Home > Rogue Anti-Spyware > Antivirus XP

How to remove Antivirus XP?

What is Antivirus XP?

Antivirus XP is a new rogue anti-spyware program – a corrupt spyware remover, which uses popups and fake system notifications to convince the user that he is infected and therefore in need of an antispyware program. AntivirusXP is a clone of the recently popular malwares’ family which has produced many other clones as well, such as Antivirus XP 2010 or Antispyware XP. Like almost any other rogue Antivirus XP uses trojans, such as Zlob or Vundo, to enter the system.

Once inside and active, Antivirus XP will flood the user with popups and fake system notifications, supposedly to “inform” him of an infection. This information is usually false, which is beside the point, since the whole idea behind this method is to disinform the user and thus create a reason for him to buy an antispyware program. The rest is all down to browser hijackers – they will lead the user to Antivirus XP.

Antivirus XP is a scam and should be treated as such: do NOT download or buy this malicious application. Please, delete Antivirus XP as soon as possible.


Antivirus XP is Extremely dangerous

arrow Antivirus XP is a corrupt Anti-Spyware program
arrow Antivirus XP may spread via Trojans
arrow Antivirus XP may display fake security messages
arrow Antivirus XP may install additional spyware to your computer
arrow Antivirus XP may repair its files, spread or update by itself
arrow Antivirus XP violates your privacy and compromises your security
for Antivirus XP
detection
Note: Spyware doctor trial provides detection of parasite like Antivirus XP detection and limited protection for free. You can remove detected files, processes and registry entries yourself or purchase a full version. Learn why we have choosen spyware doctor.



Antivirus XP screenshots


Manual Antivirus XP removal


Important Note: Although it is possible to manually remove Antivirus XP, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyware Doctor or other malware and spyware removal applications found on 2-viruses.com. Stop these Antivirus XP processes:
Remove these Antivirus XP Registry Entries:
Remove these Antivirus XP files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other Antivirus XP infected files and get help in Antivirus XP removal by using free Spyware Doctor scanner. It comes with free real-time protection module that helps preventing Antivirus XP and similar threats.

Antivirus XP is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only Antivirus XP can help you to remove it after you download the trial version. As soon as the victim downloads Antivirus XP trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, Antivirus XP offers to buy the full version to fix these false errors. If the user agrees, Antivirus XP does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as Antivirus XP, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install Antivirus XP, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as Antivirus XP, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as Antivirus XP?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware ,

  1. Edith Goettle
    June 30th, 2008 at 21:26 | #1

    This program is a real pain in the butt to get rid of. It snuck in on a new computer and was extremely difficult to get rid of. Am still working on it 3 hours later.

  2. ladywho lunches
    July 9th, 2008 at 09:08 | #2

    I’ve used the smit cleaner with some success. Parts of the virus have been removed but one pop up remained and I now think it has reinstalled itself. Comments?

  3. July 9th, 2008 at 09:41 | #3

    Probably you missing out some trojan. Smithfraudfix do not removes all of them, thats why full spyware removers are better.

  4. Jan
    July 10th, 2008 at 10:15 | #4

    Hi I want to remove it manualy but Taskmanager cant open awell as regedit Can you help me on this please!!

    Thanx

    Jan

  5. 6th evolution
    July 18th, 2008 at 01:03 | #5

    I did a system restore to a point I knew was well before it got on my machine and that seemed to get rid of it.

  6. Russ
    August 8th, 2008 at 19:46 | #6

    Can and does this virus spread through the network?

  7. August 10th, 2008 at 09:14 | #7

    Russ : The spreading of it depends a bit on the way you got it. Usually it is drive-by-downloads, some freeware, infected web pages, but not through local network. Of couse, if you have not XP SP2, you are more vulnerable for direct attacks.

  8. Piconnier Christian
    August 11th, 2008 at 12:25 | #8

    possibilities of infection :
    I received 2 mails from CNN.COM and when i subsribe (for unsubscribe),One new version of adobe wants to be installed ???
    The installation failed ????

    My antivirus is AVAST Home edition (free)

    I have used Windows system restauration (one month ago) and now, all is OK

    Sorry for english, i am French.

  9. jonh
    August 19th, 2008 at 10:44 | #9

    Just got this on couple of our laptops, and removed it successfully. Just to let people know to check C:\Windows\Prefetch as well as it will have reference to some of the rogue random .exe’s.

    Also search for .scr on all local hard drives as well and look for files that were added around the date of infection as it took me a while to get rid of the screensaver.

    If you are a sys admin make sure that if you logon as an admin to remove it from your profile as well as this thing seems to replicate it round everyones profile that uses the laptop. The all users reference will remove it but it will still be there in other directories i.e. admin etc etc. What a fun morning !!

  10. August 20th, 2008 at 09:57 | #10

    Yes, Antivirus XP2008 has got me. First thing that went was my sentimental screensaver photo of my ‘ex’ and I in a happier moment! SPYDOCTOR tells me I have NO viruses or infections after scanning 3 times, but by morning it is back again with its 2 pop ups. One on the toolbar “you have 3002 viruses” and a big pop up on main screen – both prevent typing. And the keyboard is freezing.

    HOW was I most likely to have picked it up? Could a chain email do it? a friend sent me a FORWARDED chain email which I tried to DELETE without opening. I hit the green TICK too firmly and opened by mistake. There were at least 30 addressees from all over the world within this CHAIN email and my heart sank.
    Also I was BROWSING on property agents sites and going into their links. Can anyone say if a CHAIN EMAIL can pass this virus as well as via browsing mentioned.?

    I am taking the laptop to a professional ‘cleaner’ as friends bringing round downloaded “HELP” on disks made it worse.
    Many thanx for essential tips from others on this website.

  11. August 20th, 2008 at 14:37 | #11

    i m running XP SP 2…..i have got the same Antispyware problem….
    the popup windows come every time i try to open any folder……and ask to download the software…..i have downloaded the software and scaned the system….that found 3 infections…..n then asked me to buy the software…….

    how i can remove the problem…..?????

  12. Tom Hauck
    September 22nd, 2008 at 18:28 | #12

    This attacked my PC on startup without warning. It has deleted all my display settings except its own “warning” sign/link…and its user agreement link which does NOT offer a “decline” option. I was able to quarantine and remove it with Webroot Spy Sweeper but it has so many files/traces that I haven’t been able to delete it all. I’ve had it run for over 24 hours straight in the delete attempt and the farther it gets the slower it runs….I’m now going to try Spyware Doctor to see if it fares better. Hope to have a better result.

  13. Jonathan
    September 22nd, 2008 at 21:48 | #13

    I have to remove this off my friends computer i did it off my own laptop but hers keeps coming up with the blue screen of death saying physical memory dumping can someone tell me if this is something to do with the computer being slow because of uneeded files e.g. setup log files, temporary files etc
    Thank You

  14. October 4th, 2008 at 13:32 | #14

    Have tried to download antispyware xp 2008 removal, but this bug won’t allow me to. Can’t get my avg or adaware to work either.

    Any info would be appreciated

  15. jaclyn
    October 24th, 2008 at 04:01 | #15

    I also had this xp antispyware 2009 on my fathers computer and it changed computer settings, hijacked web browser and i could not download any legit antispyware applications via internet because this nasty virus would bring up pages and block me from being on any internet sites always defaulting back to its own “your computer is infected…. click now to download updates and clear your computer of viruses….yata yata yata and the blue screensaver stating fatal errors, etc. I did the following: start> all programs> accessories> system tools> system restore. I went back and restored the computer to a date 3 weeks prior to this infection when i knew the computer was running properly and did the system restore and this has seemed to have gotten rid of this virus. I don’t have much experience when it comes to fixing computers, etc. but i have seen a few other people say that they did the system restore and it rid them of the xp antispyware 2009 so i thought i’d give it a try and so far so good. after the computer restarted i uninstalled the previous expired norton antivirus files and immediately installed a new norton antivirus so i hope this is the end of that. i told my father he had expired antivirus protection which is probably how he became vulnerable to this virus in the first place.

  1. No trackbacks yet.