Member Avatar for melsauto

I can go upto logging in and then blue screen, nothing happens.
How do i get rid of MS Antivirus 2009.This a business pc with a lot of customer files.
I really appreciate all the advise i can get.

  • 2 Contributors
  • 2 Replies
  • 43 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by melsauto

Dani AI

Generated

If the screen goes solid blue after you enter your password (no icons, no taskbar), that is usually the rogue "MS/Antivirus 2009" hijacking Explorer or Userinit, not a hardware fault. Because this is a business PC, first unplug it from the network and, if possible, make a full image backup before attempting cleanup. is right that there are many threads on this family, but since you cannot get a desktop, start with these offline-friendly steps.

  1. Try Safe Mode (tap F8) and choose Safe Mode with Networking. If you only get a blank blue background, press Ctrl+Shift+Esc to open Task Manager. File -> New Task -> type explorer.exe. If the desktop appears, immediately repair the shell/login keys (adjust C:\Windows if your Windows folder is different):
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell /t REG_SZ /d explorer.exe /f
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Userinit /t REG_SZ /d C:\Windows\system32\userinit.exe, /f

Reboot and test. If Task Manager is blocked, try Safe Mode with Command Prompt and run the same commands from there.

  1. On a clean PC, download Malwarebytes and Kaspersky TDSSKiller. Copy them to a USB stick, then plug it into the infected PC in Safe Mode. If the malware blocks installers, rename the Malwarebytes installer to iexplore.exe. Run a full Malwarebytes scan, remove everything found, reboot, then run TDSSKiller to catch any boot/rootkit components.

  2. If you still cannot boot or you get an actual BSOD with a STOP code, use a bootable rescue disk to scan the drive offline and to copy customer files off safely. For business data, the most reliable path after you recover files is a wipe and clean reinstall. After cleaning or rebuild, patch Windows and apps, reset browser proxy settings if changed, disable then re-enable System Restore to clear old restore points, and change any passwords used on that machine.

Recommended Answers

All 2 Replies

Member Avatar for Suspishio

Search Antivirus2008 and Antivirus2009 in this forum and you'll find plenty of stuff on how to deal with 2009.

Member Avatar for melsauto

Thank you i shall check it out.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.