Header Graphic

 

 

"You Have a Security Problem" Removal Guide:

**Our recommendation: Automatically Remove "You Have a Security Problem" with Spyware Doctor

 
Download Spyware Doctor

  

Are you seeing this popup on your computer?

You Have a Security Problem Popup

 

If you are, the you most certianly do have a problem - you are infected with Antivirus 2009...

 

What is Antivirus 2009?

Antivirus 2009 is a rogue antispyware that is designed to get you to purchase a fully licensed, registered version of the software through various aggressive advertising techniques and scare tactics - including through the fake popup message that states "You Have a Security Problem."

**Note that Antivirus 2009 is NOT a legitimate spyware removal software**
 
Details:

Antivirus 2009 will infect your computer via one of two methods:

1. Trojan Vundo - if you are already infected with the Vundo Trojan, you will then receive consistent popups that state that your computer is infected and you need to install Antivirus 2009 in order to protect your computer.

2. Fake Advertising - when visiting certain websites, you will see popups from the site that again, will tell you that your computer is infected and you need to install Antivirus 2009 to protect yourself.

Once downloaded and installed, Antivirus 2009 will configure itself to continuously run in the background by starting up automatically each time you reboot your computer and start Windows.  The program will then perform a series of spyware scans of your computer and those scan results will show that you have a number of infections present.

Those scan results are not legitimate and instead will list files and folders that are either non-existent or that are actual Windows files that it needs to run properly.  If the legitimate files end up being deleted, your computer may stop running or become very unstable.

Also, while Antivirus 2009 is running you will continue to see consistent fake security or privacy alerts informing you that your computer has numerous security risks - including files that have been changed or data being sent over the internet to a untrusted internet host.

All of the scan results and alerts are false and are only designed to get you to purchase a licensed version of this bogus antispyware software.

Effects on Your computer:

- General Slowness
- Browser Hijack (changing search results or browser home pages)
- Certain websites blocked - often legitimate antispyware sites
- Additional malware and spyware downloading without you knowing
- Various errors, freezing, and crashes
- Continuous Popups and Security Alerts

Screenshots:

Antivirus 2009

Antivirus 2009 Fake Alert

Antivirus 2009 Fake Alert 2

Antivirus 2009 Fake Google Warning


Removal:

Automatic Removal (Highly Recommended):

1. Download and Install the Spyware Doctor, which can effectively remove Antivirus 2009 completely:

 
Download Spyware Doctor


2. Run a Full System Scan by Opening Spyware Doctor and clicking on Scan Computer Now

3. When scan is complete, click check all to ensure all infections are removed

4. Click Fix Checked to remove Antivirus 2009 and all other infections

Manual Removal (not recommended)

If you are a trained computer professional, you can attempt to remove Antivirus 2009 by stopping the following process and removing the following files and regsitry entries:

Process:

av2009.exe av2009[1].exe
AV2009Install.exe
Antivirus2009.exe

Files:

%UserProfile%\Desktop\Antivirus 2009.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2009.lnk
%UserProfile%\Local Settings\Temporary Internet Files\Content.IE5\S96PZM7V\winsrc[1].dll
%UserProfile%\Start Menu\Antivirus 2009
%UserProfile%\Start Menu\Antivirus 2009\Antivirus 2009.lnk
%UserProfile%\Start Menu\Antivirus 2009\Uninstall Antivirus 2009.lnk
c:\Program Files\Antivirus 2009
c:\Program Files\Antivirus 2009\av2009.exe
c:\WINDOWS\system32\ieupdates.exe
c:\WINDOWS\system32\scui.cpl
c:\WINDOWS\system32\winsrc.dll

Registry Entries (randomized numbers):

HKEY_CURRENT_USER\Software\75319611769193918898704537500611
HKEY_CLASSES_ROOT\CLSID\{037C7B8A-151A-49E6-BAED-CC05FCB50328}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{037C7B8A-151A-49E6-BAED-CC05FCB50328}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "75319611769193918898704537500611"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "ieupdate"

Prevention of Future Attacks/Infections:

Ensure you have IntelliGuard running on Spyware Doctor.  This is their real time protection agent - it is the most advanced real-time protection you will find anywhere.  This will block all future spyware and malware from ever getting onto your computer.

  

Download Spyware Doctor

  

*Disclaimer - the information presented in the manual removal section of this guide is meant to be used as an aid to assist you with removing spyware infections by yourself and is to be used at your own risk.  As stated, we do not recommend manual spyware removal in any situation as this can cause any number of additional problems with your computer, including causing your computer to stop functioning altogether.  As such, thebestspywareremovers.com cannot be held responsible for problems that may occur with any manual spyware removal process that you willfully choose to engage in.*