a good friend of mine here on answers got infected with that damn thing and nothing has worked!
she has tried, avira, a squared free, superantispyware, spybot, adaware, and malware bytes all with no luck.
what gives, is this thing on steroids or something?
and yes, she did the scans in safe mode.
could spyware terminator do it? i don’t think she has used that?
Related posts:
10 responses so far ↓
1 Hello Im a Mac // Nov 21, 2008
This will work
Smit Fraud Fix http://siri.geekstogo.com/SmitfraudFix.php Removal Tool
Launch in Safe Mode F8 Before Windows Logo
Or Manual
Antivirus 2009 manual removal:
Kill processes:
av2009.exe av2009[1].exe AV2009Install.exe Antivirus2009.exe
HELP:
how to kill malicious processes
Delete registry values:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\ CurrentVersion\Run\15358943642955870504508370025739
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Antivirus” = “%ProgramFiles%\Antivirus 2009\Antvrs.exe”
HKEY_CURRENT_USER\Software\Antivirus
HELP:
how to remove registry entries
Unregister DLLs:
shlwapi.dll wininet.dll
HELP:
how to unregister malicious DLLs
Delete files:
av2009.exe av2009install.exe av2009install_0011.exe av2009[1].exe Antivirus2009.exe ieupdates.exe scui.cpl %program_files%\\antivirus 2009\\av2009.exe %startmenu%\\antivirus 2009\\antivirus 2009.lnk %startmenu%\\antivirus 2009\\uninstall antivirus 2009.lnk winsrc.dll %desktopdirectory%\\antivirus 2009.lnk winsrc.dll ieupdates.exe av2009install_0011.exe av2009install.exe %program_files%\\antivirus 2009\\av2009.exe
HELP:
how to remove harmful files
Delete directories:
C:\Program Files\Antivirus 2009
2 Brie. // Nov 21, 2008
I had that a few weeks ago, but malware bytes fixed it… Uhmmm tell your friend to call her internet company or the hotline for the type of computer she has and see if they can fix it.
3 Dunbar Pappy // Nov 21, 2008
Antivirus (2009. et al) and variants;
Don’t feel all alone; hundreds of thousands of Internet Explorer users are getting this virus (masked as a ‘Security’ tool). It’s prevalent on the ‘My Space’ site, & an especially nasty one, that can be removed with one (of several) specialized utilities.
I’ve not tried them all, but I have prescribed ‘Malwarebytes’ & it worked.
http://www.malwarebytes.org/mbam.php
The reason people get it is they allow “3rd Party Cookies” and ‘Active ‘X’, which in this case displays some type of icon, or pop-up warning, which is an “opacity-based attack” whereby the real action you perform is hidden behind the visible display; so when you tick anything, the malware installs itself.
Unlike typical pop-up advertising (stopped with available blockers) 3rd party cookies are entirely different critters.
Turn off “3rd Party Cookies”, and always leave them off.
INTERNET EXPLORER: Tools> Internet Options> Privacy> Advanced: here check ‘Override automatic….’; ‘Allow session cookies’; ‘Allow 1st party cookies’; & ‘Block 3rd Party Cookies’.
FIREFOX: Tools> Options> Privacy: here UN-CHECK ‘Accept 3rd Party cookies’
OPERA, et al: not sure, check under ‘options’ for this.
Because architecture of the Internet (notably ‘Flash’ scripting), vulnerabilities are readily exploited in Internet Explorer, & it is now urgent that you use
Firefox with current ‘NoScript’ add-on, which will prevent “opacity-based attacks”.
NoScript: https://addons.mozilla.org/en-US/firefox/addon/722
reference: http://hackademix.net/2008/09/27/clickjacking-and-noscript/
4 ilknur K // Nov 21, 2008
Tel her if she have in your Computer Malwarebytes and Superantispyware To Restart Computer Safe Mode Then Scan Computer Use Malwarebytes and Superantispyware Then Restart again normall. How to Use Safe Mode Windows XP
If Windows XP is the only operating system installed on your computer, booting into Safe Mode with these instructions.
* If the computer is running, shut down Windows, and then turn off the power
* Wait 30 seconds, and then turn the computer on.
* Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a “keyboard error” message. To resolve this, restart the computer and try again.
* Ensure that the Safe mode option is selected.
* Press Enter. The computer then begins to start in Safe mode.
* When you are finished with all troubleshooting, close all programs and restart the computer as you normally would. Press here http://www.pchell.com/support/safemode.shtml
But if still she have Problem with That Bad Anti-Virus2009 Tell her To Use System Restore Windows XP System Restore Is Easy to Use The System Restore feature is built into Windows XP and is used to return your computer to an earlier state if you have a system failure or other major problem with your computer. The point of System Restore is to restore your system to a workable state without you having to reinstall the operating system and lose your data files in the process Press here http://www.microsoft.com/windowsxp/using/helpandsupport/getstarted/ballew_03may19.mspx
5 Malwarebytes // Nov 21, 2008
Sounds like the AntiVirus 2009 people are getting ahead of even the best Anti-Malware Scanners.
Try SmitFraudFix: http://siri.urz.free.fr/Fix/SmitfraudFix.exe
Scan with SmitFraudFix and Select the Search option. Now, boot into Safe Mode and run SmitFraudFix again but instead of selecting the ‘Search’ option, select the ‘Clean’ option. When it asks if you would like to clean the registry, select yes.
How to Boot into Safe Mode:
1. Restart your computer
2. Press F8 as many times as possible
3. Instead of Windows loading as normal, a menu should appear
4. Select the option to run Windows in Safe Mode.
5. When you are at the logon prompt, log in as normal
If that’s not working then e-mail me and I’ll do my best to walk you through it.
6 awesome // Nov 21, 2008
Download Malwarebytes’ Anti Malware and keep it forever and do quick scans every week (only takes 5 min.).
I know you said you tried it, but did you try a full scan? And a quick scan?
Cause I had the same virus and got it all cleaned up…
7 ♥♥ Miss Stylish ♥ ♥ // Nov 21, 2008
http://search.yahoo.com/search?p=Can+Anything+remove+ANTIVIRUS+2009&ei=UTF-8&fr=hp-pvdt
8 ? // Nov 21, 2008
I’m thinking a chainsaw or sledgehammer will do the trick.
Thanks Chris.
9 MajiStk // Nov 21, 2008
Antivirus 2009 is an unwanted fake software. it is a rogue spyware.
Heres How to remove it
(For manual removal of Antivirus 2009)
http://remove-fake-antivirus2009.flesh9.com
10 Sarah // Nov 22, 2008
I am going crazy with this thing too. It has been on my computer for about a week and I have tried everything including manual directions from bleepingcomputer, but it must be a newer version. I will try this.
Malware wouldn’t even run.
Leave a Comment