How to Remove Antivirus 2009 Virus

Antivirus 2009 is known to be fake anti-spyware software that is mistakenly installed by visiting a misleading site that tries to convince you that your computer is infected. Upon installation, Antivirus 2009 claims to scan your PC, resulting in a list of fake infections that can only be removed from your computer once you purchase the software. Moreover, once Antivirus 2009 is on your system, it can hijack your browser by installing a browser helper object that displays fake messages via Internet Explorer.

Fake Antivirus 2009

Fake Antivirus 2009 Messages vary from a fake Google Tips area displayed when visiting the Google homepage saying that "Google recommends you activate Antivirus 2009", to a simple line of text toward the top of your browser telling you that an infection was found.

Fake Google Tips on Google Homepage

How to Remove Antivirus 2009 (Automatically):

Download and install Malwarebytes Anti-Malware software
Launch the software performing a simple scan to detect and then remove the fake Antivirus 2009

Removing Antivirus 2009 (Manually):

Press Ctrl + Alt + Del then find and End the following processes:
- av2009.exe
- AV2009Install.exe
- Antivirus2009.exe
Delete the following files from your PC:
- %UserProfile%\Desktop\Antivirus 2009.lnk
- %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2009.lnk
- %UserProfile%\Local Settings\Temporary Internet Files\Content.IE5\S96PZM7V\winsrc[1].dll
- %UserProfile%\Start Menu\Antivirus 2009
- %UserProfile%\Start Menu\Antivirus 2009\Antivirus 2009.lnk
- %UserProfile%\Start Menu\Antivirus 2009\Uninstall Antivirus 2009.lnk
- c:\Program Files\Antivirus 2009
- c:\Program Files\Antivirus 2009\av2009.exe
- c:\WINDOWS\system32\ieupdates.exe
- c:\WINDOWS\system32\scui.cpl
- c:\WINDOWS\system32\winsrc.dll
Click Start > Run, type regedit, Find and delete the following registry entries:
- HKEY_CURRENT_USER\Software\
  75319611769193918898704537500611
- HKEY_CLASSES_ROOT\CLSID\
  {037C7B8A-151A-49E6-BAED-CC05FCB50328}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
  CurrentVersion\Explorer\Browser Helper Objects\
  {037C7B8A-151A-49E6-BAED-CC05FCB50328}
- HKEY_CURRENT_USER\Software\Microsoft\Windows\
  CurrentVersion\Run "75319611769193918898704537500611"
- HKEY_CURRENT_USER\Software\Microsoft\Windows\
  CurrentVersion\Run "ieupdate"