How to Get Rid of the Antivirus 2009 Infection.

September 8th, 2008 by Ben Moreno

('’)

If you haven’t noticed yet there has been this new virus that has been showing up recently on pc’s throughout the world.  It is the latest evil in the unstoppable world of trojans, viruses, spyware, malware, rootkits, phishing, etc. that infect the world daily.

It will send you pop-ups that will tell you that there are viruses on your computer and you should purchase Antivirus 2009 or 2008 to get rid of the infections.  It is a very intelligent trojan that will give you fake Windows Security Windows, fake program ads to buy a program, fake virus scan windows, etc. 

It seems obvious that the idea of the virus is to get you to fill out a form with your credit card infomation.  Once you do it sends the information to someone else for identity theft.

I work in the IT department and troubleshoot pc’s daily and found 3 pc’s already with this virus.

This infection is tricky.  It uses multiple fake windows system files and registry entries to operate.  It can disable some services on your system as well.  It took some time and research but I found a great set of manual instructions that truly will get rid of the virus if done correctly.

Basically you need to get rid of the following 3 registry entries and files.

ieupdates.exe
scui.cpl
winsrc.dll

You must remove the registry entires, then folders and files.  You should also remove any shortcuts in your start menu or desktop that point to the the antivirus 2009 executable.  Remove the antivirus 2009 folder from your programs folder as well.

I found the correct steps from Miguel Campos blog.  I tried them on one users computer weeks ago and the virus has not returned.  Follow the exact steps on his blog and it will

Subscribe to get free updates.

Enter your email address:

Don’t forget to check your spam filter and verify your subscription.

Tags: antivirus 2009, infection, malware, removal, spyware, trojan, virus, worm

This entry was posted on Monday, September 8th, 2008 at 3:30 pm and is filed under Technology. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.