How to remove ExpressAntiVirus2009

ExpressAntiVirus2009 remover

ExpressAntiVirus2009 removal process

For remove ExpressAntiVirus2009 virus,please clean/delete all ExpressAntiVirus2009 infected files and Delete/Modify any values ExpressAntiVirus2009 added to the registry as following:
Behavior
The program must be manually installed.

The program reports false or exaggerated system security threats on the computer.



The user is then prompted to pay for a full license of the application in order to remove the threats.



Installation
When the program is executed, it creates the following files:
%ProgramFiles%\exav\av.ini
%ProgramFiles%\exav\base.dll
%ProgramFiles%\exav\borlndmm.dll
%ProgramFiles%\exav\expressav.exe
%Wind¨¬r%\Temp\JETB55.tmp

Next, the program creates the following registry entry so that it executes whenever Windows starts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\"av" = "C:\Program Files\exav\expressav.exe"

It also modifies the following registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoFind" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoRun" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoSMHelp" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoSetFolders" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\"NoViewOnDrive" = "3FFFFFF"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableRegistryTools" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\"DisableTaskMgr" = "1"
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions\"NoBrowserOptions" = "1"



For successful remove ExpressAntiVirus2009 virus,you may also need do as following:
1. Temporarily Disable System Restore .

2. Update the virus definitions. Reboot computer in SafeMode;

3. Delete the IE temp files,some ExpressAntiVirus2009 temp file exisit there.

4.If you failed to remove ExpressAntiVirus2009,please go to our remove help forum:http://help.antiviruses123.com