Home > Rogue Anti-Spyware > XP Anti-virus

How to remove XP Anti-virus?

February 21st, 2011

What is XP Anti-virus?

XP Anti-virus is fake antivirus software which mostly comes unexpected. It is a very close resemblance of Vista Anti-virus (2011), Win 7 Anti-virus (2011) or many other crimewares that will change their name according to OS found running on your computer. All these computer viruses hailing from multi-named virus family seem to be getting way more active these days as they infect computers in unbelievable frequency. Be aware that your computer may also get infected, so install ‘licensed’ anti-spyware to have the real time protection and avoid security holes that are used by XP Anti-virus 2011 for getting inside.

XP Anti-virus is installed with a help of Trojans but may also be propagated through fraudulent social engineering routines, like browser hijacking. The reason why it is reloaded instead of any other executable you want is additional modification of the registry. XP Anti-virus 2011 may also drop some harmless files in your system with the intension to find them and return as malware in its fake scan reports. As you may have realized, you will also receive tons of alerts and scanners that all will announce computer problems detected and them will offer to purchase XP Anti-virus 2011 license. This hazardous program will completely bombard you with such alerts:

XP Anti-virus 2011 Firewall Alert
XP Anti-virus 2011 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords

Of course, it must be remembered that XP Anti-virus has no capabilities to find and remove spyware detected. Just like any other cyber threat from this malicious name-changing family, it will generate its misleading ads until you won’t get rid of it. All its pop-ups will be finished with the same event each time – recommending you to install and activate licensed copy of XP Anti-virus 2011. Note that full version is not for free, so later will find you ripped off. Never pay for this nasty rogue and its creators!

Please, remove XP Anti-virus 2011 because if left eventually it will make your system slow and almost functional. Use this removal guide and also run Spyhunter or Malwarebytes Anti-Malware in order to remove it completely. To disable XP Anti-virus 2011, use this code of registration: 1147-175591-6550 or 9443-077673-5028 (updated 2012.01.14).


XP Anti-virus is Extremely dangerous

arrow XP Anti-virus is a corrupt Anti-Spyware program
arrow XP Anti-virus may spread via Trojans
arrow XP Anti-virus may display fake security messages
arrow XP Anti-virus may install additional spyware to your computer
arrow XP Anti-virus may repair its files, spread or update by itself
arrow XP Anti-virus violates your privacy and compromises your security
Download Spyhunter
for XP Anti-virus detection

Note: Spyhunter trial provides detection of parasite like XP Anti-virus and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.



XP Anti-virus screenshots


XP Anti-virus screenshot

Manual XP Anti-virus removal


Important Note: Although it is possible to manually remove XP Anti-virus, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyhunter or other malware and spyware removal applications found on 2-viruses.com.
Stop these XP Anti-virus processes:
Remove these XP Anti-virus Registry Entries:
Remove these XP Anti-virus files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other XP Anti-virus infected files and get help in XP Anti-virus removal by using free Spyhunter scanner. It comes with free real-time protection module that helps preventing XP Anti-virus and similar threats.

XP Anti-virus is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only XP Anti-virus can help you to remove it after you download the trial version. As soon as the victim downloads XP Anti-virus trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, XP Anti-virus offers to buy the full version to fix these false errors. If the user agrees, XP Anti-virus does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as XP Anti-virus, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install XP Anti-virus, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as XP Anti-virus, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as XP Anti-virus?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware

  1. iemma23
    April 13th, 2011 at 20:01 | #1

    My computer was infected with XP anti-virus 2011. Completely unable to open a browser or email. I was told to either wait 6 days and the virus would self destruct or turn ahead the clock on the computer and the same would happen immediately. I waited the 6 days and sure enough it was gone without a trace. I am too much a novice to try the safe mode removal so I was delighted to see it gone.

  2. eric wilson
    April 27th, 2011 at 23:06 | #2

    “either wait 6 days and the virus would self destruct or turn ahead the clock on the computer ” seems to have worked. thank you

    • April 27th, 2011 at 23:46 | #3

      Eric : Unlikely. The trojan should not be removed, but stays dormant for new signal of malware authors. I would recommend scanning the PC.

  3. Lee Phillips
    May 10th, 2011 at 07:51 | #4

    I tried using the above code of registration (1147-175591-6550)
    to disable XP anti-virus 2011. However, this number was
    apparently invalid. Is there an updated registration number
    that I can use to disable it? I intend to buy a full copy of
    Spyware Doctor as soon as I can disable this virus. Thanks
    Lee

  4. Bec Gale
    May 14th, 2011 at 06:21 | #5

    Hey, I have been trying to get rid of this thing for hours, I tried your code and it just registered it and uploaded again, please help :(

  5. daniel foster
    May 15th, 2011 at 02:18 | #6

    The code needs dashes in it, hope this helps :)

  6. simon filmen
    May 15th, 2011 at 22:28 | #7

    hey eric, i might try that. . .

  7. simon filmen
    May 15th, 2011 at 22:30 | #8

    simon filmen :

    eric wilson :
    “either wait 6 days and the virus would self destruct or turn ahead the clock on the computer ” seems to have worked. thank you

    yup

    it worked. thank u

  8. Bec Gale
    May 22nd, 2011 at 05:48 | #9

    The code kinda activated the program, How do i remove it now? my computers getting sooo slow, and its been longer then 6 days and hasnt dissapeared :(

  9. todd
    May 25th, 2011 at 19:28 | #11

    Click crtl-alt-del and look for a process like lig.exe (or j, could be lji but not jqs.exe=java quick start) and end it. Then wait for the process to end (just a minute or two) and you can run malwarebytes or some other anti-virus software to take some of it down. Afterwards follow the advice above and clear up your registry to remove it completely. I think it waits until you run into something on the internet that activates it again. I’m sorry I don’t have the exact .exe name; I was trying to get rid of it fast because my computer was crashing. Still I recall it to be nearest to that lig/lij/lji.exe type name.

  10. Angeelicious
    May 28th, 2011 at 04:28 | #12

    Okay so for two days Ive been seeing all that fake “I have a virus” crap popping up, I cant open up any programs, not even IE and all of a sudden Im on my lappy and the net opens but no more XP AV 2011 popups…but I still cant open anything up…WTF is that about???I also checked my processes and dont have any 3-letter processes at all…I already had Mal-warebytes installed but I cant access it at all, not even manually…

  11. Angeelicious
    May 28th, 2011 at 04:36 | #13

    Oh… Then when I DL’ed SPYWARE Doctor an error message pops up when I try to install it that says “This file does not have a program associated with it for performing this action. Create an association in the Folder Options control panel.”

    • May 28th, 2011 at 13:33 | #14

      Angeelicious
      Try creating another user on your PC and running removal programs from that new user.

  12. Moveebuff
    June 24th, 2011 at 03:19 | #15

    I downloaded stopzilla for free and it detected over 30 infections on my computer and it removed the windows xp virus. I had to load the info onto a flash drive because I couldn’t even get a browser. All my files were hidden and I couldn’t access them at all. I thought I lost everything so I’m happy that I was able to recover them.

    • June 24th, 2011 at 11:28 | #16

      Moveebuff: When using stopzilla, make sure you double check each files it detects. Stopzilla is very aggressive at detecting, so it has more than one false positives. That is my experience with it.

  13. bustachic
    June 28th, 2011 at 01:51 | #17

    I bought the program without reading this =( I wanna get my $59.95 back. I cannot find contact info to reach their customer service. My computer got infected and I had to buy another security protection for $59.95. Can anyone help me, PLEASE?!?!

    • June 28th, 2011 at 09:44 | #18

      bustachic : Contact your bank, not their customer care.

  14. Beachlover46
    December 27th, 2011 at 04:33 | #19

    I had this virus five months ago and my system was completely disabled – couldn’t run any scanners, my anti virus software was infected, couldn’t run in safe mode, couldn’t use a usb with Malwarebytes installed, couldn’t use system restore. So I gave up and left the laptop off for 5 months and a couple of days ago I decided I have to try again to remove the virus and when I turned it on there were no fake alerts and internet explorer seemed to work. I was able to download Malwarebytes and Avast (I had to remove my old infected Avira). The scans were many and thorough until all corrupted files were removed. I had to turn on automatic updates as well. So leaving the computer dorment must disable the virus and then you can download real anti virus software to get rid of it.

  1. No trackbacks yet.