Tuesday, June 7

XP Antivirus 2008 – A antivirus or a virus?

When we surf all of us have one thing in common it is the concern for our safety while we surf. I guess most of us experience being attacked my malicious programs such as spywares, malwares and other members of their family. Some people are very unlucky being a victim of those destructive programs, some of them have experienced losing all their data on their hard drives. That’s why we look for the right software to protect us from those evils, but we must know that there are programs on the internet that claims that will effectively detect, remove and prevent from any destructive programs scattered all over the web, but the reality is far from the truth. A good is example of this is XP Antivirus 2008, this program is known as a rogue anti spyware program. Rogue antispyware programs are those that install themselves on your computer (often without your knowledge or permission) and use high-pressure tactics to get you to purchase the full version of the program.

If XP Antivirus ends up on your PC you will surely experience a rain of popups advertisements stating that your pc has tons of deadly viruses, spywares and malwares infections but in fact they are false scan results. It is use to convince you to immediately purchased their product, buying this product should be the last thing you should do.

How will I know If a popup ad is related ad to XP Antivirus 2008? – A popup window that is hard to close is one of the sign, closing their popup sometimes also leads to another window popping up. If you experienced those signs it is better just to close all the browser you are using or even much better to shutdown the computer rather than to deal with those annoying popups, it will also prevent virus from spreading. Don’t be tricked in buying their products if you see those fake scan results in all cases it is not true. If you are worried that you are infected with various spywares, malwares and viruses scan your computer with a trusted program.

How will I know If my pc has a XP Antivirus 2008 installed? -  If you suddenly notice a sudden decrease in your system performance then possibly XP antivirus is installed on your PC without you knowing.  Another sign is if you notice that your web browser is constantly being redirected to the same page, over and over again, specifically to their homepage, then you might have this program on your machine.

How can I remove XP Antivirus 2008 from my computer? -  to remove XP Antivirus 2008 you have two options. The first one which I recommend specially for those people that has minimal knowledge or just too afraid to touch their registry setting is to get any  trusted and reliable antivirus or antispyware programs. There are lots of legitimate software detection and protection program on the internet, consult PC experts to find the right program for you.

The second option is to remove it manually which is a bit risky because it requires editing your registry settings. This should be done by a professional computer technician. To remove this program manually  you can start by disabling each associated process on your computer. Below is a complete list of files, processes, and registry keys to disable XP antivirus. Once your done disabling the processes, delete the associated DLL and program files as well as any related folders. Finally, edit your system’s registry to remove all entries that work with the program. Before you do anything on your registry settings make sure to backup your registry.
Processes:

%program_files%xpantivirusxpantivirusupdate.exe
xpantivirus.exe
download.exe
%program_files%xpantivirussysbackupntoskrnl.exe
install_xp.exe
%program_files%xpantivirussysbackupntoskrnl.exe.md5
%program_files%xpantivirussysbackupexplorer.exe.md5
%program_files%xpantivirusunins000.exe
xpantivirusupdate.exe
%program_files%xpantivirussysbackupexplorer.exe
%program_files%xpantivirusunins000.exe
install_xp.exe
%program_files%xpantivirusxpantivirusupdate.exe
%program_files%xpantivirussysbackupntoskrnl.exe
%program_files%xpantivirussysbackupexplorer.exe
%program_files%xpantivirusxpantivirus.exe
%program_files%xpantivirusxpantivirus.exe

DLL Files:

%program_files%xpantivirussysbackupwininet.dll
%program_files%xpantivirussysbackupshlwapi.dll.md5
%program_files%xpantivirussysbackupshlwapi.dll
%program_files%xpantivirussysbackupwininet.dll.md5
%program_files%xpantivirussysbackupwininet.dll
%program_files%xpantivirussysbackupshlwapi.dll

Registry Keys:

HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionrun xp antivirus
HKEY_CURRENT_USERsoftwarexp antivirusoptions lastscan
HKEY_CURRENT_USERsoftwarexp antivirusoptions afterregisterurl
HKEY_CURRENT_USERsoftwarexp antivirusoptions autoscanonstartup
HKEY_CURRENT_USERsoftwarexp antivirusoptions
HKEY_CURRENT_USERsoftwarexp antivirusfirstrun
HKEY_CURRENT_USERsoftwarexp antivirusoptions helpurl
HKEY_CURRENT_USERsoftwarexp antivirusoptions labelurl
HKEY_CURRENT_USERsoftwarexp antivirusoptions minimizetotray
HKEY_CURRENT_USERsoftwarexp antivirusoptions offsiteurl
HKEY_CURRENT_USERsoftwarexp antivirusoptions programversion
HKEY_CURRENT_USERsoftwarexp antivirusoptions startwithwindows
HKEY_CURRENT_USERsoftwarexp antivirusoptions totalscans
HKEY_CURRENT_USERsoftwarexp antivirusoptions transactionkey
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilter displayname
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilter errorcontrol
HKEY_CURRENT_USERsoftwarexp antivirusoptions firstrunminimize
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 inno setup: user
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 installdate
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 installlocation
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionexplorermenuorderstart menuprogramsxp antivirus
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionrun xp antivirus
HKEY_CURRENT_USERsoftwarexp antivirusoptions autoupdate
HKEY_CURRENT_USERsoftwarexp antivirusoptions billingurl
HKEY_CURRENT_USERsoftwarexp antivirusoptions enableantirootkit
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 urlupdateinfo
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilter
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 displayname
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 helplink
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 inno setup: app path
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 inno setup: icon group
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 inno setup: setup version
HKEY_CURRENT_USERsoftwarexp antivirusoptions firstrunurl
HKEY_CURRENT_USERsoftwarexp antivirusoptions billingurlapproved
HKEY_CURRENT_USERsoftwaremicrosoftwindowsshellnoroammuicache c:program filesxpantivirusxpantivirus.exe
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 publisher
HKEY_CURRENT_USERsoftwarexp antivirusoptions updateurl
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilter imagepath
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilter start
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilter type
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilterenum
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilterenum count
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 nomodify
HKEY_CURRENT_USERsoftwarexp antivirusoptions aff
HKEY_CURRENT_USERsoftwarexp antivirusoptions registerurl
HKEY_CURRENT_USERsoftwarexp antivirusoptions startminimized
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilterenum initstartfailed
HKEY_CURRENT_USERsoftwarexp antivirusoptions enablesysbackup
HKEY_CURRENT_USERsoftwarexp antivirus
HKEY_CURRENT_USERsoftwarexp antivirusoptions checkhidden
HKEY_CURRENT_USERsoftwarexp antivirusoptions enableadvanced
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 norepair
HKEY_CURRENT_USERsoftwarexp antivirusoptions versionurl
HKEY_CURRENT_USERsoftwarexp antivirusregister
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerbrowser helper objects{9a19966f-ae0e-4699-8cce-9b6f5f1c352c}
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 quietuninstallstring
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 uninstallstring
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallxp antivirus_is1 urlinfoabout
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfilterenum nextinstance
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfiltersecurity
HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicesxpantivirusfiltersecurity security
HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionrun xp antivirus

Program Files:

%program_files%xpantivirusxpantivirus.url
%program_files%xpantivirusxpantivirus_log.txt
%program_files%xpantivirusunins000.dat
xpantivirus.lnk
xpantivirus.url
%program_files%xpantivirusbackup.lst
%program_files%xpantivirushelper.sys
%program_files%xpantiviruspn.cfg
%program_files%xpantivirusver.dat
%program_files%xpantiviruswhitelist.cfg
%program_files%xpantivirusspyware.dat
%common_programs%xp antivirusuninstall xpantivirus.lnk
%common_programs%xp antivirusxpantivirus on the web.lnk
%common_programs%xp antivirusxpantivirus.lnk
%desktopdirectory%xpantivirus.lnk
%profile%application datamicrosoftinternet explorerquick launchxpantivirus.lnk

Associated Folders:

%program_files%xpantivirus
%program_files%xpantivirussysbackup
%common_programs%xp antivirus
%program_files%xpantivirusquarantine
source : http://pcremix.com/

No comments:

Post a Comment