Posted on Sunday, 6th December 2009 by Bob
What’s the story with the AntiMalware virus? Does it have any connection to the legitimate product from Malwarebytes? It should be no big surprise that the Antimalware (AntiMalware 2009) virus is in no way related to Malwarebytes, but it uses the same name to try and trick unlucky consumers into making errors. If you have this spyware on your PC you are going to want to remove it before it takes over your computer and possibly steals your identity!
THIS VIRUS MAY BLOCK YOUR PROGRAMS FROM OPENING!: If you are unable to run any removal programs, such as Spyware Doctor, or even access your Task Manager due to this virus, then you must try to boot in safe mode or you must try the blocked task manager fix. You should then be able to run a scanner after following either or both pieces of advice.
How Did I Get Infected With AntiMalware?
AntiMalware and badware just like it commonly end up on your computer due to the following causes:
- Freeware or shareware: Many times freeware or shareware is secretly bundled with spyware. It is how the developers earn money for the time they spent. It’s a sneaky, but it’s fairly common.
- Peer-to-peer software: Do you use a peer-to-peer (P2P) program or other application with a shared network? When you use these applications, you put your system at risk for mistakenly downloading an infected file, including software like AntiMalware.
- Questionable websites: Malicious or questionable websites can install programs such as AntiMalware through security holes and automatic downloads, such as video codecs. If you feel your browser is unsafe, consider using the newest version of Mozilla Firefox, Google Chrome, or Internet Explorer.
Automatically Detect & Remove AntiMalware – Click Here to Download Spyware Doctor
What are Common Signs of AntiMalware Infection?
- Slow Computer Performance
- Annoying Pop-Ups
- Taskbar Warnings
- Strange new icons and desktop backgrounds
- Internet Browsing Re-directs and Hijacks
- System Crashes
- High Pressure Marketing Tactics to “Purchase Full Version” of software
How Do I Remove AntiMalware?
There are two methods. The manual way and the automatic way. First – if you want to try and remove it manually (and I only recommend this to IT Professionals!) you must disable all related system processes, adjust all related system DLL files and registry files in the LOCAL_HKEY_USER folder, block all related websites, and delete all program files with the AntiMalware name.
AntiMalware Manual Removal Instructions:
Stop AntiMalware Processes:
antimalwareproinstaller.exe
%program_files%thcansj0e57cforceuninstall.exe
%program_files%thcansj0e57cuninstall.exe
xpprotectorinstaller.exe
%program_files%thcansj0e57cuninstall.exe
%program_files%thcansj0e57cthcansj0e57c.exe
%program_files%thcansj0e57cforceuninstall.exe
pphc3nsj0e57c.exe
%program_files%thcansj0e57cthcansj0e57c.exe
%program_files%thcansj0e57cthcansj0e57c.exe.local
Get Rid of AntiMalware DLLs:
%program_files%thcansj0e57cmsvcr71.dll
%program_files%thcansj0e57cmfc71enu.dll
%program_files%thcansj0e57cmsvcp71.dll
%program_files%thcansj0e57cmsvcr71.dll
%program_files%thcansj0e57cmsvcp71.dll
%program_files%thcansj0e57cmfc71enu.dll
%program_files%thcansj0e57cmfc71.dll
Block AntiMalware Sites:
Remove AntiMalware Registry Keys:
HKEY_LOCAL_MACHINE\SOFTWARE\thcrkrj0etfg
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform “AntiMalware2009″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “SMthcrkrj0etfg”
Remove AntiMalware Files and Folders:
c:\Program Files\thcrkrj0etfg\database.dat
c:\Program Files\thcrkrj0etfg\license.txt
c:\Program Files\thcrkrj0etfg\MFC71.dll
c:\Program Files\thcrkrj0etfg\MFC71ENU.DLL
c:\Program Files\thcrkrj0etfg\msvcp71.dll
c:\Program Files\thcrkrj0etfg\msvcr71.dll
c:\Program Files\thcrkrj0etfg\thcrkrj0etfg.exe
c:\Program Files\thcrkrj0etfg\thcrkrj0etfg.exe.local
c:\Program Files\thcrkrj0etfg\uninstall.exe
c:\WINDOWS\system32\pphcjkrj0etfg.exe
c:\Documents and Settings\All Users\Desktop\AntiMalware2009.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalware2009
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalware2009.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalware2009\AntiMalware2009.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalware2009\How to Register AntiMalware2009.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalware2009\License Agreement.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\AntiMalware2009\Register AntiMalware2009.lnk
%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiMalware2009.lnk
%UserProfile%\Application Data\thcrkrj0etfg
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\Autorun
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\Autorun\HKCU
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\Autorun\HKCU\RunOnce
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\Autorun\HKLM
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\Autorun\HKLM\RunOnce
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\Autorun\StartMenuAllUsers
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\Autorun\StartMenuCurrentUser
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\BrowserObjects
%UserProfile%\Application Data\thcrkrj0etfg\Quarantine\Packages
Note: In any AntiMalware files I mention above, “%UserProfile%” is a variable referring to your current user’s profile folder. If you’re using Windows NT/2000/XP, by default this is “C:\Documents and Settings\[CURRENT USER]” (e.g., “C:\Documents and Settings\JoeSmith”). If you have any questions about manual AntiMalware removal, go ahead and leave a comment.
How to delete AntiMalware files in Windows XP and Vista:
- Click your Windows Start menu, and then click “Search.”
- A speech bubble will pop up asking you, “What do you want to search for?” Click “All files and folders.”
- Type a AntiMalware file in the search box, and select “Local Hard Drives.”
- Click “Search.” Once the file is found, delete it.
How to stop AntiMalware processes:
- Click the Start menu, select Run.
- Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC.
- Click Processes tab, and find AntiMalware processes.
- Once you’ve found the AntiMalware processes, right-click them and select “End Process” to kill AntiMalware.
How to remove AntiMalware registry keys:
Warning! Your registry is a vital key to your Windows system. If you plan on making any edits to your registry, you absolutely must backup your registry first in case anything goes wrong. Be forewarnd that a mistake when editing your registry can result in a computer that no longer boots up. These instructions are designed for IT Professionals and PC Experts.
- Select your Windows menu “Start,” and click “Run.” An “Open” field will appear. Type “regedit” and click “OK” to open up your Registry Editor.
- Registry Editor will open as a window with two panes. The left side Registry Editor’s window lets you select various registry keys, and the right side displays the registry values of the registry key you select.
- To find a registry key, such as any AntiMalware registry keys, select “Edit,” then select “Find,” and in the search bar type any of AntiMalware’s registry keys.
- As soon as AntiMalware registry key appears, you can delete the AntiMalware registry key by right-clicking it and selecting “Modify,” then clicking “Delete.”
How to delete AntiMalware DLL files:
- First locate AntiMalware DLL files you want to delete. Open your Windows Start menu, then click “Run.” Type “cmd” in Run, and click “OK.”
- To change your current directory, type “cd” in the command box, press your “Space” key, and enter the full directory where the AntiMalware DLL file is located. If you’re not sure if the AntiMalware DLL file is located in a particular directory, enter “dir” in the command box to display a directory’s contents. To go one directory back, enter “cd ..” in the command box and press “Enter.”
- When you’ve located the AntiMalware DLL file you want to remove, type “regsvr32 /u SampleDLLName.dll” (e.g., “regsvr32 /u jl27script.dll”) and press your “Enter” key.
If you wish to restore any AntiMalware DLL file you deleted, type “regsvr32 DLLJustDeleted.dll” (e.g., “regsvr32 jl27script.dll”) into your command box, and hit the “Enter” key.
Did AntiMalware change your homepage?
- Click Windows Start menu > Control Panel > Internet Options.
- Under Home Page, select the General > Use Default.
- Type in the URL you want as your home page (e.g., “http://www.google.com”).
- Select Apply > OK.
AntiMalware Removal in 10 Minutes:
Download Spyware Doctor to get rid of AntiMalware in 10 minutes, automatically.
Automatic Removal. It’s What I Choose.
The risks of manual removal make automatic removal an easy decision for me. I don’t have enough time in the day to manually remove every infection that I come across; it’s way too time consuming, and risky. It’s easy to miss a file if you’re not careful, and it’s easy to adjust the wrong file and be left with a paperweight for a computer.
Posted in Threat Removal | Comments (9)






December 11th, 2009 at 11:51 am
[...] you sick and tired of letting viruses like this one threaten your safety and security? Get an Anti-Malware removal and tell the hackers to shove [...]
December 12th, 2009 at 6:06 pm
[...] you sick and tired of letting viruses like this one threaten your safety and security? Get an Anti-Malware removal and tell the hackers to shove [...]
January 26th, 2010 at 5:16 am
[...] you sick and tired of letting viruses like this one threaten your safety and security? Get an Anti-Malware removal and tell the hackers to shove it! Bookmark It Hide Sites « [...]
February 28th, 2010 at 9:15 am
[...] you sick and tired of letting viruses like this one threaten your safety and security? Get an Anti-Malware removal and tell the hackers to shove [...]
October 6th, 2010 at 10:27 am
[...] you sick and tired of letting viruses like this one threaten your safety and security? Get an Anti-Malware removal and tell the hackers to shove [...]
December 21st, 2010 at 9:48 pm
[...] you sick and tired of letting viruses like this one threaten your safety and security? Get an Anti-Malware removal and tell the hackers to shove [...]
February 5th, 2011 at 3:41 am
[...] sind krank und müde zu lassen Viren wie diese bedrohen Ihre Sicherheit? Machen Sie sich ein Anti-Malware Entfernung und sagen Sie den Hackern zu [...]
February 5th, 2011 at 4:41 am
[...] Sie sind krank und müde zu lassen Viren wie diese bedrohen Ihre Sicherheit? Machen Sie sich ein Anti-Malware Entfernung und sagen Sie den Hackern zu [...]
February 15th, 2011 at 11:53 am
Malwarebytes is the ultimate to securely delete remote viruses I would highly recommend it but you must also get another software on your computer such as antivirus as malwarebytes says you get a an best protection for your Laptop