Monday, October 1, 2012

Remove XP Defender 2013 fake antispyware that combats good software to escape extermination

XP Defender 2013 (Windows XP Defender 2013) protects computers from good security solutions. That is, the program is an aggressive counterfeit. While claiming to scan computers for viruses, the rogue consists of viruses and adware itself.
The adware component pops up windows that look like alerts and menu of security solution. Similar fake antispyware user’s interface occurs in dozens and dozens of phony antivirus products.
The viral component oppresses host machine and interferes with legit software. It might detect and uninstall security solution. Hence removal of XP Defender 2013, if performed by means of true antivirus, is to engage well-armored tool capable of protecting its own components from viral aggression.
Click here to launch free scan followed by disinfection and cleanup of the leftovers in order to get rid of XP Defender 2013 and other threats posing a challenge to your PC.



 XP Defender 2013 fake security warnings:

 XP Defender 2013 Alert
 System hacked!
 Unknown programs is scanning your system registry right now! Identity theft detected!
  Security breach!
 Beware! Spyware infection was found. Your system security is at risk. Private information may get stolen, and your PC activity may get monitored. Click for an anti-spyware scan.

 XP Defender 2013 Alert
 Internet Connection alert!
 Suspicious network activity detected!
 Malware infection is possible!

XP Defender 2013 activation code \ license key (will disable fake alerts):

3425-814615-3990
XP Defender 2013 remover:


XP Defender 2013 manual removal instructions:
Delete infected files:
%CommonAppData%\
%LocalAppData%\
%LocalAppData%\.exe
%Temp%\
%UserProfile%\Templates\
Delete infected registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = "OFp"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\OFp "(Default)" = "Application"
HKEY_CURRENT_USER\Software\Classes\OFp "Content Type" = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\OFp\DefaultIcon "(Default)" = "%1"
HKEY_CURRENT_USER\Software\Classes\OFp\shell\open\command "(Default)" = ""%LocalAppData%\.exe" -a "%1" %*"
HKEY_CURRENT_USER\Software\Classes\OFp\shell\open\command "IsolatedCommand" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\OFp\shell\runas\command "(Default)" = ""%1" %*"
HKEY_CURRENT_USER\Software\Classes\OFp\shell\runas\command "IsolatedCommand" = ""%1" %*"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%LocalAppData%\.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe"

No comments: