How to remove XP Defender Pro

Thursday, March 18th, 2010 at 12:34 am
Home » Rogue Antispyware » XP Defender Pro

XP Defender Pro description

XP Defender Pro is a rogue protection program which is also a clone of XP Internet Security 2010 malware. It comes with a download of trojan horse. When user’s computer is started parasite installs itself automatically and begins fake scans. As other malwares this one also tries to trick user into thinking their PC is infected and make them purchase illegal security tool.

If you noticed your computer’s desktop is flooded with all kind of system protection warnings and security alerts, note, that the parasite is within your machine. These notifications are harmless and you can simply ignore it. It can’t process any security service. XP Defender Pro is only dangerous when the full version of it is installed to your computer. However, this action has to be done with your knowledge. That is why our concern is that you do not purchase it. Choose a decent anti-spyware application and get rid of the malware as soon as possible.

XP Defender Pro is a Rogue Antispyware software

How to manually remove XP Defender Pro

To remove XP Defender Pro spyware you must block XP Defender Pro sites, stop and remove processes, unregister DLL files, search and delete all other XP Defender Pro files and registry utility. Follow the XP Defender Pro detection and removal instructions below.

The most typical software removal method is to remove XP Defender Pro by using "Add or Remove Programs" service. However there may be hidden XP Defender Pro files, running processes and registries in your computer, so XP Defender Pro may recreate all other files after reboot.

XP Defender Pro manual removal instructions

Stop and remove XP Defender Pro processes:
ave.exe Read more how to kill XP Defender Pro processes

Locate and delete XP Defender Pro registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = "%AppData%\ave.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = "%1" %*
HKEY_CURRENT_USER\Software\Classes\.exe | @ = "secfile"
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = "application/x-msdownload"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = "%AppData%\ave.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = "%1" %* Read more how to delete XP Defender Pro registry entries
Download RegistryBooster 2010 to scan errors caused by XP Defender Pro

Detect and delete other XP Defender Pro files:
%AppData%\ave.exe

We strongly recommend you to use spyware remover to track XP Defender Pro and automaticaly remove XP Defender Pro processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , ,

8 Responses to

XP Defender Pro

  1. ANdy
    March 30th, 2010 at 6:50 am

    I read your page about removing XP Defender PRo which I have ‘caught’. I understand that the trojan can be removed by activiating their license, which will remove the popups. I also read that this is a scam. IF I use your product to remove the trojan, are you also looking to charge me for this service? If so what is the difference? Thanks, Andy

    Reply

    Luciana Reply:
    March 30th, 2010 at 11:26 pm

    The trojans and other stuff reported by XP Defender Pro are not real. The program reports imaginary things to push you into buying the license while it’s XP Defender Pro itself that causes all the problems. This is why this thing is called a scam. It is installed without your permission, it messes up system settings and it demands your money for these “functions”.

    Reply

  2. John McCann
    April 2nd, 2010 at 7:59 pm

    Had to remove from c:\windows\prefetch directory.

    Reply

  3. Jason Buege
    April 7th, 2010 at 3:06 pm

    Sorry folks, This one was tough. I made the mistake of shuting the system down when it was being detected. This has been the worst malicious software I’ve had to deal with.
    The steps in this post will get you to were you can install legitamate antispyware programs. If you’re not in IT or software development, you should invest in one of the antispyware -antivirus programs that are available to clean up the rest of your system from the xp defender pro attack. good luck.

    Reply

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here
«
»