Home Spyware Database "Remove XP Antivirus Protection"

XP Antivirus Protection  

XP Antivirus Protection Description

XP Antivirus Protection, also known as XPAntivirus Protection, is a rogue anti-spyware program. XP Antivirus Protection may install onto your computer by a Trojan (such as Zlob) through security loopholes in the computer system. As soon as XP Antivirus Protection is installed, it will issue (as the other rogues) an enormous amount of of popups and rogue security alerts "informing" you about supposed spyware threats. XP Antivirus Protection is also able to use it's fake system scanner and generate endless scans insisting on terrible security risks due to the spyware flood supposedly found on your system. However, keep in mind that, XP Antivirus Protection and Zlob are the major spyware threats found in your system.

XPAntivirus Protection is only capable of generating this ridiculous amount of system scans and popups in an attempt to trick you into buying the full XPAntivirus Protection program to remove the supposed threats. If you click on any message generated by XP Antivirus Protection, you're most likely to be redirected to XP Antivirus Protection's homepage (or another rogue website), where the full XPAntivirus Protection version of the program is sold as a legit software.

How can I get rid of XP Antivirus Protection?

The most common spyware removal tactic is to uninstall XP Antivirus Protection by using the "Add/Remove Programs" utility. However, as there may still be hidden XP Antivirus Protection files, it's possible that XP Antivirus Protection will reappear after reboot. Follow the XP Antivirus Protection detection and removal methods below.

XP Antivirus Protection or XPAntivirus Protection Automatic Detection (Recommended)

Is your PC infected with XP Antivirus Protection? To safely & quickly detect XP Antivirus Protection, we highly recommend you...

Download SpyHunter's FREE XP Antivirus Protection Scanner.

SpyHunter's free version is only for spyware detection. If SpyHunter's spyware scanner detects XP Antivirus Protection on your PC, you have the option of purchasing SpyHunter's spyware removal tool to remove XP Antivirus Protection and other spyware threats.

XP Antivirus Protection Manual Removal Instructions

Below is a list of XP Antivirus Protection manual removal instructions and XP Antivirus Protection components listed to help you remove SpyCrush from your PC. Backup Reminder: Always be sure to back up your PC before making any changes.

Note: This manual removal process may be difficult and you run the risk of destroying your computer. We recommend that you use SpyHunter's spyware detection tool to check for XP Antivirus Protection.

Step 1 : Use Windows File Search Tool to Find XP Antivirus Protection Path

1. Go to Start > Search > All Files or Folders.
2. In the "All or part of the the file name" section, type in "XP Antivirus Protection" file name(s).
3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
4. When Windows finishes your search, hover over the "In Folder" of "XP Antivirus Protection", highlight the file and copy/paste the path into the address bar. Save the file's path on your clipboard because you'll need the file path to delete XP Antivirus Protection in the following manual removal steps.
Read more about How to Find XP Antivirus Protection with File Search Tool

Step 2 : Use Windows Task Manager to Remove XP Antivirus Protection Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the "Image Name" button to search for "XP Antivirus Protection" process by name.
3. Select the "XP Antivirus Protection" process and click on the "End Process" button to kill it.
4. Remove the "XP Antivirus Protection" processes files:
5. %ProgramFiles%\xpantivirus\sysbackup\explorer.exe %ProgramFiles%\xpantivirus\sysbackup\ntoskrnl.exe %ProgramFiles%\xpantivirus\unins000.exe %ProgramFiles%\xpantivirus\xpantivirusupdate.exe xpantivirusupdate.exe install_xp.exe xpantivirus.exe
   Read more about How to kill XP Antivirus Protection Processes

Step 3 : Use Registry Editor to Remove XP Antivirus Protection Registry Values

1. To open the Registry Editor, go to Start > Run > type regedit and then press the "OK" button.
2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
3. To delete "XP Antivirus Protection" value, right-click on it and select the "Delete" option.
4. Locate and delete "XP Antivirus Protection" registry entries:
5. HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\security security HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\security HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum nextinstance HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 urlinfoabout HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 uninstallstring HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 quietuninstallstring HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9a19966f-ae0e-4699-8cce-9b6f5f1c352c} HKEY_CURRENT_USER\software\xp antivirus\register HKEY_CURRENT_USER\software\xp antivirus\options versionurl HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 norepair HKEY_CURRENT_USER\software\xp antivirus\options enableadvanced HKEY_CURRENT_USER\software\xp antivirus\options checkhidden HKEY_CURRENT_USER\software\xp antivirus HKEY_CURRENT_USER\software\xp antivirus\options enablesysbackup HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum initstartfailed HKEY_CURRENT_USER\software\xp antivirus\options startminimized HKEY_CURRENT_USER\software\xp antivirus\options registerurl HKEY_CURRENT_USER\software\xp antivirus\options aff HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 nomodify HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum count HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter type HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter start HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter imagepath HKEY_CURRENT_USER\software\xp antivirus\options updateurl HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 publisher HKEY_CURRENT_USER\software\microsoft\windows\shellnoroam\muicache c:\program files\xpantivirus\xpantivirus.exe HKEY_CURRENT_USER\software\xp antivirus\options billingurlapproved HKEY_CURRENT_USER\software\xp antivirus\options firstrunurl HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: setup version HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: icon group HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: app path HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 helplink HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 displayname HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 urlupdateinfo HKEY_CURRENT_USER\software\xp antivirus\options enableantirootkit HKEY_CURRENT_USER\software\xp antivirus\options billingurl HKEY_CURRENT_USER\software\xp antivirus\options autoupdate HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\xp antivirus HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 installlocation HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 installdate HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: user HKEY_CURRENT_USER\software\xp antivirus\options firstrunminimize HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter errorcontrol HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter displayname HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run xp antivirus HKEY_CURRENT_USER\software\xp antivirus\options transactionkey HKEY_CURRENT_USER\software\xp antivirus\options totalscans HKEY_CURRENT_USER\software\xp antivirus\options startwithwindows HKEY_CURRENT_USER\software\xp antivirus\options programversion HKEY_CURRENT_USER\software\xp antivirus\options offsiteurl HKEY_CURRENT_USER\software\xp antivirus\options minimizetotray HKEY_CURRENT_USER\software\xp antivirus\options labelurl HKEY_CURRENT_USER\software\xp antivirus\options helpurl HKEY_CURRENT_USER\software\xp antivirus\options HKEY_CURRENT_USER\software\xp antivirus\firstrun HKEY_CURRENT_USER\software\xp antivirus\options lastscan HKEY_CURRENT_USER\software\xp antivirus\options autoscanonstartup HKEY_CURRENT_USER\software\xp antivirus\options afterregisterurl
   Read more about How to Remove XP Antivirus Protection Registry Entries

Step 4 : Use Windows Command Prompt to Unregister XP Antivirus Protection DLL Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the "OK" button.
2. Type "cd" in order to change the current directory, press the "space" button, enter the full path to where you believe the XP Antivirus Protection DLL file is located and press the "Enter" button on your keyboard. If you don't know where XP Antivirus Protection DLL file is located, use the "dir" command to display the directory's contents.
3. To unregister "XP Antivirus Protection" DLL file, type in the exact directory path + "regsvr32 /u" + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u XP Antivirus Protection.dll) and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
4. Search and unregister "XP Antivirus Protection" DLL files:
5. %ProgramFiles%\xpantivirus\sysbackup\shlwapi.dll %ProgramFiles%\xpantivirus\sysbackup\wininet.dll
   Read more about How to Remove XP Antivirus Protection DLL Files

Step 5 : Detect and Delete Other XP Antivirus Protection Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the "OK" button.
2. Type in "dir /A name_of_the_folder" (for example, C:\Spyware-folder), which will display the folder's content even the hidden files.
3. To change directory, type in "cd name_of_the_folder".
4. Once you have the file you're looking for type in "del name_of_the_file".
5. To delete a file in folder, type in "del name_of_the_file".
6. To delete the entire folder, type in "rmdir /S name_of_the_folder".
7. Select the "XP Antivirus Protection" process and click on the "End Process" button to kill it.
8. Remove the "XP Antivirus Protection" processes files:
9. %desktopdirectory%\xpantivirus.lnk %profile%\application data\microsoft\internet explorer\quick launch\xpantivirus.lnk %common_programs%\xp antivirus\xpantivirus on the web.lnk %common_programs%\xp antivirus\uninstall xpantivirus.lnk %common_programs%\xp antivirus\xpantivirus.lnk %ProgramFiles%\xpantivirus\spyware.dat %ProgramFiles%\xpantivirus\whitelist.cfg %ProgramFiles%\xpantivirus\ver.dat %ProgramFiles%\xpantivirus\pn.cfg %ProgramFiles%\xpantivirus\backup.lst %ProgramFiles%\xpantivirus\helper.sys %ProgramFiles%\xpantivirus\xpantivirus_log.txt %ProgramFiles%\xpantivirus\xpantivirus.url %ProgramFiles%\xpantivirus\sysbackup\shlwapi.dll %ProgramFiles%\xpantivirus\sysbackup\shlwapi.dll.md5 %ProgramFiles%\xpantivirus\sysbackup\wininet.dll.md5 %ProgramFiles%\xpantivirus\sysbackup\wininet.dll %ProgramFiles%\xpantivirus\unins000.dat %ProgramFiles%\xpantivirus\sysbackup\explorer.exe %ProgramFiles%\xpantivirus\sysbackup\explorer.exe.md5 %ProgramFiles%\xpantivirus\sysbackup\ntoskrnl.exe.md5 %ProgramFiles%\xpantivirus\sysbackup\ntoskrnl.exe %ProgramFiles%\xpantivirus\unins000.exe %ProgramFiles%\xpantivirus\xpantivirusupdate.exe xpantivirusupdate.exe install_xp.exe xpantivirus.exe
   Read more about How to Delete Harmful Files

XP Antivirus Protection Recommendation

RECOMMENDED: To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good spyware cleaner/remover to track XP Antivirus Protection and automatically remove XP Antivirus Protection as well as other spyware, adware, trojans, and virus threats in your PC.

If you believe you have XP Antivirus Protection installed on your computer, check for XP Antivirus Protection with SpyHunter's Free Spyware Scanner.

Download SpyHunter's FREE XP Antivirus Protection Scanner.

SpyHunter's free version is only for spyware detection. To remove XP Antivirus Protection and other spyware threats you can purchase SpyHunter's spyware removal tool. Since new XP Antivirus Protection files are constantly being released, it is normally advised to run SpyHunter's scanner weekly to get the latest updates on XP Antivirus Protection and other spyware threats.

To learn more on XP Antivirus Protection, see our XP Antivirus Protection resource section below.

---

More XP Antivirus Protection Resources

What is Spyware?

XP Antivirus Protection is a type of Spyware.

Spyware is any malware or software used to spy or track your computer activity. While some spyware is not malicious and is intentionally installed by parents or employers to monitor Internet activity, spyware may be installed maliciously. Often spyware can come bundled with downloads of free software, and may track your Internet activity or may steal usernames and passwords, credit card numbers, and other personal financial information.

Think you have XP Antivirus Protection? Run SpyHunter's FREE XP Antivirus Protection scan and automatically detect XP Antivirus Protection on your PC.

Back to Top

XP Antivirus Protection Prevention Rules

Protect your computer from XP Antivirus Protection and other spyware by following these four easy prevention rules.

Rule #1: Keep your Windows Security up-to-date

Microsoft provides updates weekly and can always be downloaded manually from the Microsoft website.
Tip: Regularly visit Windows Update and set your computer to receive security & critical updates automatically.

To get Microsoft Update, go to IE > Tools > Windows Update > Product Updates, and select "ALL High-Priority Security Updates" from the list.

Then open IE and go to Internet Options > Security > Internet, then press "Default Level", then OK. Now press "Custom Level."

Rule #2: Download and install a reliable anti-spyware software

A good anti-spyware software that recognizes current XP Antivirus Protection spyware as well as other forms of spyware can can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively reverse the damage of your computer and detect XP Antivirus Protection automatically.

Download SpyHunter's Free XP Antivirus Protection Scanner

SpyHunter's free version is only for spyware detection. To remove XP Antivirus Protection and other spyware threats, you can purchase SpyHunter's spyware removal tool.

Rule #3: Install and keep your firewall turned on

A firewall is essential for a complete protection of your PC. Make sure that your firewall is always turned on. A firewall can prevent unwanted software like XP Antivirus Protection from infecting your computer.

Rule #4: Keep your anti-spyware definitions up-to-date

Since new XP Antivirus Protection files can be created every day, it is important to keep your anti-spyware program up-to-date. Your anti-spyware scanner should have an update feature where with a click of a button you can get new spyware definitions instantly. Often, an anti-spyware software will open an update window reminding you that there are new updates available.

Back to Top

User Comments

There are no comments posted for this page.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top