Saturday, January 30, 2010

XP Guardian and Its Family come from One Root

Neither XP nor any other Windows version can be protected by XP Guardian. It is a counterfeit.
XP Guardian is based on a multiuse executables. Multiuse means they are used in different programs, though the main difference between those different programs is their names. Such a diversity is reasonable as it creates complications for malware experts and, consequentially, removal tools, as well as it prevents coverage of all the names by removal guides. So far, up to dozen of XP Guardian clones are detected. No doubt, there will be more. A current list is as follows:
1. Vista group: Vista Antispyware 2010, Vista Internet Security 2010, Antivirus Vista 2010, Vista Guardian, Vista Antivirus Pro 2010
2. XP group: Antivirus XP 2010, XP Antivirus Pro, XP AntiSpyware 2010
XP Internet Security, XP Internet Security 2010
3. Win7 group: Win 7 Internet Security 2010, Win7 Guardian, Win 7 Antivirus Pro, Win 7 Antispyware 2010
You need to remove XP Guardian to serf the web freely. That means, of course, that XP Guardian removal is what hacker pushing it attempt to avoid depriving you of access to the relevant websites capable of helping you get rid of XP Guardian. In addition, XP Guardian is annoying and noxious program code.
Click here to remove XP Guardian, accompanying threats and other infections detected in free scan (using Spyware Doctor).

XP Guardian screenshot:


XP Guardian removal tool:


XP Guardian manual removal instructions:
Delete XP Guardian files:
av.exe
WRblt8464P
Delete XP Guardian registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “av.exe” /START “firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “av.exe” /START “iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?

2 comments:

steel said...

thanks for the tip.. I gotta try this... this Xp Guardian really pissed me off...Thanks again

trestlovd said...

thanks it works! i hope it will also make my PC better