How to Manually Remove Antivirus 2009

Antivirus 2009 is a nasty piece of malware (malicious software). Once downloaded onto your computer it attempts to force you into purchasing Antivirus 2009 by creating fake alerts, annoying popups and hijacking your internet browser. The most important first step is not to fall for this nasty little trick. The next step is to get rid of it. Here are the steps to removing Antivirus 2009 manually from your computer:

Things You'll Need

• Computer

Instructions

1. Press ALT+CTRL+DEL and click on task manager. Click on the processes tab. Find the following processes in the list and systematically click on them and end process to stop them from running: av2009.exe, av2009[1].exe, AV2009Install.exe, Antivirus2009.exe.

2. Next you will need to unregister the following malicious dll (dynamically linked library) files:
   shlwapi.dll
   wininet.dll
   Follow these steps to unregister these files. Click on start and then on run. In the open field type in cmd and press the ok button. Next navigate to the exact dll location. After the Command Prompt window opens, change the directory to the exact DLL location path. Use the cd command (it is used to change the current directory), put space and enter the full path to the DLL. Press enter. This will change the current directory to the one you have entered. To display the directory contents use the dir command. Once you are within the exact directory type this command: regsvr32 /u [dll_name] and press enter. This will unregister the dll file. You should see a message that tells you the file was successfully unregistered. Do this for both shlwapi.dll and wininet.dll.

3. You will now need to delete the following registry values. In order to do this click on start, then run and then type in regedit and enter. Find the following values in the list and delete them by right clicking on each of them and then selecting delete: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\15358943642955870504508370025739
   HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus
   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Antivirus" = "%ProgramFiles%\Antivirus 2009\Antvrs.exe"
   HKEY_CURRENT_USER\Software\Antivirus

4. The next step involves deleting the infected files from your computer. The easiest way to find them is to use windows search to find where they are located on your pc. Right click on start and click on search. Type in the name of each of the files listed below. Once you locate the file, right click on the file and select delete.
   av2009.exe
   av2009install.exe
   av2009install_0011.exe
   av2009[1].exe
   Antivirus2009.exe
   ieupdates.exe
   scui.cpl
   %program_files%\antivirus 2009\av2009.exe
   %startmenu%\antivirus 2009\antivirus 2009.lnk
   %startmenu%\antivirus 2009\uninstall antivirus 2009.lnk
   %desktopdirectory%\antivirus 2009.lnk
   winsrc.dll
   av2009install_0011.exe
   av2009install.exe

5. Lastly, reboot your computer.