XP Antivirus is spyware program that ploys inexperienced users into scam. When this parasite infects PC, it starts producing system messages with warnings about virus and spyware infection on PC. Then it presents XP Antivirus software for buy to remove threats. Though, both software and messages are false. You want to remove this spyware as early as possible.

Instructions

End System Processes

Step 1

Push "Ctrl," "Shift" and "Esc" keys together to open Task Manager.

Step 2

Open "Processes" tab.

Step 3

Push "Ctrl" and click on following: XPAntivirus.exe, XPAntivirusUpdate.exe, av2009.exe, av2009install.exe, av2009install_0011.exe, av2009[1].exe, XPAntivirus2009.exe, ieupdates.exe, krln32.exe, scvh0st.exe, shlext32.exe, xpa.exe and xpa2009.exe.

Step 4

Click "End Process" and close window.

Unregister DLL Files

Step 1

Go to "Start" and click "Run."

Step 2

Type "cmd" and press "Enter" to begin command line window.

Step 3

Type "regsvr32 /u shlwapi.dll" and push "Enter" to unregister file.

Step 4

Do again Step 3 for "wininet.dll" and "trjdwnl.dll."

Step 5

Close window.

Delete Registry Entries

Step 1

Go to "Start" and click "Run."

Step 2

Type "regedit" and press "Enter" to begin Registry Editor.

Step 3

Glance through to and remove following entries:

HKEY_USERS\4Software\Microsoft\Windows\Current Version\Run\"XP antivirus" = "C:\Program Files\XPAntivirus\XPAntivirus.exe"

HKEY_USERS\Software\Microsoft\Windows\CurrentVersi on\Run\"XPAntivirus" = "C:\Program Files\XPAntivirus\XPAntivirus.exe"

HKEY_USERS\Software\XP antivirus

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ Uninstall\XP antivirus_is1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\XPAntivirusFilter

HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run ieupdate

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\
Explorer\Browser Helper Objects\{74f25a2c-22b3-4023-8f1a-ca616c30a8b5}\

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\
Run "shellbn"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\
Run "System"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\
Run "Windows Framework"

Step 4

Close Registry Editor.

Remove Files

Step 1

Go to "Start" and click "Search."

Step 2

Choose hard drive and check "All Files and Folders" division.

Step 3

Type "XPAntivirus.exe" and compress "Enter." Delete all rummage around results.

Step 4

Do again Step 3 for XPAntivirusUpdate.exe, XPAntivirus_log.txt, backup.lst, helper.sys, pn.cfg, spyware.dat, explorer.exe, explorer.exe.md5, ntoskrnl.exe, ntoskrnl.exe.md5, shlwapi.dll, shlwapi.dll.md5, wininet.dll, wininet.dll.md5, unins000.dat, unins000.exe, ver.dat, whitelist.cfg, scui.cpl, krln32.exe, scvh0st.exe, trjdwnl.dll, shlext32.exe, xpa.exe and xpa2009.exe.