asked on

Removing Anti Virus 2009

A co-workers laptop is "infected" with Antivirus 2009 professional.

How can I get rid of it?

Is this legit? http://www.removal-instructions.com/removeAntivirus2009.html

CompuElf

The link appears to me to simply be another version of the offenders site and tactics. I would not trust it in any way.

I would go to McAfee, Symantec, etc. site to get their removal instructions.

I would also suggest that you edit your browser security settings to secure against this malware in all of its forms.

CompuElf

A link:
http://www.symantec.com/norton/security_response/writeup.jsp?docid=2008-050906-3727-99

ASKER CERTIFIED SOLUTION

rpggamergirl

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Mohammed Hamada

Or do it manually if the mentioned tool by rpggamergirl didn't work..!

Locate Antivirus 2009 directories, go to My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.

Search and delete the following Antivirus 2009 directories

%ProgramFiles%\Antivirus 2009
If you were unable to delete the folder, restart into safe mode and delete it.

Copy the code snippet text and paste it into notepad, save the notepad to file name "AVreg-removal.reg" without quotes to your desktop..

Double click the file on desktop and click YES.

Check if you have any related items to antivirus 2009 loaded on your startup list.
Press Windows button + R
type msconfig in the box and enter
Goto Start up
Scroll and uncheck any items that have the name or the path to the antivirus 2009 files or directory.

Good Luck

Windows Registry Editor Version 5.00
 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus 2009]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\AV2009Install.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\AV2009Install.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\AV2009Install.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\AV2009Install.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\AV2009Install.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\AV2009Install.exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\AV2009Install.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\AV2009Install.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\AV2009Install.exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\AV2009Install.exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\av2009[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\av2009[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\av2009[1].exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\av2009[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\av2009[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\av2009[1].exe]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\av2009[1].exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\av2009[1].exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\av2009[1].exe]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\av2009[1].exe]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Uninstall Antivirus 2009.lnk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Uninstall Antivirus 2009.lnk]
[-HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Uninstall Antivirus 2009.lnk]

Open in new window

Richard Korts

ASKER

Excellent. Worked like a charm.

rpggamergirl

Thank you!

Mithrilhall

If you have trouble getting Malwarebytes to install you could try this bootable CD.

http://www.free-av.de/en/tools/12/avira_antivir_rescue_system.html