seres.* , svcst.* ( process) , also rvseres
Good luck

By Tom on Oct 7, 2009 | Reply

I now have AntiVirus Pro on my computer. Yikes. Help! I can’t get on the Internet to download a fix. How do I download a fix if I can’t get on the Internet? Can I load it onto a CD and try to get it to execute on the infected PC? Also, what happens if I pay the $49 for the fix that the virus wants to sell me??

Thanks

By G girl on Oct 31, 2009 | Reply

otlasysguard was the new name in my program folders that was installed at the time all the crappy pop ups started occuring and trying to sell me antivirus pro 2009

By f-ing relieved on Nov 12, 2009 | Reply

He is correct. I tried all the other stuff…no luck. Restore settings…poof. Thanks man!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! +1

By Dale Coutts on Nov 22, 2009 | Reply

This stupid virus made me reinstall Windows (of course I had to reinstall everything on my main drive afterwards).

What a waste of a day.

By Matthew on Nov 22, 2009 | Reply

These mother fuckers wasted my entire Sunday. Fuck them. Their citizenship should be revoked and they should be sent to a desert island where they either starve or dehydrate. Do you think they would eat each other? I do…the bones and all. Parasites. Wealthy wealthy parasites. These are the real criminals. They also confused my grandmother. I hope they rot in hell.

By George Walls on Nov 24, 2009 | Reply

I purchased a AntiVirus software protection program for my computer. I was not satisfied so I asked for a refund and I got one. However, I checked my account today and the 49.95 I was charged is debited from my account. Can someone explain why to me please.

George Walls
773 2391016

By Brock on Nov 26, 2009 | Reply

This is too old for me… I got Antivirus Pro 2009. Popups keep appearing on my screen and I can’t launch ANYTHING. I have Windows XP and I’m hoping that someone, one of you, could tell me how I can get a software (FREE) that won’t be blocked by the virus. The other antispyware and real antivirus programs get blocked. Please help me. Task Manager also doesn’t work.

By John on Nov 27, 2009 | Reply

I was an idiot and paid what they were asking and my computer came back to normal, now i find out that it was a scam and I want ot know how to find them to get my money back. can anyone tell me where to report them?

By Nyah on Dec 5, 2009 | Reply

I went into safe mode and used system restore and AntiVirus 2009 is gone but I am still scared that there might be spyware or something still in my computer.

By Matt on Dec 5, 2009 | Reply

I have the Xp antivirus 2009 bubble popping up on the lower hand side of my screen, being the curious person i am, i looked it up. I want to know how to remove it without fully installing it. It seems as if its also blocking my Norton Antivirus from removing it.

By Chinmay on Dec 6, 2009 | Reply

Hey, I got same thing 2 hrs ago….don;t belive any shit…. do ane simple thing. Start your windows restore as your desktop shows up after boot… You can get open the window before this Antivirus shit starts…Goodluck

By Elliot on Dec 7, 2009 | Reply

Had a PC with this brought to me today, you need to do the following:
Download Spybot, Malwarebytes, and Ccleaner from another PC if needed.
As soon as the PC starts up run the above and open Task Manager, you must do this ASAP before Anti virus2009 can start up. Run the scans and clear the registry using ccleaner. Don’t close any of the programs, only to the desktop.
Use Task manager to close any unwanted processes. Use ccleaner to stop the start up programs running. DO NOT RESET YOUR PC or the antivirus 2009 will come back on. Antivirus 2009 automatically switches on the proxy server in your LAN setting so you can’t view intended websites. this needs to be disabled, may take a few attempts.

This is as far as i’ve got but certainly a good start i’ll update when it’s bee fixed.

By Jt on Dec 20, 2009 | Reply

Lol i hate this… I have it on my other computer. I scanned with malware or w/e and it is still there can anyone help me?

By dumas on Dec 24, 2009 | Reply

I’ve had this family of drive-by crap downloaded to my machine three times in a week. Each time it was while using IE on two seperate sites, addictinggames.com and torrentscan.com.

Both of these sites are legitimate and safe to surf, so I can only conclude that one of their advertisers has embedded some app in their banner ads that installs this family of rogue software.

Haven’t been able to track which ad server it’s coming from yet but I’ve been trying to get a sandboxed version of IE infected to figure out who’s causing it. I’ll update with DNS contact info if and when I track it back to it’s source IP.

By chella on Dec 31, 2009 | Reply

I am lucky that system restore works fine for mee too..

I followed one of the users instruction here..

1. Restart computer into safe mode (Press F8 while restarting your PC/laptop)
2. This might pop-up message saying that click No If you want run the system restore. I clicked NO.
3. System starts the restore process, select the “recommended” resotre point.
4. That’s all! Antivirus 360 should be removed after a reboot.

If you click “Yes” (point 2)
1. Then Go to Start –> Programs (or Program Files)–> Accessaries –> System Tools
2. Then click on System Restore.
3. Select the restore point, antivirus should be removed after a reboot.

By Watson’s Micro Computer on Jan 19, 2010 | Reply

Hello, My name is David Watson of Watson’s Micro Computers…I am based in Houston…but a also perform services in Dallas,Austin,Galveston,San Antonio—ALSO IN CALIFORNIA (San Diego, L.A., San Bernardino, Chula Vista, etc.)

I charge 8X less than Best Buy (in the Hreater Houston area) Anywhere else in Texas I charge 85$
And in California I charge $100. These are all flat rates, no Hidden fees, My work is Guaranteed, and I don’t wipe out your whole computer…LIKE BEST BUY and many others who also wipe out your hard drive and give you a back up. Which means they have…..YOU GUESSED it also backed up the virus!!!!I Go in your computer and hand pick ALL!! Infected files!! & YES, I am selling something A HEALED COMPUTER.

My email is PCVACCINE@Gmail.com
Forget the Rest Call The Best!!!

By Hannah on Jan 22, 2010 | Reply

how can i remove threats in my computer without getting license?

By Joey Y. on Feb 7, 2010 | Reply

To Hannah: Look up Dr. Web; a free anti-virus download. You’d have to download it and burn the so called ISO file to disc and boot with the CD and let it rip and set it to “clean” your system.

By Joey Y. on Feb 7, 2010 | Reply

Last I blew away a (similar?) infection as this was , I logged on with a different logon to the machine (with administrator privileges) and blew away the profile that had the infection and hen recreated that profile and he infection was gone. Of course, a full system scan was in place after that just to be on the safe side. Also, data from the infected user’s account was saved to a different directory before i blew away the account. Lucky for this machine, the severity of the infection was local to a user account and not the whole system.

By Joe on Feb 7, 2010 | Reply

Last I blew away a (similar?) infection as this was , I logged on with a different logon to the machine (with administrator privileges) and blew away the profile that had the infection and hen recreated that profile and he infection was gone. Of course, a full system scan was in place after that just to be on the safe side. Also, data from the infected user’s account was saved to a different directory before i blew away the account. Lucky for this machine, the severity of the infection was local to a user account and not the whole system.

By salvador on Feb 18, 2010 | Reply

my computer is infected the tools

By AtownSpace on Feb 23, 2010 | Reply

Hello all. I just want to say that I love seeing people come together to help each other out of the kindness of their heart. This is the way human beings should always behave and not just for computer viruses. We all know these viruses are all part of a scam. Ok on to the virus. I’m not a tech but have some experience dealing with these things. In task manager the process was named av.exe or av.exe*32. i ended the process tree but when I would try to start Avast, Malwarebytes, System restore even the internet, it would not allow me to. Eventually I started internet explorer through the start menu. I came here. I tried downloading Spyware Doctor and Spyware Hunter. The virus did not allow me to. Ok on to manual removal. I could not get regedit to start. So now what? i tried looking for the file names and the actual program to delete them but could not find them. Tough little virus I thought, nope! So what I did was go to Avast’s program files and tried starting it from there. It worked. I ran the scan and it found one infected file. I removed it but the virus was still there. It must be malware I thought so I tried starting Malwarebytes from the program files directory but it didn’t work. Aaarrgggh! I tried stuff in safe mode but the virus was there too. I rebooted, back to square one. Now what? Finally I decided that I had to open Malwarebytes somehow. So I right clicked and simply clicked run as administrator. It opened! I updated and ran the scan. Virus found. See ya!!! I hope this helps. sorry for the long rant. Peace and love from Chicago..

By caroline on Mar 16, 2010 | Reply

help me!! my computer is being… infected and it keeps on saying register now: manual Bfiw;r4WYG