SysAntivirus 2009 is a rogue antivirus/antispyware program that looks like MS Antispyware 2009 and Nano Antivirus. The fake antivirus is distributed through the use trojans and pop-ups found on fake online malware scanners that tells you that your computer is infected. In both cases, your computer will display alerts with a message stating that your computer is infected with spyware and that you must install SysAntivirus 2009 to clean your computer.
During installation, SysAntivirus 2009 configures itself to run automatically every time, when you start your computer. Once running, SysAntivirus 2009 will scan your computer and reports false or exaggerated system security threats on your computer to trick you to buy the paid version of the rogue, in order to remove the potential and reported threats.
Also when your computer infected with SysAntivirus 2009, Internet Explorer will be hijacked. Anytime when you are browsing the Internet a fake security alert page will be shown stating:
Insecure Internet activity. Threat of virus attack!
Due to insecure Internet browsing your PC can easily
You may be infected with viruses, worms and trojans without your knowledge, which can lead to system slowdowns, freezes and crashes.
Unprotected Internet browsing can result in your personal information being revealed without your knowledge or permission.
To get full advanced real-time protection for PC and Internet activity, register SysAntivirus 2009.
Ignore the alert. Use the free instructions below to remove SysAntivirus 2009 and any associated malware from your computer.
Symptoms in a HijackThis Log.
O4 – HKCU\..\Run: [SysAntivirus 2009] “C:\Documents and Settings\All Users\Application Data\DataProtector\SysAntivirus 2009\sysav.exe” /autorun
Use the following instructions to remove SysAntivirus 2009 (Uninstall instructions).
- Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
- Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select “Perform Quick Scan”, then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
SysAntivirus 2009 creates the following files and folders.
c:\Documents and Settings\All Users\Application Data\DataProtector\SysAntivirus 2009\sysav.exe
c:\Documents and Settings\All Users\Application Data\DataProtector\SysAntivirus 2009
c:\Documents and Settings\All Users\Application Data\DataProtector\SysAntivirus 2009\BASE
c:\Documents and Settings\All Users\Application Data\DataProtector\SysAntivirus 2009\DELETED
c:\Documents and Settings\All Users\Application Data\DataProtector\SysAntivirus 2009\LOG
c:\Documents and Settings\All Users\Application Data\DataProtector\SysAntivirus 2009\LOG\20090201215433093.log
c:\Documents and Settings\All Users\Application Data\DataProtector\SysAntivirus 2009\SAVED
If you need help with the instructions, then post your questions in our Spyware Removal forum.
thank you!!!!!!! this was a pain to remove!