Monday, August 4, 2008

Antispyware 2008 XP - description and removal methods

Antispyware 2008 XP (Antispyware2008XP) is the latest WinSpywareProtect clone, it use popular scare tactic (fake security warnings, hijacked homepage and desktop). Antispyware 2008 XP may be installed through trojan horses and system security holes. It displays false positives to trick you into buying "full" version of this malware. Moreover, Antispyware 2008 XP may slow your computer and cause system errors and slowdowns. We recomend to use Antispyware 2008 XP automatical remover (Spyware Doctor with antivirus) to get rid of this nasty malware.

Antispyware 2008 XP screenshots:



Antispyware 2008 XP automatical remover:

Antispyware 2008 XP manual removal instructions:
Delete Antispyware 2008 XP files:
as2008xp.exe
setup_100527_3_.exe
Antispyware 2008 XP registry entries:

HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp lgid
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp lid
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp pid
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp\2.1 installtime
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp\2.1 start counter
HKEY_CURRENT_USER\software\secure solutions\antispyware 2008 xp\2.1\config

6 comments:

Anonymous said...

I have also found it under a file called rhcn0cj0ejcj
so you got to look hard when trying to get rid of it. for it may hid it self in a wierd folder like mine.

Anonymous said...

i found the same file, i found the exe file but couldnt delete, can you suggest me a method of deleting it pls
thx

Anonymous said...

Rename it, you should be able to delete it after a reboot.
Also, go into msconfig and remove the check mark in from of the scr call in the startup list.

Anonymous said...

I have removed the files manually all the register keys of it. Now, no warning message is displayed. And no other activities of it. But, when I open the internet explorer it open with my home page i.e. with google but it disappear within second and message displayed " Insecure Internet Activity. Threat of virus attack...... to get full advanced real-time protection for PC and Internet activity, register KvmSecure.

..............buying option.......
continued to this website unprotected

the second line I mentioned is blocked so what to do please suggest me if anyone know what to do.

Anonymous said...

This virus is terrible. It seems to attatch it's self into different areas of the system registery. I believe I have isolated it, but when I run MSCONFIG it still show's up under the "start-up" tab under lphgcn9j0eaal and rhcln9j0eaal.

Not sure how to get rid of them from there. I un-check them so that they won't run....

Regards,

John

angrydad said...

My daughter, a college studed in the middle of midterms with complted assignments and papers on her laptop, has this virus. I have complained to the anti virus co. and was sent a program they said would correct what one of their marketing partners had done. It did not as it would not download on her computer nor tranfer when I tried to transfer it from a disk downloaded on my computer. They delayed and delayed saying thye would take care of the problem. Now her computer had gotten so much worse and she has access to a very few things on it, with no access to explorer. Since I can now not go in and delete this virus manually, and it appears that I can no longer run anything from her D drive, is there a way or a program that can be activated from the initial start up of her computer.
Thanks