Thursday, March 12, 2009

How to manually remove Power Antivirus

PowerAntivirus2009, is a fake anti-spyware. Like other fake antispyware, Power Antivirus 2009 might launch false system alerts. This Power Antivirus 2009 popup is supposed to scare you into buying Power Antivirus 2009.In this post i am goging to discuss how to manually remove spyware PowerAntivirus 2009.

Follow the steps:

Step 1:- Stop unwanted process running in background.

Click Start then Run and type taskmgr.exe.
Click on Process tab in Task Manager and locate the following Image name(s).
Power Antivirus 2009
Highlight the Image name and Click End Process to stop.
Close the Task Manager.

Step 2:- Uninstall the Suspicious program from the computer.

Click on Start and Run, type appwiz.cpl, press Enter.
Locate Power-Antivirus-2009 in Add and Remove Program.
Click on Remove (Uninstall) button.
Close Add or Remove program.
Restart the computer.

Step 3:- Delete the suspicious file(s) or folder(s) from the computer

Click on Start and Run, type c:\progra~1, press Enter.
Locate the following file(s) and Delete.
Power-Antivirus-2009
Click on Start and Run, type %UserProfile%\Application Data , press Enter.
Locate the following file(s) and Delete
Power-Antivirus-2009
Click on Start and Run, type c:\Documents and Settings\All Users\Start Menu\Programs , press Enter.
Locate the following file(s) and Delete
Power-Antivirus-2009
Close the Window.

Step 4:- Manual Removal of suspicious entries from Registry.

CAUTION: Changing the Registry incorrectly could cause your comuter to stop working. Please make sure to create backup of registry or create system point before proceeding.

Click Start, Click run and type regedit.

Create a registry backup.
Locate the following registry keys, right click and Delete.
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\Start Power-Antivirus-2009.ln
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Start Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Start Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Power-Antivirus-2009.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Power-Antivirus-2009.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Power-Antivirus-2009.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Power-Antivirus-2009.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINDOWS\APPINIT_DLLS\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Power Antivirus.lnk
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Power Antivirus.lnk
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\Power Antivirus.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\Power Antivirus.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\Power Antivirus.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Power Antivirus.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\Power Antivirus.lnk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\Power Antivirus.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Power Antivirus.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\Power Antivirus.lnk
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCEEX\Power Antivirus.lnk]
Restart the computer.

No comments:

Post a Comment