B M A N M E D I A

Antivirus 2009 is a clone of Antivirus 2008–see my article on it. What is unique about Antivirus 2008 is that it spread so quickly so fast to very many people.

Anti virus 2009 uses torjons to spread. How? Well, the creators of the trojons used to spread Antivirus 2009 disguise themselves as video codecs. Most people are fooled to believing that by downloading the codecs they will be able to view a movie clip or play a particular audio file only to find out minutes later that their computer has been infected with an anti-spayare/ the rouge “antivirus 2009.

Symptoms that your PC is infected with anti virus 2009:

Pop ups and system alerts that your PC has been infected with Antivirus 2009.

Malwarebytes Anti Malware – Download
Spyware Doctor – Download
SUPERAntiSpyware  – Download
Windows Defender  – Download

Associated Antivirus 2009 Files:

Note: Some of these entries are random named.
c:\WINDOWS\system32\ieupdates.exe
c:\WINDOWS\system32\scui.cpl
c:\WINDOWS\system32\winsrc.dll
%UserProfile%\Desktop\Antivirus 2009.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2009.lnk
%UserProfile%\Local Settings\Temporary Internet Files\Content.IE5\S96PZM7V\winsrc[1].dll
%UserProfile%\Start Menu\Antivirus 2009
%UserProfile%\Start Menu\Antivirus 2009\Antivirus 2009.lnk
%UserProfile%\Start Menu\Antivirus 2009\Uninstall Antivirus 2009.lnk
c:\Program Files\Antivirus 2009
c:\Program Files\Antivirus 2009\av2009.exe

Associated Antivirus 2009 Windows Registry Information:

Note: Some of these entries are random named.
HKEY_CLASSES_ROOT\CLSID\{037C7B8A-151A-49E6-BAED-CC05FCB50328}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{037C7B8A-151A-49E6-BAED-CC05FCB50328}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “75319611769193918898704537500611″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ieupdate”
HKEY_CURRENT_USER\Software\75319611769193918898704537500611