Trojan - antivirus-xp-pro-2009

Most of the PC users might have experienced pop-up dll error messages of: "Couldn't find ****.dll..." on their computer, such as Shell32.dll error, Kernel32.dll error and Ntdll.dll error etc. Dll errors are pretty annoying and your computer may not function properly after getting this kind of error. Well it is time to say goodbye to these errors! repair-dll.com is the largest dll database where you can find the detailed information and other free resource of every dll file in Windows as well as the recommended solution to all the popular dll errors.

Take my notes as a guide and hopefully this will work for you.

1. Start > Run > msconfig > “Start Up” tab > Disable All
2. “Services” tab > Check box “Hide Microsoft Services” > Disable All
2.5 Exit out, but don't reboot yet
3. Start > Right-click “My Computer” > “Properties” > “System Restore” > Check box “Turn off restore on Hard disks”
4. Start > Run > type %temp% > Edit Select All > Shift-Delete
Reboot machine
1. Combofix.exe. This program will run on its own. Also, it will likely wish to reboot the machine. Let it complete.
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
2. WinSockFix.exe. This will fix any issues with the network connection.

3. SuperAntispyware.exe. This will remove all remaining spyware, tracking cookies, and browser hijackers.
Check to see that your favorite internet browser is working. Install or re-enable your favorite antivirus that failed to catch this in the first place.

Stop WinAntiVirus2008 Processes:
mav_startupmon.exe
uwa7pcw.exe
rtasks.exe
WinAv.exe
wa7pinst.exe
Remove WinAntiVirus2008 Registry Values:
2178F3FB-2560-458f-BDEE-631E2FE0DFE4
6F520BE0-9B54-4558-816F-224E67997DF3
459F4226-1AAB-43B6-9DC1-B6313EF83749
1AC5C88A-DEA7-462b-A232-04AF5CA42E7E
723D54C7-7483-4EB8-8EED-CE5B2AEA534D

Find and Delete these WinAntiVirus2008 Files:
WinAntiVirus Pro
WinAv.exe
uwa7pcw.exe
mav_startupmon
mav_startupmon.exe
rtasks
rtasks.exe
wa7pinst.exe
IH.exe
WinAntiVirus Pro.lnk
Reinstall or Uninstall WinAntiVirus Pro.lnk
WinAntiVirus Pro Manual.lnk
WapCHK.dll
rpt.dll
awvtr.dll
yayyvsp.dll
fcyxx.dll
gebxyax.dll
asmngr.dll
fopnl.dll
IEFWBHO.dll
Scnkrnl.dll
settings.dll
sqlite3.dll
WAV6COM.dll
winpgi.dll
BORLNDMM.dll
SCANADWR.dll
SCANBCDR.dll
SCANLDR.DLL
SCANDOS1.dll
SCANEMUL.dll
SCANFUNC.dll
SCANMCRL.dll
SCANOTHR.dll
SCANSCR.dll
SCANTOOL.dll
SCANTROJ.dll
SCANWIN1.dll
UNACPU.dll
UNADBX.dll
unamscan.dll
UNMIME.dll
UNPACK.dll
UNPACKS.dll
UNPACKS2.dll
UNPEPACK.dll

Vista

Stop WinAntivirus2008 Processes:
(Learn how to do this)
WinAntivirus2008.exe
mav_startupmon.exe
uwa7pcw.exe
rtasks.exe
WinAv.exe
wa7pinst.exe
Find and Delete these WinAntivirus2008 Files:
(Learn how to do this)
%UserProfile%\Desktop\Viruses.bdt
%UserProfile%\Desktop\WinAntivirus2008.lnk
c:\Program Files\WinAntivirus2008
c:\Program Files\WinAntivirus2008\Viruses.bdt
c:\Program Files\WinAntivirus2008\VRM2008.exe
c:\Documents and Settings\All Users\Start Menu\Programs\WinAntivirus2008
c:\Documents and Settings\All Users\Start Menu\Programs\WinAntivirus2008\WinAntivirus2008.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\WinAntivirus2008.lnk
%UserProfile%\Application Data\Mozilla\Firefox\Profiles\s1jqw0bz.default\cookies.sqlite
WinAv.exe
uwa7pcw.exe
mav_startupmon
mav_startupmon.exe
rtasks
rtasks.exe
wa7pinst.exe
IH.exe
WinAntiVirus Pro.lnk
Reinstall or Uninstall WinAntiVirus Pro.lnk
WinAntiVirus Pro Manual.lnk
WapCHK.dll
rpt.dll
awvtr.dll
yayyvsp.dll
fcyxx.dll
gebxyax.dll
asmngr.dll
fopnl.dll
IEFWBHO.dll
Scnkrnl.dll
settings.dll
sqlite3.dll
WAV6COM.dll
winpgi.dll
BORLNDMM.dll
SCANADWR.dll
SCANBCDR.dll
SCANLDR.DLL
SCANDOS1.dll
SCANEMUL.dll
SCANFUNC.dll
SCANMCRL.dll
SCANOTHR.dll
SCANSCR.dll
SCANTOOL.dll
SCANTROJ.dll
SCANWIN1.dll
UNACPU.dll
UNADBX.dll
unamscan.dll
UNMIME.dll
UNPACK.dll
UNPACKS.dll
UNPACKS2.dll
UNPEPACK.dll
Remove WinAntivirus2008 Registry Values:
(Learn how to do this)
5222008A-DD62-49c7-A735-7BD18ECC7350
HKEY_CURRENT_USER\Software\WinAntivirus2008
2178F3FB-2560-458f-BDEE-631E2FE0DFE4
6F520BE0-9B54-4558-816F-224E67997DF3
459F4226-1AAB-43B6-9DC1-B6313EF83749
1AC5C88A-DEA7-462b-A232-04AF5CA42E7E
723D54C7-7483-4EB8-8EED-CE5B2AEA534D
WinAntivirus 2009

# 1. Find and Remove the following Antivirus 2009 Processes:
* av2009.exe
# 2. Find and Remove the following Antivirus 2009 files and folders:
* C:\Program Files\Antivirus 2009
* C:\Program Files\Antivirus 2009\av2009.exe
* c:\WINDOWS\system32\scui.cpl
* c:\WINDOWS\system32\winsrc.dll
# 3. Find and Remove the following Antivirus 2009 files and folders:
* HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\ CurrentVersion\Run\15358943642955870504508370025739