How to Remove Antivirus Pro 2009

Posted by Danny G Sam November 28, 2008

Threat Level: Low
Threat Type: Rouge Program

Antivirus Pro 2009 is a menace and has been infecting computers worldwide. Antivirus Pro is a fake anti-spyware program similar to AntiSpywareXP 2009 mostly affecting Windows XP systems. This fake anti-spyware automatically gets installed on your computer by displaying fake security alerts and fake warning messages.

What does Antivirus Pro 2009 do when installed?

When this fake anti-spyware gets installed, it will automatically configure once you restart or log into your system. While configuring, it would also automatically create a number of fake malwares and spyware files. These files though they are not harmless, are used to depict that your system has a huge number of malwares and spywares and it has been detected by Antivirus Pro 2009. It would then lead you to purchase it in order to remove these malwares.


With its red letters and warnings, one would definitely get scared and may eventually purchase the full version to remove them.

Finally Antivirus Pro 2009 Conquers Your Computer

You slowly discover that Antivirus XP Pro 2009 has even taken over your Internet Explorer. Visit a website and it would display a screen, “Insecure Internet Activity, Threat of a Virus Attack” Your browser is hijacked!!

You would be asked to get protection (well that means, buy the software) or continue to the website. Choose either option, you would be doomed as you are lead to a page asking you to purchase the program.

How to Remove Antivirus Pro 2009

  1. Stop the program files using Ctrl + Alt + Del [Task Manager]: The very first thing you do is, try to stop the program in the Task Manager > Processes Tab. [Do not try this option if you are not familiar]
  2. Try to uninstall the program using the Control Panel > Add Remove Programs option
  3. Now open registry, (Run, Cmd, regedit) and remove all the following entries of this program. [Again, only experienced familiar users are recommended to do this. The Registry has very important files and any wrong deletion may even collapse your entire operating system.]

    HKEY_LOCAL_MACHINE\SOFTWARE\AntivirusPro2009
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntivirusPro2009
    HKEY_CURRENT_USER\Control Panel\don't load "scui.cpl"
    HKEY_CURRENT_USER\Control Panel\don't load "wscui.cpl"
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
    Run "Antivirus Pro 2009"

  4. Manual Deletion:
    If the above steps are successful or unsuccessful, still you would have a large number of Antivirus Pro 2009 files unremoved. Check for the following files and delete them manually.

    c:\Program Files\AntivirusPro2009
    c:\Program Files\AntivirusPro2009\AntivirusPro2009.cfg
    c:\Program Files\AntivirusPro2009\AntivirusPro2009.exe
    c:\Program Files\AntivirusPro2009\AVEngn.dll
    c:\Program Files\AntivirusPro2009\htmlayout.dll
    c:\Program Files\AntivirusPro2009\pthreadVC2.dll
    c:\Program Files\AntivirusPro2009\Uninstall.exe
    c:\Program Files\AntivirusPro2009\wscui.cpl
    c:\Program Files\AntivirusPro2009\data
    c:\Program Files\AntivirusPro2009\data\daily.cvd
    c:\Program Files\AntivirusPro2009\Microsoft.VC80.CRT
    c:\Program Files\AntivirusPro2009\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
    c:\Program Files\AntivirusPro2009\Microsoft.VC80.CRT\msvcm80.dll
    c:\Program Files\AntivirusPro2009\Microsoft.VC80.CRT\msvcp80.dll
    c:\Program Files\AntivirusPro2009\Microsoft.VC80.CRT\msvcr80.dll
    c:\Documents and Settings\Bleeping\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusPro2009.lnk
    c:\Documents and Settings\Bleeping\Desktop\AntivirusPro2009.lnk
    c:\Documents and Settings\Bleeping\Start Menu\Programs\AntivirusPro2009
    c:\Documents and Settings\Bleeping\Start Menu\Programs\AntivirusPro2009\AntivirusPro2009.lnk
    c:\Documents and Settings\Bleeping\Start Menu\Programs\AntivirusPro2009\Uninstall.lnk
    c:\WINDOWS\dyxad.bat
    c:\WINDOWS\gutysolyk.dll
    c:\WINDOWS\oheva._dl
    c:\WINDOWS\uhuleko.bat
    c:\WINDOWS\ulysi.bin
    c:\WINDOWS\votadiboz.sys
    c:\WINDOWS\xocorepen.lib
    c:\WINDOWS\system32\_scui.cpl
    c:\WINDOWS\system32\mehydohahe.scr
    c:\WINDOWS\system32\owah.bat
    c:\WINDOWS\system32\uquhoti.reg
    c:\WINDOWS\system32\zuxeme._dl
    c:\Program Files\Common Files\buryleto.dll
    c:\Documents and Settings\All Users\Application Data\cyqi.sys
    c:\Documents and Settings\All Users\Application Data\gemegiqyno.ban
    c:\Documents and Settings\All Users\Application Data\pisijupag.dll
    c:\Documents and Settings\All Users\Application Data\pymom.lib
    c:\Documents and Settings\All Users\Application Data\wivodexy.reg
    c:\Documents and Settings\All Users\Application Data\yzotuxeka.vbs
    c:\Documents and Settings\Bleeping\Application Data\ydutufuj.inf
    c:\Documents and Settings\Bleeping\Local Settings\Application Data\coziguduca._sy
    c:\Documents and Settings\Bleeping\Local Settings\Application Data\fapeka._dl
    c:\Documents and Settings\Bleeping\Local Settings\Application Data\gukusozy.sys
    c:\Documents and Settings\Bleeping\Local Settings\Application Data\iluqopohaz.ban

  5. The above steps should remove Antivirus Pro 2009. If it still resides, I would recommend you contacting your system vendor.


Tags: