XPAntiVirus Info & Manual Removal Guide

Do you have XPAntivirus?

This “XPAntivirus Removal Guide” article will show you how to identify and remove XPAntivirus. This guide will be updated as more information is available.

XPAntivirus Detection Test

Download SpyHunter’s Spyware Scanner Run SpyHunter’s Spyware Scanner to check for XPAntivirus infections on your PC.

XPAntivirus Description

XPAntivirus

XPAntivirus is a corrupt anti-spyware application that may infiltrate your computer with the help of a Trojan via browser security loopholes. Once installed, XPAntivirus will perform a deceitful scan that will result in fake threat notifications. The notifications that XPAntivirus displays are false and are used by malicious hackers to profit from credible computer users. Exaggerated threat reports are meant to scare you into purchasing the full version of the program, which is also a fraud and cannot perform duties of a credible anti-spyware application. You should remove XPAntivirus from your system with no hesitation.

Parasite Type: A cocktail of Rogue Anti-Spyware Programs & Trojans.

XPAntivirus Method of Automatic Removal

The removal of spyware such as XPAntivirus can be a difficult process. If you regularly run a spyware scan with a good spyware remover, you can automatically detect XPAntivirus and other Spyware, Trojans, Rogue Anti-spyware, Adware, Browser Hijackers and other unwanted programs.

To quickly remove XPAntivirus, follow the instructions below:

  1. Download SpyHunter’s Spyware Scanner Download SpyHunter’s Spyware Scanner.

  2. Select “Start Scan” to run a full system XPAntivirus scan.

  3. Reboot your computer.

  4. Run another scan to pick up any remaining XPAntivirus infections.

** SpyHunter’s Spyware Scanner only allows you to detect XPAntivirus and other spyware. In order to remove XPAntivirus, we advise you to buy the full-version of SpyHunter. Weekly XPAntivirus file updates and technical support are available with SpyHunter’s spyware remover.

XPAntivirus Method of Infection

  • The Internet user surfs the Web and visits a questionable website. A large amount of rogue anti-spyware programs like XPAntivirus is mostly pushed through adult websites.

  • The Internet user downloads a free video codec called “Video ActiveX Enhancement 2.07″ which comes bundled with XPAntivirus. Freeware or shareware programs tend to come with other unwanted programs such as XPAntivirus. Do not install any free software without reading its EULA. By simply reading a program’s EULA, you can determine whether a program you are installing has spyware bundled with it.

  • The Internet user is infected with the rogue anti-spyware program XPAntivirus. XPAntivirus runs a scan on the computer and gives a false spyware report claiming that the computer is infected with spyware. Once the scan is completed, a warning message appears with two buttons, one that says “Buy On-Line” and the other “Delete Spyware”. This deceptive tactic is an attempt to scare the Internet user into clicking the “Buy On-Line” button.

    • Fake warning message reads:

    • “Warning! 24 threats found!
      XPAntivirus has detected malicious spyware on your PC. To buy XPAntivirus On-Line, click ‘Buy On-Line’.”
  • The Internet user closes all the fake Windows error messages and warnings and is unaware that XPAntivirus is still running its malicious tasks in the background. XPAntivirus reloads itself on a timer so if the Internet user closes the program it will only take a few moments until it opens again. The average Internet user does not realize when spyware has infected his/her computer until it is too late and the spyware problem has already spread throughout the computer.

  • Internet user opens web browser and is redirected to a rogue website called Puresafetyhere.com. The Internet user is bombard with websites that pop up messages that tries to push a product on him/her. Ignore such messages! We recommend closing these windows by clicking on the X instead of the OK button.

XPAntivirus Symptoms

The following XPAntivirus symptoms occur:

  • XPAntivirus displays a fake system alert similar to a Windows notification message.
    A red or green flashing icon appears in your system tray. If you click on the icon, a fake system alert pops up and directs you to a rogue website called safetyuptodate.com. In some cases, even when you don’t click on the icon the fake system alert may still pop up.

    The fake system alert promises to give you a legitimate anti-spyware program that will help you fix spyware problems, but instead it really reports false information to try to trick you into purchasing the program.

    XPAntivirus’s false sytem alert message reads:

    • “System Alert: Trojan-Spy.Win32@mx
      Type: Spyware/Trojan
      Vulnerable: Windows 95/98/ME/NT/2003/Windows XP
      Description: Spyware program that sends confidential information to a remote attacker.
      Protection: Click this baloon to download official security software.”

  • XPAntivirus hijacks or modifies your homepage and displays new desktop shortcuts.
    XPAntivirus changes your default homepage to a different homepage and creates new unnecessary shortcuts on your desktop. Sometimes XPAntivirus won’t even allow you to change it back to your original homepage. Websites that redirects you to is asecurevalue.com and malwareburn.com.

  • XPAntivirus installs a rogue toolbar called Security Toolbar 7.1.
    Security toolbar 7.1 is a rogue toolbar that comes with two green bars, one that says “block adware” and the other “remove spyware”. If you click on either of them you’re directed to a rogue anti-spyware site such as Malwareburn.com which can install additional malware.

  • XPAntivirus bombards your PC with fake Windows warnings messages.
    Even after you’ve closed all the XPAntivirus messages or your PC has been idle for awhile, you’ll still get constant alert popups appearing on your system tray or on your screen.

    • XPAntivirus Anatomy

    As new XPAntivirus spyware components is reported by our customers and our Spyware Threat Research Labs, we will update this section.

    XPAntivirus.com WHOIS Information:
    Registration Service Provided By: ESTDOMAINS INC
    Contact: +1.3027224217
    Website: http://www.estdomains.com
    Domain Name: XPANTIVIRUS.COM
    Registrant:
    Verified Software
    Victor Temchenko
    (verifiedsoftware@gmail.com)
    Geroev Truda 68 - 136
    Kharkov
    Kharkov,61038
    UA
    Tel. +38.0638550739
    Creation Date: 20-Sep-2007
    Expiration Date: 20-Sep-2009
    Domain servers in listed order:
    ns2.trifle.net
    ns.win-security.biz

    XPAntivirus Manual Removal Instructions

    To learn the XPAntivirus manual removal process, read the step-by-step instructions provided on this section.

    Use Caution! Please read the instructions below carefully. Manual removal of XPAntivirus is a delicate procedure. Proceed at your own risk.

    Make sure you backup your system and close all open Internet Explorer windows before you manually remove XPAntivirus.

    If you are still having problems with XPAntivirus after completing these instructions, we recommend you download SpyHunter’s Spyware Removal Tool to safely remove XPAntivirus.

    To manually remove XPAntivirus, follow these removal steps:

    Step #1: How to Kill XPAntivirus files using Process Explorer.

    • 1a. How to Kill XPAntivirus processes.

      1. Download and install Process Explorer.

      2. Open Process Explorer.

      3. Locate the XPAntivirus processes listed below.

      4. To kill an XPAntivirus process, right-click the XPAntivirus process and choose the option “Kill Process Tree”.

      5. Kill the following XPAntivirus processes:
        XPAntivirus.exe
        xpa.exe
        install_v2.exe
        download.exe
        sefind.exe
        xpa2008.exe
        XPAntivirusUpdate.exe
        xpantivirus2008_v880076.exe
        xpantivirus2008_v880070.exe
        xpantivirus2008_v880019.exe
        xpantivirus2008_v880157.exe
        xpantivirus2008_v880136.exe
    • 1b. How to Kill XPAntivirus DLL files.

      1. Right-click the Explorer.exe process and choose the option “Properties”.

      2. Click on the “Threads” Tab, locate and highlight the XPAntivirus DLL files listed below.

      3. To kill XPAntivirus DLL files, click the “Kill” button.

      4. Kill the following XPAntivirus DLL files:
        shlwapi.dll
        msplg7.dll
        wininet.dll
    • Step #2: How to Delete XPAntivirus Registry Keys and Values.

      1. Right-click on your Desktop > select “New” option > select “Text Document” (.txt file) option.

      2. Rename the .txt file as a .reg file and call it “Delete_Registry_XPAntivirus_
        Entities.reg”        . This renamed .reg file is a command that creates a shortcut to your Windows registry and allows you to easily delete registry values.

      3. Right-click and select the “Edit” option.

      4. Copy and paste the XPAntivirus keys listed below.

      5. In the menu bar, go to “File” > select “Save” > then click the “X” button to close the file.

      6. Double-click on the .reg file.

      7. When the message box appears saying “Are you sure you want to add the information in C:\DOCUME~1\%username%\Desktop\DELETE~1.REG to the registry?”, click the “Yes” button.

      8. When the message box appears saying “Information in C:\DOCUME~1\%username%
        \Desktop\DELETE~1.REG has been successfully entered into the registry.”        , click the “OK” button.

      9. The XPAntivirus registry keys have been deleted from your registry.

      10. Copy and paste the following XPAntivirus keys:
      11.

    • Step #3: How to Delete XPAntivirus Directories.

      1. To locate XPAntivirus directories, go to “Start” > “My Computer” > “Local Disk (C:)” > “Program Files” > “Show the contents of this folder”.

      2. Search and delete the XPAntivirus directories listed below.

      3. Right-click on the XPAntivirus folder and select “Delete”. option.

      4. When the message box appears saying “Are you sure you want to remove the folder [FOLDERNAME] and move all its contents to the Recycle Bin?”, click the “Yes” button.

      5. When the message box appears saying “Renaming, moving or deleting [FOLDERNAME] could make some programs not work. Are you sure you want to do this?”, click the “Yes” button.

      6. Search and delete the following XPAntivirus directories:

        XPAntivirus

    • Step #4: How to Search and Delete C:\WINDOWS\System32\shlwapi.dll.

      1. Go back to “Local Disk (C:)” > “Windows” > “System32″ > “Show the contents of this folder”.

      2. Search for shlwapi.dll.

      3. Right-click on the shlwapi.dll file and select the “Delete” option.

    • Step #5: How to Restore Original Default Home Page.

      1. Go to “Start” > “Control Panel” > “Internet Options”.

      2. Click on the General Tab > click the Use Default button under Home Page.

      3. Click “Apply” and then click the “OK” button.

      4. Open a Web browser to verify that your default homepage has been restored.

      Step #6: How to Remove the XPAntivirus Icons.

      1. If the XPAntivirus icons still remain on your Desktop, you can drag and drop them to the “Recycle Bin”.

      2. Reboot your computer to make sure all changes made for the removal of XPAntivirus are complete. If your computer still has issues, you should scan your computer for XPAntivirus with a spyware scanner.

    Congratulations!! You’ve completed our XPAntivirus manual removal tutorial.

    Submit XPAntivirus To Our Spyware Threat Research Labs

    Since XPAntivirus spyware components change constantly, you may come across application issues that prevent you from removing XPAntivirus completely.

    You can report XPAntivirus spyware components by using SpyHunter’s Free Support Log System. Our Support Log System takes snapshots of all the points of execution on your operating system, allowing us to precisely identify each and any problem.

    We encourage you to post your Support Logs on this article so we can help you come up with a custom fix.

    Below are the instructions on how to generate Support Logs using SpyHunter.

    Open SpyHunter > click on the “Generate Support Log” button > click on the “Copy to Clipboard” button to save your Support Logs > Post your Support Logs to this article.

    Disclaimer

    Warning!! Enigma Software Group can not be held responsible for any problems that may occur by using the information contained within this XPAntivirus removal guide. By following any of these XPAntivirus removal instructions, you agree to be bound by the disclaimer. If you do not agree, do not follow these XPAntivirus removal instructions. We make no guarantees that these XPAntivirus removal instructions will completely remove XPAntivirus. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means. In order to effectively clean and secure your computer, we recommend you purchase our spyware remover SpyHunter or seek professional help from a computer expert.


    ESG Support Center

    « WebSpyShield Removal Guide
    Adware Spyware Be Gone Removal Guide »

    This entry was posted by Grace Mathews on Friday, October 12th, 2007 at 1:40 pm and is filed under Spyware Alerts. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.

Comments are closed.