How to Remove MS Antispyware 2009

What is MS antispyware?

MS Antispyware 2009 is a rogue security software, it is a false anti-spyware application that is generally installed in the user’s computer by dangerous trojans (such as the Zlob Trojan Virus and false video codecs)(what is the zlob trojan?), but it can also be installed manually by the victim.

Once your computer is infected with this parasite, it will immediately displays security warnings, alerts and system scans stating that your computer is heavily infected. These warnings are all false and are only displayed to make you think your computer is truly infected and that it is necessary to buy the full version of the software to remove the so-called infections.

Make sure to not fall in this scam, if your computer is infected with MS Antispyware 2009, it is recommended to remove it immediately and to scan your system with a real security software.

Symptoms of infection

• The process XP_AntiSpyware.exe is running in your system
• Slow computer performance
• Repeated security warnings, alerts and system scans
• Web sites that suddenly are shown on your desktop

When the program is executed, it creates the following files:

%ProgramFiles%XP_AntiSpyware
%ProgramFiles%XP_AntiSpyware\AVEngn.dll
%ProgramFiles%XP_AntiSpyware\comp.dat
%ProgramFiles%XP_AntiSpyware\htmlayout.dll
%ProgramFiles%XP_AntiSpyware\pthreadVC2.dll
%ProgramFiles%XP_AntiSpyware\Uninstall.exe
%ProgramFiles%XP_AntiSpyware\wscui.cpl
%ProgramFiles%XP_AntiSpyware\XP_Antispyware.cfg
%ProgramFiles%XP_AntiSpyware\XP_AntiSpyware.exe
%ProgramFiles%XP_AntiSpyware\data
%ProgramFiles%XP_AntiSpyware\data\daily.cvd
%ProgramFiles%XP_AntiSpyware\Microsoft.VC80.CRT
%ProgramFiles%XP_AntiSpyware\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
%ProgramFiles%XP_AntiSpyware\Microsoft.VC80.CRT\msvcm80.dll
%ProgramFiles%XP_AntiSpyware\Microsoft.VC80.CRT\msvcp80.dll

The program creates the following registry entries:

HKLM\SOFTWARE\XP_Antispyware
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\XP Antispyware 2009

How to remove MS Antispyware 2009 (manual removal) ?

• Kill the running process XP_AntiSpyware.exe
• Unregister all the MS Antispyware 2009 DLLs
• Delete all the MS Antispyware 2009 files
• Delete all the MS Antispyware 2009 registry entries

How to remove MS Antispyware 2009 (automatic removal) ?

• Download and Install NoVirusThanks Malware Remover
• Update the database
• Click the button Scan
• Delete infected files

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP_AntiSpyware

%ProgramFiles%XP_AntiSpyware\Microsoft.VC80.CRT\msvcr80.dll

Visit my website to learn how to remove other trojan viruses such as Xp Police Antivirus

How to remove Antivirus System 2009

Antivirus System 2009 is a rogue security software, it is a false anti-spyware application that is generally installed in the user’s computer by dangerous trojans (such as the Zlob Trojan Virus and false video codecs)(What is Zlob?), but it can also be installed manually by the victim.

Once the your computer is infected with this parasite, it will immediately displays security warnings, alerts and system scans stating that your computer is heavily infected. These warnings are all false and are only displayed to make you think your computer is truly infected and that it is necessary to buy the full version of the software to remove the so-called infections.

Make sure to not fall in this scam, if your computer is infected with Antivirus System 2009, it is recommended to remove it immediately and to scan your system with a real security software.

Symptoms of infection

• The process antivirsystempro.exe is running in your system
• The process AntivirusSystem2009.exe is running in your system
• Slow computer performance
• Repeated security warnings, alerts and system scans
• Web sites that suddenly are shown on your desktop

Malicious web sites and urls:

antivirsystem.com

When the program is executed, it creates the following files:

%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusSystem 2009.lnk
%UserProfile%\Application Data\AntivirusSystem 2009\settings.ini
%UserProfile%\Application Data\AntivirusSystem 2009\uill.ini
%UserProfile%\Start Menu\Programs\AntivirusSystem 2009.lnk
%UserProfile%\Start Menu\AntivirusSystem 2009.lnk
%UserProfile%\Desktop\AntivirusSystem 2009.lnk
%UserProfile%\Desktop\AntivirusSystem2009.exe
%ProgramFiles%\Antivir System PRO\queue.vdb
%ProgramFiles%\Antivir System PRO\antivirsystempro.exe
%ProgramFiles%\Antivir System PRO\uninstall.exe
%ProgramFiles%\Antivir System PRO\conf.cfg
%ProgramFiles%\Antivir System PRO\mbase.vdb
%ProgramFiles%\Antivir System PRO\quarantine.vdb

The program creates the following registry entries:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivir System PRO
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntivirusSystem 2009
HKLM\SOFTWARE\Antivir System PRO
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ieModule
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Antivir System PRO

How to remove Antivirus System 2009 (manual removal) ?

• Terminate all the Antivirus System 2009 processes
• Unregister all the Antivirus System 2009 DLLs
• Delete all the Antivirus System 2009 files
• Delete all the Antivirus System 2009 registry entries

How to remove Antivirus System 2009 (automatic removal) ?

• Download and Install Malware Remover
• Update the database
• Click the button Scan
• Delete infected files

Visit my website to learn how to remove other Trojan's and Viruses such as XP Police AntiVirus

What is the Zlob Trojan?

What is the zlob Trojan?
Zlob, commonly refered to as the zlob trojan, attacks your computer systems Active X. Zlob trojan is nothing but a trojan horse which masquerades as a needed video codec in the form of Active X. Once this zlob trojan gets installed, it shows some adds of pop ups. These adds will look exactly like the warning popups of the windows operating system. They will inform you that your system has been infected with spyware, and prompt you to download some anti-spyware. Weather you exit it or click it, the popup window will try to automatically download some pirated program s of anti-spyware such as Ms Antivirus, Virus heat exc. The zlob trojan will be well hidden in this stuff that is automatically downloaded.

The Discovery of the Zlob Trojan
The Zlob trojan was discovered for the first time on the
23rd of April in 2005. It was not well known until June of 2006 because that is when it was first updated.

A firm of computer security called "F secure" have discovered about 32 different types of Zlob Trojan. Some of these types are: rogue DNS, DNS changer etc. This
process is still going on for the discovery of more of them. They attempt to hack the routers to change the settings of DNS. (This is usually easy because most people don't change the default passwords on there routers) Hence it results in potential rerouting of some illegal websites. These viruses also have links in downloading the instalments of anti virus exe.

The trojan has also been linked to downloading atnvrsinstall.exe which uses the Windows Security shield icon to look as if it is an Anti Virus installation file from Microsoft. Having this file initiated can wreak havoc on computers and networks. One symptom is random computer shutdowns or reboots with random comments. This is caused by the program s using Scheduled Tasks to run a file called "zlberfker.exe".

What are the Symptoms of Zlob?
As is the case with many other spyware infections, the symptoms can vary and not every Zlob trojan infection will show the same set of symptoms. That being said, here is a list of some of the more common things you will see: an alert informing you of a critical infection, poor scan reporting, false positives in your scanning, deceptive advertising within applications, extremely slow computer performance, the settings of your computer changed, your computer automatically shutting down and restarting, and changes to your desktop (such as the background or icons moved). Click here to learn how to remove the Zlob Trojan Virus

How to remove XP Police Antivirus

XP Police Antivirus is a rogue security software, it is a false anti-spyware application that is generally installed in the user’s computer by dangerous trojans (such as the Zlob Trojan Virus and false video codecs)(What is Zlob?), but it can also be installed manually by the victim.



Once your computer is infected with this parasite, it will immediately displays security warnings, alerts and system scans stating that your computer is heavily infected. These warnings are all false and are only displayed to make you think your computer is truly infected and that it is necessary to buy the full version of the software to remove the so-called infections.



Make sure to not fall in this scam, if your computer is infected with XP Police Antivirus, it is recommended to remove it immediately and to scan your system with a real security software.



Symptoms of infection



* The process xppolice.exe is running in your system
* Slow computer performance
* Repeated security warnings, alerts and system scans
* Web sites that suddenly are shown on your desktop



Malicious web sites and urls:
xp-police-antivirus.com

When the program is executed, it creates the following files:
C:\Program Files\XPPoliceAntivirus\
C:\Program Files\XPPoliceAntivirus\AVCoreFn.dll
C:\Program Files\XPPoliceAntivirus\Core.dll
C:\Program Files\XPPoliceAntivirus\bdconf.cfg
C:\Program Files\XPPoliceAntivirus\xppolice.exe
C:\Program Files\XPPoliceAntivirus\sounds\
C:\Program Files\XPPoliceAntivirus\plugins\

How to remove XP Police Antivirus (manual removal) ?



* Kill the running process xppolice.exe
* Unregister all the XP Police Antivirus DLLs
* Delete all the XP Police Antivirus files
* Delete all the XP Police Antivirus registry entries



How to remove XP Police Antivirus (automatic removal) ?

* Download and Install NoVirusThanks Malware Remover
* Update the database
* Click the button Scan
* Delete infected files

Learn how to remove other Trojan Viruses such as Zlob