Antivirus2009 (Antivirus 2009) Removal Instructions

ishita
#1. July 11th, 2008, at 3:39 AM.

gr8 protector of pc
Nice posts.
Thanx

ts
#2. July 13th, 2008, at 3:50 PM.

Thank you so much for your help! I just wanted to pass along this information as well. I had issues when I was trying to remove the “winsrc.dll”. It wouldn’t allow me to, so I did some research and found this information:::

Information about the W32/Delf.INE Trojan:

W32/Delf.INE is a trojan. The trojan will infect Windows systems.

The trojan may be dropped by other malware or may be downloaded from remote website by other malware. It may also be downloaded unknowingly by a user while visiting malicious Website.

Upon execution, the trojan drops the following files and terminates itself.

ieupdates.exe in the Windows System folder,
winsrc.dll in the Windows System folder,
winsrc[1].dll in the Temporary Internet Files folder.

The trojan modifies registry at the following locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{037C7B8A-151A-49E6-BAED-CC05FCB50328}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{037C7B8A-151A-49E6-BAED-CC05FCB50328}\InprocServer32\ThreadingModel
HKEY_USERS\S-1-5-21-(SID)\Software\Microsoft\Windows\CurrentVersion\Run

It also tries to connect to http: // fastupdateservice .com/upload/.

This trojan first appeared on July 02, 2008.

Blueball Other names of W32/Delf.INE Trojan:

This trojan is also known as Win-Trojan/Xema.variant, Backdoor.Win32.Delf.ine, Win32/VMalum.DDEL, TrojanDownloader:Win32/Yektel.A, Backdoor.Delf.BERQ.

Maling
#3. July 14th, 2008, at 4:17 AM.

Nice Help!
BUT: If you delete shlwapi.dll, maybe the System won’t be able to start!

[Works with winlogon.exe]

Mary
#4. August 5th, 2008, at 6:17 PM.

How do you know when the **** antivirus 2009 nuisance program has been uninstalled and is no longer worming around in the system?

I’m no expert, so am paranoid that I missed doing everything I should to get rid of it.

Ian
#5. August 6th, 2008, at 11:05 AM.

can you stop messing with my computer by stopping me from running by blocking all i do with your nuisance software.

you have been warned

i will ensure that that i’ll mess up your business if you don’t stop accessing my computer illegally

Robin
#6. August 6th, 2008, at 1:03 PM.

Can I just use the “Download SpyHunter Spyware Detection Utility to remove the latest Trojan and Malware” download that is at the bottom of the instructions??? Will that work? I’m afraid of messing things up by doing it myself.

Taiwai
#7. August 9th, 2008, at 3:28 AM.

Can I delete all ’shlwapi.dll’ and ‘wininet.dll’ when I search them by runnig regedit?

Ed
#8. August 11th, 2008, at 1:58 PM.

Instead of doing all this,I just done a system restore and set the date a few days back before I had problems. No more problems at the mo!

Lorraine Connelly
#9. August 14th, 2008, at 11:06 AM.

My friend has just been infected by Antivirus 2009. He is running win2000 and is quite new to computers. On looking at his computer, I can find no way to sort this out, the C drive has ‘disappeared’ from My Computer. Task Manager is greyed out I cant get to it. From Settings there is only start menu, no way of getting to control panel. On googling the problem, no one seems to be so totally locked out as he is. Can anyone help please? On the bottom right of the Task Bar all that is there is the current time and VIRUS ALERT! He is running with AVG. Don’t know if thats relevant. Last resort would be a clean load, I reaaly don’t wanna do that!

Scott
#10. August 14th, 2008, at 4:22 PM.

This crap has taken over my computer. How can we sue or bring class action against this company AV2009.

Shoppach
#11. August 16th, 2008, at 2:05 AM.

Toll mine over around midnight on the 14 of august. What a pain. slmost fell for it and purchased the so called spy ware. is is protection from itself? That and inigma unto itsself.

Lakeside Design
#12. August 16th, 2008, at 2:16 PM.

Today AGV2008 was able to move to vault and delete. This is a good one, My Google web page TIPS box was even recommending I active it. I had to save a screen shot of that one
windows\system32\winsrc.dll
system volume information\_restore(38D3D385-AB49-432F….)\RP365\AO139675.exe
RECYCLER\……
So do forget to empty the trash can too.

JohnDoe
#13. August 17th, 2008, at 10:08 AM.

we’re supposed to delete all shlwapi.dll and
wininet.dll files?

Catrina
#14. August 20th, 2008, at 4:21 PM.

Deleted shlwapi.dll as directed and now the computer WILL NOT boot up, not even in safe mode. CRAPPPPPPP !

Anthony
#15. August 22nd, 2008, at 3:49 PM.

To: whom it may concern;

How can I stop win32/adware.vitumonde and win32/privacyremote.m64 associated with antivirus xp 2008 this is all a skim to take private citizens of their monies, I am very upset at the entire system. people paid for Norton sytem and it does not work at all.

oladapo bola
#16. August 30th, 2008, at 5:15 AM.

what can be dont to detect this like of spyware b4 it come intot the internet.i,m ifected with this AV2009.It slowed down all action my net,really bad it created fictious believe that without buying the software u re ruined.i ll take time to read all ur removal processes to be able to removal this nagging av2009999999999999999999999999

j2
#17. August 30th, 2008, at 5:22 PM.

The above instructions to delete shlwapi and wininet are wrong. If you try to do this, you should get an “access denied” message.

If you have some computer experience and boot in Safe mode to delete them, you won’t be able to start Windows.

Ilya
#18. August 30th, 2008, at 11:00 PM.

I just used Malwarebytes and it found 15 infected files with various Trojan’s. I used this software to remove all files and it said there were a couple it could not remove but the problem seems to be fixed. I’m not getting any more pop-ups and I’m not getting directed to the Antivirus 2009 site anymore. Anyone that seems to be infected by these f’ers sould download Malwarebytes. You can go to Download.com and get the software for free.

dj
#19. September 3rd, 2008, at 5:51 PM.

here is how you remove antivirus2009
if you didn’t take the bait. if you did i don’t know if this will work
ok first you need a program called ” eraser ” its freeware so download it. if i remembered a link i trusted would display
next stop the process in the task mgr (ctrl+alt+del) it should be labled as av……… something don’t remember exactly
go to the start menu
go to run
type in regedit
when it opens search for antivirus2009
delete all of the values
next make sure the process of antivirus2009 is still stop
then proceed to the start menu
open my computer
open local disk drive c:
open program files
then use eraser to remove
good luck

honey
#20. September 16th, 2008, at 2:24 AM.

i want to remove file block of antivirus 2009 from my pc…please help me…..thank you

john
#21. September 16th, 2008, at 10:02 AM.

after i searh i find shlwapi.dll and when i try to delete it says “make sure the disk is not full or write-protected and that the file is not currently in use” how can i solve that problem?

MJS
#22. September 16th, 2008, at 3:47 PM.

I think the instuctions on this web page are bogis. Don’t use them. deleting the files shlwapi.dll wininet.dll will mess up your computer even more. If you look on an uninfected computer these files are
already present and are needed to run the windows program. I think this web site is run by the very people who are creating the virus program. The infected files I believe are some where in system 32.
look for something that is not a micosoft file. It shouldn’t be there otherwise.

kum
#23. September 19th, 2008, at 9:45 PM.

I used Malwarebytes I’m not getting any more pop-ups and I’m not getting directed to the Antivirus 2009 site anymore. Anyone that seems to be infected by these f’ers sould download Malwarebytes. You can go to Download.com and get the software for free.

Caleb
#24. October 1st, 2008, at 11:06 PM.

Pay attention folks… The instructions at the top never tell you to delete shlwapi.dll or wininet.dll…… If you truly understand nothing on this page, take your computer to a professional or at least someone who knows geek-speak… Please… I’m just trying to keep you looking like a complete ID10T…

yman
#25. October 7th, 2008, at 7:22 AM.

I prefer(rosoftdownload.com/download/Windows/Kaspersky-Anti-Virus-2009) Kaspersky Anti-Virus 2009 because the program can be installed on infected computers, self-protection from being disabled or stopped, restores correct system settings after removing malicious software or it have tools for creating a rescue disk.