What is Antivirus XP?
Once inside and active, AntivirusXP2008 will flood the user with popups and fake system notifications, supposedly to "inform" him of an infection. This information is usually false, which is beside the point, since the whole idea behind this method is to disinform the user and thus create a reason for him to buy an antispyware program. The rest is all down to browser hijackers - they will lead the user to Antivirus XP 2008.
Antivirus XP is a scam and should be treated as such: do NOT download or buy it and block it's websites Online-Security-Systems.com, Anti-Virus-XP.com and A-VXP08.net using your HOSTS file.
Antivirus XP is Extremely dangerous
Antivirus XP is a corrupt Anti-Spyware program Antivirus XP may spread via Trojans Antivirus XP may display fake security messages Antivirus XP may install additional spyware to your computer Antivirus XP may repair its files, spread or update by itself Antivirus XP violates your privacy and compromises your security
Manual Antivirus XP removal
Important Note: Although it is possible to manually remove Antivirus XP, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using automatic spyware removal applications found on 2-viruses.com.
Remove these Antivirus XP processes:
Remove these Antivirus XP DLL files:
Remove these Antivirus XP Registry files:
Remove these Antivirus XP files:
Antivirus XP is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only Antivirus XP can help you to remove it after you download the trial version. As soon as the victim downloads Antivirus XP trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, Antivirus XP offers to buy the full version to fix these false errors. If the user agrees, Antivirus XP not only does not fix the errors, but it takes the user’s money and may even install additional spyware into the victim’s computer.
Some Rogue Anti-Spyware, such as Antivirus XP, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install Antivirus XP, which is another way for Rogue Anti-Spyware to spread itself.
Most of rogue Anti-Spyware, such as Antivirus XP, is nearly impossible to remove manually.
June 30th, 2008 at 9:26 pm This program is a real pain in the butt to get rid of. It snuck in on a new computer and was extremely difficult to get rid of. Am still working on it 3 hours later.
July 9th, 2008 at 9:08 am I’ve used the smit cleaner with some success. Parts of the virus have been removed but one pop up remained and I now think it has reinstalled itself. Comments?
July 9th, 2008 at 9:41 am Probably you missing out some trojan. Smithfraudfix do not removes all of them, thats why full spyware removers are better.
July 10th, 2008 at 10:15 am Hi I want to remove it manualy but Taskmanager cant open awell as regedit Can you help me on this please!! Thanx Jan
July 18th, 2008 at 1:03 am I did a system restore to a point I knew was well before it got on my machine and that seemed to get rid of it.
August 8th, 2008 at 7:46 pm Can and does this virus spread through the network?
August 10th, 2008 at 9:14 am Russ : The spreading of it depends a bit on the way you got it. Usually it is drive-by-downloads, some freeware, infected web pages, but not through local network. Of couse, if you have not XP SP2, you are more vulnerable for direct attacks.
August 11th, 2008 at 12:25 pm possibilities of infection : I received 2 mails from CNN.COM and when i subsribe (for unsubscribe),One new version of adobe wants to be installed ??? The installation failed ???? My antivirus is AVAST Home edition (free) I have used Windows system restauration (one month ago) and now, all is OK Sorry for english, i am French.
August 19th, 2008 at 10:44 am Just got this on couple of our laptops, and removed it successfully. Just to let people know to check C:\Windows\Prefetch as well as it will have reference to some of the rogue random .exe’s. Also search for .scr on all local hard drives as well and look for files that were added around the date of infection as it took me a while to get rid of the screensaver. If you are a sys admin make sure that if you logon as an admin to remove it from your profile as well as this thing seems to replicate it round everyones profile that uses the laptop. The all users reference will remove it but it will still be there in other directories i.e. admin etc etc. What a fun morning !!
August 20th, 2008 at 9:57 am Yes, Antivirus XP2008 has got me. First thing that went was my sentimental screensaver photo of my ‘ex’ and I in a happier moment! SPYDOCTOR tells me I have NO viruses or infections after scanning 3 times, but by morning it is back again with its 2 pop ups. One on the toolbar “you have 3002 viruses” and a big pop up on main screen - both prevent typing. And the keyboard is freezing. HOW was I most likely to have picked it up? Could a chain email do it? a friend sent me a FORWARDED chain email which I tried to DELETE without opening. I hit the green TICK too firmly and opened by mistake. There were at least 30 addressees from all over the world within this CHAIN email and my heart sank. Also I was BROWSING on property agents sites and going into their links. Can anyone say if a CHAIN EMAIL can pass this virus as well as via browsing mentioned.? I am taking the laptop to a professional ‘cleaner’ as friends bringing round downloaded “HELP” on disks made it worse. Many thanx for essential tips from others on this website.
August 20th, 2008 at 2:37 pm i m running XP SP 2…..i have got the same Antispyware problem…. the popup windows come every time i try to open any folder……and ask to download the software…..i have downloaded the software and scaned the system….that found 3 infections…..n then asked me to buy the software……. how i can remove the problem…..?????
September 22nd, 2008 at 6:28 pm This attacked my PC on startup without warning. It has deleted all my display settings except its own “warning” sign/link…and its user agreement link which does NOT offer a “decline” option. I was able to quarantine and remove it with Webroot Spy Sweeper but it has so many files/traces that I haven’t been able to delete it all. I’ve had it run for over 24 hours straight in the delete attempt and the farther it gets the slower it runs….I’m now going to try Spyware Doctor to see if it fares better. Hope to have a better result.
September 22nd, 2008 at 9:48 pm I have to remove this off my friends computer i did it off my own laptop but hers keeps coming up with the blue screen of death saying physical memory dumping can someone tell me if this is something to do with the computer being slow because of uneeded files e.g. setup log files, temporary files etc Thank You
October 4th, 2008 at 1:32 pm Have tried to download antispyware xp 2008 removal, but this bug won’t allow me to. Can’t get my avg or adaware to work either. Any info would be appreciated
October 24th, 2008 at 4:01 am I also had this xp antispyware 2009 on my fathers computer and it changed computer settings, hijacked web browser and i could not download any legit antispyware applications via internet because this nasty virus would bring up pages and block me from being on any internet sites always defaulting back to its own “your computer is infected…. click now to download updates and clear your computer of viruses….yata yata yata and the blue screensaver stating fatal errors, etc. I did the following: start> all programs> accessories> system tools> system restore. I went back and restored the computer to a date 3 weeks prior to this infection when i knew the computer was running properly and did the system restore and this has seemed to have gotten rid of this virus. I don’t have much experience when it comes to fixing computers, etc. but i have seen a few other people say that they did the system restore and it rid them of the xp antispyware 2009 so i thought i’d give it a try and so far so good. after the computer restarted i uninstalled the previous expired norton antivirus files and immediately installed a new norton antivirus so i hope this is the end of that. i told my father he had expired antivirus protection which is probably how he became vulnerable to this virus in the first place.