I asked him to try to follow me to a location in his registry to search for the program or any entries that appear malicious, and he is blocked from doing registry editing by 'the administrator'. He is logged on as administrator and has never had issues going to regedit before.
I also asked him to try to download the newest IE and try to access Malwarebytes' antivirus 2009 removal tool through that, and it redirects him while attempting to go to IE's website as well.
We have also killed system processes relating to AV 2009 and deleted any folders hinting to it in system32 to no avail.
I found someone posting with similar issues on another forum somewhere here on Malwarebytes and they simply had run their existing Malwarebytes' program through the command prompt. This does not work for him.
If I am posting in the wrong forum I apologize but I am new, and we are desperate.
-Kerry
