Welcome to remove-malware.net

How to remove Online-antivir-scan09.com hijacker

Malware Description:
Online-antivir-scan09.com is a trojan-powered browser hijacker that turns your computer use into an unpleasant experience. Actually, Online-antivir-scan09.com is by its nature a scanner, a fake one supporting the distribution of Personal Antivirus rogue anti-spyware application. Now, let us explain this in more detail. The most common story of acquaintance with Online-antivir-scan09.com is through the ads it displays. Those pop-ups appear unexpectedly during your internet session and contain some information stating your system is in danger and contains signs of various infections. If you happen to click one of those fake (!) alerts, the browser will get automatically redirected to a page containing Online-antivir-scan09.com URL in the address bar and displaying your internal computer drives and folder. However, the most interesting thing about Online-antivir-scan09.com site is the scanner that mimics a computer check for viruses and security issues. Unfortunately, the scan is just as worthless and deceptive as the above-mentioned notifications; it tries to swindle the user into paying for Personal Antivirus fake security product. The few pieces of advice we can give are to get rid of Online-antivir-scan09.com trojans, refrain from clicking suspicious online ads and not to install Personal Antivirus and similar rogue programs.

Malware Type: Browser Hijackers

Malware Author: Innovagest2000 SL

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

Online-antivir-scan09.com Hijacker Free Scanner and Remover: Download Now

Online-antivir-scan09.com Screenshot:

Online-antivir-scan09.com Fake Scanner Screenshot:

How to remove Online-antivir-scan09.com hijacker manually:
Manual removal of Online-antivir-scan09.com hijacker and attendant malware is feasible if you have sufficient expertise in dealing with program files, system processes, .dll files and registry entries.

The associated files to be deleted are listed below:

• %Documents and Settings%\All Users\Desktop\Personal Antivirus.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus Home Page.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Personal Antivirus.lnk
• %Documents and Settings%\All Users\Start Menu\Programs\Personal Antivirus\Purchase License.lnk
• %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\Personal Antivirus.lnk
• %UserProfile%\Application Data\Personal Antivirus
• %UserProfile%\Application Data\Personal Antivirus\settings.ini
• %UserProfile%\Application Data\Personal Antivirus\uill.ini
• %UserProfile%\Application Data\Personal Antivirus\unins000.exe
• %UserProfile%\Application Data\Personal Antivirus\Uninstall Personal Antivirus.lnk
• %UserProfile%\Application Data\Personal Antivirus\db
• %UserProfile%\Application Data\Personal Antivirus\db\config.cfg
• %UserProfile%\Application Data\Personal Antivirus\db\Timeout.inf
• %UserProfile%\Application Data\Personal Antivirus\db\Urls.inf
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe
• %Program Files%\Personal Antivirus
• %Program Files%\Personal Antivirus\activate.ico
• %Program Files%\Personal Antivirus\Explorer.ico
• %Program Files%\Personal Antivirus\PerAvir.exe
• %Program Files%\Personal Antivirus\unins000.dat
• %Program Files%\Personal Antivirus\uninstall.ico
• %Program Files%\Personal Antivirus\working.log
• %Program Files%\Personal Antivirus\db
• %Program Files%\Personal Antivirus\db\DBInfo.ver
• %Program Files%\Personal Antivirus\db\ia080614.db
• %Program Files%\Personal Antivirus\db\ia080618x.db
• %Program Files%\Personal Antivirus\Languages
• %Program Files%\Personal Antivirus\Languages\IAEs.lng
• %Program Files%\Personal Antivirus\Languages\IAFr.lng
• %Program Files%\Personal Antivirus\Languages\IAGer.lng
• %Program Files%\Personal Antivirus\Languages\IAIt.lng
• %WINDOWS%\system32\log.txt
• %UserProfile%\Application Data\Microsoft\Windows\winlogon.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iGSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iMSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iPSh.png
• %UserProfile%\Local Settings\Application Data\Microsoft\Internet Explorer\iv.exe
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\log.txt
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\pguard.ini
• %UserProfile%\Local Settings\Application Data\Microsoft\Windows\services.exe

The related registry entries to be removed are as follows:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Personal Antivirus_is1
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ITGRDENGINE
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ITGrdEngine
• HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer “PrS”
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “Personal Antivirus”

Please, be aware that manual removal of Online-antivir-scan09.com is a cumbersome procedure and does not ensure complete deletion of the malware, due to the fact that some files might be hidden or may automatically reanimate themselves afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal of Online-antivir-scan09.com, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.