Dezinstalare Antivirus PC 2009 – Ghid pentru Devirusare Completa

Antivirus PC 2009 este un program anti-spyware de tip rogue. Este promovat prin intermediul unor Troieni care pretind sa fie codec-uri video sau actualizari flash absolut necesare pentru a urmari continutul online.
Programul va afisa numeroase alerte false si va efectua scanari ale PC-ului detectand in mod eronat sute de infectii.

Toate acestea au scopul de a induce in eroare utilizatorul, cu scopul de a achizitiona acest program. Fisierele detectate sunt fie inexistente, fie curate, iar alertele nu trebuie luate in considerare.

Pentru a scapa de acest nepoftit cititi detaliile de mai jos
Programul creeaza urmatoarele fisiere\foldere:

•%UserProfile%\xvgke.exe
•%UserProfile%\Desktop\Antivirus PC 2009.lnk
•%UserProfile%\My Documents\eopqi.exe
•%UserProfile%\Start Menu\Programs\Antivirus PC 2009.lnk
•c:\Program Files\Antivirus PC 2009
•c:\Program Files\Antivirus PC 2009\2.vbs
•c:\Program Files\Antivirus PC 2009\avpc2009.exe
•c:\Program Files\Antivirus PC 2009\avpc2009s.exe
•c:\Program Files\Antivirus PC 2009\bzip2.dll
•c:\Program Files\Antivirus PC 2009\libltdl3.dll
•c:\Program Files\Antivirus PC 2009\pthreadVC2.dll
•c:\Program Files\Antivirus PC 2009\Uninstaller.exe
•c:\Program Files\Antivirus PC 2009\data
•c:\Program Files\Antivirus PC 2009\data\daily.cvd
•c:\Program Files\Antivirus PC 2009\data\self.hdb
•c:\Program Files\Antivirus PC 2009\quarantine
•c:\WINDOWS\wvjhtpr.exe
•c:\WINDOWS\system32\fnrnspc.exe
•c:\WINDOWS\system32\islbk.exe
Ii sunt asociate cheile registry:

HKEY_LOCAL_MACHINE\SOFTWARE\AVPC2009
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus PC 2009
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Antivirus PC 2009″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “Antivirus PC 2009″


In log-ul HijackThis apar urmatoarele intrari:

O4 – HKLM\..\Run: [Antivirus PC 2009] cmd /C cd “C:\Program Files\Antivirus PC 2009″ && start avpc2009.exe
O4 – HKCU\..\Run: [Antivirus PC 2009] cmd /C cd “C:\Program Files\Antivirus PC 2009″ && start avpc2009.exe




DEVIRUSARE:

1. Descarcati si rulati rkill.com. Acest lucru este ncesar pentru a opri procesul activ folosit de virus. Veti primi probabil o atentionare ca rkill.com este infectat. Ignorati-l, este doar o alarma falsa generata de System Adware Scanner.

Rulati rkill.com din nou, pana cand virusul nu mai este activ.

2. Descarcati si instalati Malwarebytes Anti-Malware. Scanati PC-ul complet si stergeti la final infectiile gasite apasand Remove selected.