remove MS Antivirus 2009 manually Or Automatically: Learn Latest Computer And Mobile Hacking Tricks

Unregister the dll files

The dll files responsible fro Antivirus 2009 are shlwapi.dll and wininet.dll

To unregister these files do the following:

In Windows XP:

Click on Start > Run and type cmd. Click on Ok

In windows Vista:

Click on Start and type cmd in the search box.

From the result, right click on cmd and select run as administrator.

In command prompt type:

regsvr32 /u shlwapi.dll and hit enter and regsvr32 /u wininet.dll hit enter

It will unregister the dll files.

Stop the Antivirus 2009 processes

The processes that might be created after the PC is infected with Antivirus 2009 are

av2009install.exe

av2009install_0011.exe

av2009[1].exe

av2009install.exe

ieupdates.exe

ieupdates.exe

av2009.exe

av2009install_0011.exe

XPAntivirus2009.exe

In order to stop these processes, press Alt+Ctrl+del key together and click on task manager.

Click on processes tab and look for the above processes.

Right click on the process name and select End process.

Delete the files created by it

Generally Antivirus 2009 installs itself inside the program files folder. So look for a folder called AntiVirus 2009 or anything related to this name (or the list at the beginning of the post) and completely delete that.

Also, do a search by going to Start > Search

Click on All files and folders from left and put the file name as the following and search for each of the files and delete them.

Generally the related files are:

c:\Program Files\XP Antivirus
c:\Program Files\XP Antivirus\xpa.exe
C:\Program Files\XPAntivirus\
C:\Program Files\XPAntivirus\XPAntivirus.exe
c:\WINDOWS\system32\scui.cpl
%UserProfile%\Desktop\XP Antivirus 2008.lnk
%UserProfile%\Start Menu\XP Antivirus 2008
%UserProfile%\Start Menu\XP Antivirus 2008\Uninstall XP Antivirus 2008.lnk
%UserProfile%\Start Menu\XP Antivirus 2008\XP Antivirus 2008.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Antivirus 2008.lnk
C:\WINDOWS\krln32.exe
C:\WINDOWS\system32\scvh0st.exe
C:\Program Files\Common Files\trjdwnl.dll
C:\WINDOWS\shlext32.exe

Removing the registry keys

Click on Start and Run type Regedit and click on Ok.

Click on Start and type Regedit in the search box and hit enter. (In Vista)

In registry editor navigate to the following keys:

HKEY_CURRENT_USER\Software\Antivirus and delete this whole folder
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus and delete this whole folder.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Locate ”Antivirus” = “%ProgramFiles%\Antivirus 2009\Antvrs.exe” and delete it.

Automatic removal instructions

There are a number of genuine AntiSpyware and AntiVirus software those are really fruitful in removing spyware infection like AntiVirus 2009. You can use any of the following AntiSpyware program for helping in removing AntiVirus 2009 as well as other malwares:

Super Antispyware

Smitfraudfix

Malware Byte’s Antimalware