Remove Fast Antivirus 2009 - FastAntivirus 2009 Removal Instructions
Fast Antivirus 2009 is new rogue antispyware application from the same family as Virusdoctor, VirusMelt, VirusAlarm, MalwareCatcher, VirusShield, Extra Antivirus, Virus Sweeper, Ultra Antivir 2009. As its predcestors Fast Antivirus uses Google Code page: hxxp://favprj1.googlecode.com. Fast Antivirus is advertised through the use of misleading online antimalware scanners that detects nonexistent infections on your computer. Also Fast Antivirus is promoted with a help of Trojan horses that will display fake security alert on your PC. Once inside and active Fast Antivirus will perform full system scan and list you variety of infections that cannot be remove until you buy full version. Also Fast Antivirus will generate fake security alerts and pop-ups informing that your computer is seriously infected. In that way parasite can dramatically slow your computer performance. We strongly recommend you to remove Fast Antivirus manually or using automatic removal tool.
Type: Rogue Anti-Spyware
Malware Author: Unknown
Threat Level: Critical
Screenshot:
How to remove Fast Antivirus manually:
It's possible to remove Fast Antivirus manually, but you have to be very experienced in dealing with registry entries, program files and .dll files.
The files to be deleted:
c:\Documents and Settings\All Users\Application Data\9adee5b
c:\Documents and Settings\All Users\Application Data\9adee5b\17.mof
c:\Documents and Settings\All Users\Application Data\9adee5b\FastAV.exe
c:\Documents and Settings\All Users\Application Data\9adee5b\mozcrt19.dll
c:\Documents and Settings\All Users\Application Data\9adee5b\sqlite3.dll
c:\Documents and Settings\All Users\Application Data\9adee5b\SysFld
c:\Documents and Settings\All Users\Application Data\9adee5b\SysFld\vd952342.bd
c:\Documents and Settings\All Users\Application Data\SysFld
c:\Documents and Settings\All Users\Application Data\SysFld\fastav.cfg
%UserProfile%\Application Data\Fast Antivirus 2009
%UserProfile%\Application Data\Fast Antivirus 2009\cookies.sqlite
%UserProfile%\Application Data\Fast Antivirus 2009\Instructions.ini
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Fast Antivirus 2009.lnk
%UserProfile%\Desktop\Fast Antivirus 2009.lnk
%UserProfile%\Recent\ANTIGEN.sys
%UserProfile%\Recent\cid.dll
%UserProfile%\Recent\CLSV.dll
%UserProfile%\Recent\CLSV.tmp
%UserProfile%\Recent\ddv.dll
%UserProfile%\Recent\dudl.dll
%UserProfile%\Recent\eb.drv
%UserProfile%\Recent\eb.tmp
%UserProfile%\Recent\energy.sys
%UserProfile%\Recent\fix.drv
%UserProfile%\Recent\gid.exe
%UserProfile%\Recent\hijackthis.log.lnk
%UserProfile%\Recent\PE.drv
%UserProfile%\Recent\PE.sys
%UserProfile%\Recent\PE.tmp
%UserProfile%\Recent\SICKBOY.dll
%UserProfile%\Recent\tempdoc.sys
%UserProfile%\Start Menu\Fast Antivirus 2009.lnk
%UserProfile%\Start Menu\Programs\Fast Antivirus 2009.lnk
Remove registry entries:
HKEY_CLASSES_ROOT\FastAV.DocHostUIHandler
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "898701124903"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Fast Antivirus 2009"
Please be careful because manual removal of Fast Antivirus may seriously damage operational system and sensitive data. Also there is a big possibility of incomplete removal, because some files could be hidden and program could re-install itself after you delete files and registry entries. So we strongly recommend you to use automatical removal tool.
Written by admin. Read more great feeds at is source WEBSITE
1 comment.
Read more articles on rogue antispyware and AntiSpyware and trojan horse and fake warnings and removal tool and 2009 and spyware and antivirus and Privacy and malware and trojan and otherSoftware and Security.
- [+] Digg: Feature this article
- [+] Del.icio.us: Bookmark this article
- [+] Furl: Bookmark this article
#1. August 18th, 2009, at 10:05 PM.
A computer at my office became infected with Fast Antivirus 2009 last week. It deleted the .exe file for McAfee, Malewarebytes, and Combofix. The .exe file was called EX4677.exe-0 17A09AB.pf located in both Prefetch and Users\AppData\Microsoft. With difficulty I was able to download a fresh copy of MBAM. There were about 611 files and registry associated infections. Over 500 were designated as Security.Hijack. Deleted the registry entries and fixed all. Rebooted. Downloaded HijackThis. 2 BHO’s were removed as well as 20 or so google hijacks. I now have 2 clean HJT and MBAM’s so I feel pretty good although I’m still concerned about a rootkit. What I’m saying is all that stuff above is out the window. Run Malewarebytes and get some help with HiJackThis if you’ve never used it. I would call this a major threat.