Virus Response Lab 2009 Descriptions:
Virus Response Lab 2009, or Virus Response 2009, or simply VirusResponse2009, is a counterfeit anti-spyware / anti-malware software. It is believed that VirusResponse Lab 2009 is a clone of the recent Virus Lab 2009 we have been encountered recenlty. VirusResponse Lab 2009 usually come up after you installed a video codec that come with Trojan, malware and virus.
It is extremely important to remove VirusResponse Lab 2009 from your computer. You can try our recommended SpyHunter* Spyware Detection Utility, which is very intuitive and highly efficient. VirusResponse Lab 2009 can be removed automatically. However, if you are familiar with registry edit and dll files in Windows, we strongly recommend you to try the VirusResponse Lab 2009 manual removal instructions. It might take time and patience, but it is equally effective if you get it right.
As always, we will constantly update the instructions to combat against VirusResponse Lab 2009 and its variants. Please feel free to post comments if you have any questions or suggestions regarding VirusResponse Lab 2009. This is a great community and I am sure that you would find the answers. Good luck!
Manual VirusResponse Lab 2009 Removal Instructions:
Stop VirusResponse Lab 2009 Processes:
(Learn how to do this)
VirusResponseLab2009.exe
Unregister VirusResponse Lab 2009 DLL Files:
(Learn how to do this)
AVLWarning.dll
Find and Delete these VirusResponse Lab 2009 Files:
(Learn how to do this)
VirusResponse Lab 2009 2.1.lnk
AVLWarning.dll
VirusResponseLab2009.exe
c:\Program Files\VirusResponseLab2009
c:\Program Files\VirusResponseLab2009\VirusResponseLab2009.exe
c:\Program Files\VirusResponseLab2009\AVLWarning.dll
c:\Program Files\VirusResponseLab2009\uninst.exe
c:\Documents and Settings\Adminstrator\Desktop\VirusResponse Lab 2009.lnk
c:\Documents and Settings\Adminstrator\Start Menu\VirusResponse Lab 2009.lnk
c:\Documents and Settings\Adminstrator\Start Menu\Programs\VirusResponse Lab 2009
c:\Documents and Settings\Adminstrator\Start Menu\Programs\VirusResponse Lab 2009 2.1\VirusResponse Lab 2009.lnk
Remove VirusResponse Lab 2009 Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\VirusResponseLab2009
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO.1
HKEY_CLASSES_ROOT\AVLWarning.WarningBHO
HKEY_CLASSES_ROOT\CLSID\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_CLASSES_ROOT\CLSID\{F5734812-E6A1-8833-ECA9-949B5B8A88BF}
HKEY_CLASSES_ROOT\Interface\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}
HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKEY_CLASSES_ROOT\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusResponseLab2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A21C8D81-A9C7-46c6-A488-2A32FA0DAEB6}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusResponseLab2009
Download SpyHunter* Spyware Detection Utility.
I also had to re-claim my home page. To do that I had to go to internet properties, then programs, manage add-ons. I found something called VirRLWarningBHOClass. I disabled it and the windows messenger under it because it didn’t have a publisher. My windows messenger still works fine, i think it’s fake or something. Thanks again for all the help, i hope i can help someone out with my 2 cents.
Thanks Rabiteman… Not only did I get rid of that system tray annoying notification, but cleaned a few more items that I couldn’t before. That autoruns tools is awesome.
For other users such as me, don’t forget to refresh your screen after hitting: Options>Hide Microsoft Entries. The faulty ones will popup as per Rabiteman’s instructions.
Great stuff, thanks again!
Thanks Rabiteman…Everything worked perfectly.
OK i have read all the posts on this f*cking program virus response lab 2009 and i don’t have a clue on what to do, i tried following the steps given but at step 2 i get confused so i tried skipping to step 3 and i couldn’t find any of the files. I keep getting these pop ups in the bottom right saying “infiltration alert” from this bloody virus response crap and its starting 2 piss me off i don’t have a clue what to do next SOMEONE PLEEEEEEEEEESE HELP ME!
I think i’ve finally managed to gid rid of this nasty piece of work! I followed the manual removal by checking all the files but it didn’t fix the problem, i was still getting pop-ups every minute or so…. I resorted to going into safe mode and doing a system restore returning the pc to the state it was in the day before i encountered the virus. This seems to have done the job – i’ve had peace for the last hour!! Hope this helps.
the icons in the bottom xp toolbar keep taking me to their site!!!!!!!!!!uuuggggggggg
how can i eliminate this??
Hello I just purchased Virus resonce lab, When I did purchase you said it was $42 and when I got my confirmation it was $82. Also can’t get it to work, won’t let me activate? Please refund!
Yeah,the stupid flashing thing in the task bar. That one took some time to find, but it was called wcs.exe I had to search all files and folders for it, then drag it on to my desktop and rename it as a .doc then I had to restart my computer and only then would it finaly let me delete it. I emptied the recycle bin and have not seen it since. Good luck!
We had Virus Response Lab 2009 hit one of our computers here at work, tried many things to get rid of it but the only thing that worked was SpyHunter, had to pay $29.95 but it cleaned it right out.
I beat the blinking yellow icon of doom by running Spyhunter freeware, using thier list of infections and their titles, I went to task manager and closed all of the listed processes…some of them respawn and spawn each other, BUT…one of them will kill the warning beacon. I have yet to get rid of the virus completely but that’s what I’ve got so far. Good luck.
Wait…the process is called wcs.exe and it probably stands for caution and warning signal…I just searched the file and I’m about to go delete it. Cheers
Rabiteman is the man
I’ve been trying for days to get rid of that blinking icon. His idea finally worked and i didn’t have to download a sea of anti-spyware
Kudos.
Removed the Blinking Icon by following the instructions of searching for all files named “wcs.exe” and/or “wcs”…Moving them to my desktop and changing/adding an extension of “.doc”, then deleting them, and restarted PC.
Removed the annoying program by searching for all files named “virRL2009.exe” and/or “wcs”…Moving them to my desktop and changing/adding an extension of “.doc”, then deleting them, and restarted PC. (I am PC, I am PC, I am PC….)
That file name may be wrong, but when the security center comes up and starts to scan, you can look in the task bar and it is the one hogging the system…
Now, still fighting with the Homepage Changes that set it to the Security Homepage, anyone have ideas on what is causing that and how to permanently change that???
Additionally, I have a dumb “Security Toolbar 7.1″ on my IE Toolbar that I cannot remove…anyone have ideas on what is causing that and how to remove it too?
Thanks to Rabiteman (although I have no “security tab” options so I couldn’t “check the Deny All permissions box”) and others, putting it all together is really the key, and I did that by watching the Task Bar to see what processes were running, and then searched them without extensions in the search field, after going into advance to search hidden folders.
i tried multiple things.
things that dont work:
System reload
Anti virus
Complaining
smashing keyboards
Anyway, the simplest thing is”:
1. go to configuration, delete the software
2. then find all the files wcp, virus responder etc.
3: cut and paste em on desktop
4: put .doc behind all files
5: reboot and quickly delete all files before the apllication starts running
The only thing is i still got that freakin toolbar and homepage set.. any1 got a solver for that?
I followed Hewgdragon’s advice, and now the flashing icon as gone. Yay!
But, when I turn on my laptop, I am still getting the VirusResponce Lab 2009 scanning thing and also many pop-ups from the bottom right hand corner of my screen. I can escape them, but they constantly pop up.
How do I get rid of these once and for all?
My Dad will kill me if he knows i got a virus on his laptop, so please help!
My friend had this POS on his system, followed instructions above to do a safe mode restore. Restored to 2 days before first symptom and that POS proof that romanians were friendly with buffaloes was gone forever.
Safemode to a few days in the past seems to be the fastest way to go.
My VirusResponse Lab 2009 was actually nowhere to be found under the name of “VirusResponse Lab 2009″ on my PC. However, when I went to search for the Program folder of the same under C:\Program Files, I found another folder named “VResLab”. Apparently, my spyware might have morphed to this folder. Anyways, I started with the manual instructions process listed above and steps 1,2 and 3 were unsuccessful and did not yield any appropriate search results. However, step 4 (registry editing) produced positive results for some of the Keys listed above and I duly deleted them. After restarting, I found that the program was still runing. Apparently, the VResLab contained an .exe called VResLab. I terminated the process in Windows Task Manager and then subsequently deleted the .exe file.
Also, I had read in this community while researching the problem about the icon issue. As mentioned, it was due to a process called wcs.exe and it was a b****ass process which refused to be terminated in Task Manager. So I did what was reported as a possible solution. I searched for the file. Then dragged it to desktop. Renamed it to wcs.doc. Then the process wcs.exe which was nomore present as the original name could be deleted easily. Next, I also deleted wcs.doc file.
After rebooting, VResLab 2009 and the icon were gone…Voilaaa ! But it left a nasty side effect on my PC. It installed some stupid Security Toolbar 7.1 and a couple of nasty processes called “iebtm.exe” and “iebtmm.exe”. I removed both these processes in a similar fashion to what i did with wcs.exe i.e. search, dragging, renaming, terminate process and finally deleting renamed file.
I dont know how Security Toolbar 7.1 went away but I did do something apart from these things listed here. I went to Add/Remove Programs and removed “IE Explorer Bar” and “IE Browse Tool”. A small note : Before I could remove IE Browse Tool, I had to restart PC once as directed by the computer. After another reboot, the Toolbar was gone. I suppose that did the trick.
Or else, just type the keywords “Security Toolbar 7.1″ in Google and the first few entries come up all mentioning how to remove that piece of shit. I am sure one of those will work.
Now I lie exhausted on the Battlefield….Victorious !!!
Hello JeffMacNeill, Same u, I just purchased Virus resonce lab..Did u get ur money back? I want refund also, can u help me find the way to return money? What did u do? u called them? or u ask ur bank to return money? Who is proccising this virus software
Do not purchase Virus Response Lab! If you purchased it, IT WILL NOT WORK!!! This is a scam on top of the virus. Any activation codes it gives you are fake.
The ONLY software you should purchase if you don’t feel confident about attempting the manual removal is SpyHunter as that seems to work.
I have also got the problem of the pop-up sorted only it was in my case it was the windows security alerter.
Go in the Add and remove programs there you will find it it will ask you to reboot your computer and it is gone well for me it worked……..
Thanks a lot everyone for helping me getting rid of Virus Labs 2009.
hello…….. ey plz cn sumone help me remove dis thng!!! its jst gettin in2 my nerves u knw! im fed up!
no need to go in registry it does that for you and the scan only takes about 10-15 mins but is worth it
wellz i ran heaps of scans and removed this .dll fille n i started the computor todaii n the virus seems to have gone. does anyone knoe how i can make sure thet this virus is gone?? cuz i dnt wanna trust this thing.
get your money back and sue the mothers
these people should be prsecuted maybe obama will do something about these jerks
hi i had the same problem as you did and i found the file and now i can seem to figure out how to delete it can you help me as soon as posiable?
thanks
Hello,
after a fierce battle of 4,5 hours the evil witch is defeated.
Thank you Rabiteman, your advice was very usefull to me
Search and rename (reboot then Delete)ebmkdz.dll located under C:/windows/system32/ebmkdz.dll
Also follow the advices above to clean the Registry.
Deleting the file “ebmkdz.dll” should disable the system alert Popup .
If you don’t find the ebmkdz.dll file you have a diffeent variant of the trojan.
To find the culprite dll. Go to C:\Windows\System32 and try to find it
Clue : check the dlls and find out
Is the dll is from Microsoft? If not, it is suspect go to Google and check it (if you point the mouse to a dll , it will tell you if it is Microsoft or not)
also I checked the most recent dll under system32 and search them on google for each of them. I was able to find out that ebmkdz.dll is the bad guy.
Hope it help
Has anyone requested a refund from SegPay? If so have you recieved the refund?
I called the SegPay number 1-800-990-6276. I gave them myTransaction # and last 4 digits of Credit Card Number. Said it would take 10-15 days to show on my CC statement. Just did it this a.m. so we’ll see.
Any one recieve a refund when they requested one from SegPay?
I am also having problems with this Virus Response Lab 2009
My son downloaded it and not it’s a real pain in the you know what
Any help getting rid of this would be greatly appreciated
Thank You Kindly
Dave
obama’s not guna do crap
I got infected when trying to download a patch to allow me to run a mov clip. Fortunately Mcafee and/or Windows Defender caught it, and I removed it right away. But the onery blinking icon was perverse. I finally stopped it by finding ebmkdz.exe in c:/windows/system32/ , dragging it to the desktop, and renaming it. After restarting, the icon was gone!!
I opened the file with notepad. In the middle of this binary file I found this line of text:
fishass.com/xzdir_12/21blowjob._xe T h e computer has been crushed!!
Explorer showed a file creation date of 1999.
please tell me how to get rid of something you cant a ford
I have the same problem…while trying to delete some files, it says they are in use. What do I do. Maybe there’s an answer in here somewhere, I’ll keep looking.
i just found the VIRsLab thing that was running in my task manager and when i searched it in my comp search thing it came back with 2 files i deleted both of em and 1 had a big icon which looked like limewires thing. anywathing else i should do cause this thing is driving me crazy def going to break skulls and take names
first end the process by clicking ctrl+alt+del then try again !!!!!!!
has anybody deleted the virus w spy hunter?
hi there, can someone please help me because i can’t even get passed the log on screen of windows xp because this virus has basically shut down my entire computer….
i’m currently trying to attempt to start it in safe mode (i’m not even sure if that will work) but i can’t get to the screen that will allow me to put it into safe mode….
I’ve had this, but the folder and dll name has been changed from the article above, or possible it’s another variation.
The program still shows as being called VirusResponse Lab 2009. However, it now appears in a folder called avrlabs in Program files, and the dll is called avrlabsWarning.dll
Further to my previous comment, the registry entries that need deleted are also under the following; (in addition to th ones list in the article). I also removed anything related to avrlabs.
HKEY_CURRENT_USER\Software\avrlabs\
HKEY_CLASSES_ROOT\avrlabsWarning.WarningBHO.1
HKEY_CLASSES_ROOT\avrlabsWarning.WarningBHO
HKEY_CLASSES_ROOT\CLSID\{D695B871-8020-4041-A6D2-59F922E1B2E2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D695B871-8020-4041-A6D2-59F922E1B2E2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\avrlabs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\avrlabs
If the item can’t be deleted because it is in use do all the stuff in safe mode.
This stupid program is driving me CRAZY!!!
Is there someone we all could give some money to that would kill the SOB that wrote this program?
After many hours…I think that I have defeated the beast. There was a lot of stuff in my registry…it had VRL or BHO in the names. Also, the blinking icon was from the file 351631.dll – apparently, it is a Facebook worm. I deleted that file. Then, there was a file called pgfshvp.dll – after I moved it from the Systems32 folder (thanks to whomever here suggested looking in that folder for odd .dll files) to the desktop, renamed it, rebooted and then I could delete it. Blinking Icon…removed!
Now, I cannot get any webpages to load on my laptop, but I am working on that.
Good luck to everyone!
RE : INFESTED HOMEPAGE
It would seem that this virus attacks Internet Explorer Homepage only !!!
I have Google Chrome loaded on the PC that got infected but havent been using it
Internet explorer gives me the nasty homepage
Using Google chrome — Normal service resumed…
Suggestion :
Try 1st : Download another Web browser (maybe..Mozilla Firefox/ Google Chrome)
OR
2. uninstall IE and reinstall…am trying this and will let you all know result ??
Taj “antivirus” program je virus, ne kupuj nista
After deleting the files and you are still getting the little icon on the taskbar after rebooting. Do a system restore back to a time before you were infected. Worked for me.
The big question would be : Why doesn’t Windows Defender find and remove this item ?