Monday, September 1, 2008

Remove XPAntivirus 2009 - XP Antivirus 2009 Remover

XPAntivirus 2009 is a new version of previously reviewed XPAntivirus 2008 rogue anti-spyware. It have some new "features" and infector files. If your computer is already infected - use XPAntivirus 2009 remover (Spyware Doctor + antivirus) or manual removal instructions. Remember that XPAntivirus 2009 is extremely dangerous rogue anti-spyware, it may slow your computer, open security holes to install other spyware and steal personal data.

XPAntivirus 2009 screenshot:


XPAntivirus 2009 automatical removal tool:

XPAntivirus 2009 manual removal instructions:
Delete XPAntivirus 2009 files:

xpa.exe
XPAntivirus.exe
scui.cpl
XP Antivirus 2008.lnk
XP Antivirus 2008
Uninstall XP Antivirus 2008.lnk
XP Antivirus 2008.lnk
krln32.exe
scvh0st.exe
trjdwnl.dll
shlext32.exe
Delete XPAntivirus 2009 registry entries:
HKEY_CURRENT_USER\Software\XP antivirus
HKEY_CURRENT_USER\Software\
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\XPAntivirusFilter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XPAntivirusFilter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{4e7bd74f-2b8d-469e-dcf7-f96da086b434}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{6C6B8C69-9285-4D94-8492-9E920C8C2B65}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{74f25a2c-22b3-4023-8f1a-ca616c30a8b5}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{9a19966f-ae0e-4699-8cce-9b6f5f1c352c}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\{D714A94F-123A-45CC-8F03-040BCAF82AD6}\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Uninstall\XP antivirus_is1\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Run “XP Antivirus”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “mmnext06″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “shellbn”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “System”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run “Windows Framework”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “”

No comments: