|
Help to Remove XP Antivirus 2009
We will provide two (2) options on how to remove it.
This is a self-help guide. Use at your own risk.
This website or affiliates can not be held responsible for problems that may occur by using this information.
It is always best to backup before attempting to recover from a problem like this.
What this programs does:
XP Antivirus 2008, XP Antivirus 2009, and XPAntiVirus are rogue antivirus programs that, when run, display false results as a tactic to scare you into purchasing the software. Older versions of XP Antivirus would create 9 entries in your Windows Registry that impersonate infections on your machine. In reality, though, these registry entries were harmless and had absolutely no effect on your computer. Instead, these entries were set so that XP AntiVirus can find them when scanning your computer and report them as infections. The newer of versions of the program , such as XP Antivirus 2008 and XP Antivirus 2009, instead just display false results when scanning your computer that state infections were found. In order to remove these fake infections, though, you would first need to purchase the software as the trial does not allow you to remove them.
While running, XP Antivirus will also display fake alerts stating that you are infected or under attack from some type of threat. These alerts are fake and can be ignored. If you do click on the alert, though, it will prompt you to purchase the software. Examples of text contained in these alerts can be found below.
Privacy Violation alert!
XP antivirus detected Privacy Violation. Some program is secretly sending your private data to untrusted internet host. Click here to block this activity by removing threats (Recommended).
or
System files modification alert!
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss. Click here to block unathorised <sic> modification by removing threats (Recommended).
As you can see these programs are fraudware because they make changes to your computer and then state these changes are infections as a scare tactic to have you purchase the software. It goes without saying that under no circumstances should you buy it. The older program, XPAntivirus, does come with a removal option in the computer's Add or Remove Programs list, but when you attempt to uninstall it, all that happens is the entry is removed from the list and program's process is terminated. Next time you reboot, XP AntiVirus will start up again. The newer versions of the program do not contain an entry in the Add or Remove Programs list at all.
These guides below will walk you through the steps necessary to remove this software and any entries it installed in your Windows Registry for free.
How to Remove the fake Antivirus Program:
Options:
- Use Adware by Lavasoft
- Manual Edit the Registery (advanced users only)
HijackThis Log: (example)
Symptoms that may be in a HijackThis Log:
O2 - BHO: (no name) - {4e7bd74f-2b8d-469e-dcf7-f96da086b434} - (no file)
O2 - BHO: (no name) - {6C6B8C69-9285-4D94-8492-9E920C8C2B65} - (no file)
O2 - BHO: (no name) - {74f25a2c-22b3-4023-8f1a-ca616c30a8b5} - (no file)
O2 - BHO: (no name) - {9a19966f-ae0e-4699-8cce-9b6f5f1c352c} - (no file)
O2 - BHO: (no name) - {D714A94F-123A-45CC-8F03-040BCAF82AD6} - (no file)
O4 - HKLM\..\Run: [System] C:\WINDOWS\krln32.exe
O4 - HKLM\..\Run: [Windows Framework] C:\WINDOWS\system32\scvh0st.exe
O4 - HKLM\..\Run: [mmnext06] C:\Program Files\Common Files\trjdwnl.dll
O4 - HKLM\..\Run: [shellbn] C:\WINDOWS\shlext32.exe
O4 - HKCU\..\Run: [XP Antivirus] C:\Program Files\XPAntivirus\XPAntivirus.exe
O4 - HKCU\..\Run: [10181281926292389167514053783761] C:\Program Files\XP Antivirus\xpa.exe
Ad-Aware 2008 Free Version
[ Download ]
We believe every computer user has the right to protect their private information. We give you that right for free - no strings attached! Safeguard your personal information against cyber threats with the original Anti-Spyware solution.
Ad-Aware 2008 Free is available for personal home use only. Commercial use is prohibited.
- Shop, bank, and make travel arrangements online
We keep you safe from password stealers, keyloggers, spyware, trojans, and other potential identity thieves.
- Control your privacy
Erase tracks left behind while surfing the Web, on browsers such as Internet Explorer, Opera, and Firefox, in one easy click.
- Get Peace of Mind
Know that your personal information is kept safe from cyber criminals.
1. Download and install the program.
2. Run a Full Scan - this may take some time, so relax.
3. Once it finds all the problems, be sure to check each tab on top to check mark all the problems you wish it to fix.
4. Choose - fix the problems.
Once completed reboot the computer system.
This is a self-help guide. Use at your own risk.
This website or affiliates can not be held responsible for problems that may occur by using this information.
Manual removal of XP Antivirus 2009
XPAntivirus manual removal (Advanced Users Only):
* It is recommend to backup the computer before trying this procedure!
Kill processes:
XPAntivirus.exe XPAntivirusUpdate.exe av2009.exe av2009install.exe av2009install_0011.exe av2009[1].exe XPAntivirus2009.exe ieupdates.exe %program_files%\\XP Antivirus 2009\\av2009.exe ieupdates.exe av2009install_0011.exe av2009install.exe %program_files%\\XP Antivirus 2009\\av2009.exe krln32.exe scvh0st.exe shlext32.exe
Delete registry values:
HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run\"XP antivirus" = "C:\Program Files\XPAntivirus\XPAntivirus.exe"
HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run\"XPAntivirus" = "C:\Program Files\XPAntivirus\XPAntivirus.exe"
HKEY_USERS\Software\XP antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP antivirus_is1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XPAntivirusFilter
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run ieupdate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{4e7bd74f-2b8d-469e-dcf7-f96da086b434}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{6C6B8C69-9285-4D94-8492-9E920C8C2B65}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{74f25a2c-22b3-4023-8f1a-ca616c30a8b5}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{9a19966f-ae0e-4699-8cce-9b6f5f1c352c}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{D714A94F-123A-45CC-8F03-040BCAF82AD6}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\XP antivirus_is1\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “XP Antivirus”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “mmnext06″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “shellbn”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “System”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “Windows Framework”
Unregister DLLs:
shlwapi.dll wininet.dll trjdwnl.dll
Delete files:
XPAntivirus.exe XPAntivirus.url XPAntivirusUpdate.exe XPAntivirus_log.txt XPAntivirus.lnk Desktop\\XPAntivirus.lnk Uninstall XPAntivirus.lnk XPAntivirus on the Web.lnk XPAntivirus.lnk backup.lst helper.sys pn.cfg spyware.dat explorer.exe explorer.exe.md5 ntoskrnl.exe ntoskrnl.exe.md5 shlwapi.dll shlwapi.dll.md5 wininet.dll wininet.dll.md5 unins000.dat unins000.exe ver.dat whitelist.cfg XP Antivirus 2009.lnk XP Antivirus 2008.lnk Uninstall Antivirus.lnk scui.cpl %startmenu%\\XP Antivirus 2009\\XP Antivirus 2009.lnk %startmenu%\\XP Antivirus 2009\\uninstall XP Antivirus 2009.lnk %desktopdirectory%\\XP Antivirus 2009.lnk Uninstall XP Antivirus 2008.lnk krln32.exe scvh0st.exe trjdwnl.dll shlext32.exe
Restart the Computer..
|
