How to remove XP Guardian 2010
Wednesday, February 10th, 2010 at 1:46 amHome » Rogue Antispyware » XP Guardian 2010
XP Guardian 2010 description
XP Guardian 2010 is a malicious program which spreads via Trojan. It is also a clone of XP Internet Security 2010 malware. The bogus system is generated to be installed and downloaded after Trojan is loaded to your PC. The parasite automatically starts computer scans and shows you a mass of fake security alerts.
This is its way of trying to trick user into believing his computer is infected. We can make sure you, security warnings are not real and you are fully safe to ignore all alerts. You just need to get rid of the parasite which is lying within your computer. Choose the reputable anti-spyware program and remove malware from your PC
XP Guardian 2010 is a Rogue Antispyware software
How to manually remove XP Guardian 2010
To remove XP Guardian 2010 spyware you must block XP Guardian 2010 sites, stop and remove processes, unregister DLL files, search and delete all other XP Guardian 2010 files and registry utility. Follow the XP Guardian 2010 detection and removal instructions below.
The most typical software removal method is to remove XP Guardian 2010 by using "Add or Remove Programs" service. However there may be hidden XP Guardian 2010 files, running processes and registries in your computer, so XP Guardian 2010 may recreate all other files after reboot.
XP Guardian 2010 manual removal instructions
Stop and remove XP Guardian 2010 processes:
av.exe
Read more how to kill XP Guardian 2010 processes
Locate and delete XP Guardian 2010 registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "av.exe" /START "firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "av.exe" /START "firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "av.exe" /START "iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Read more how to delete XP Guardian 2010 registry entries
Download RegistryBooster 2010 to scan errors caused by XP Guardian 2010
Detect and delete other XP Guardian 2010 files:
av.exe
WRblt8464P
We strongly recommend you to use spyware remover to track XP Guardian 2010 and automaticaly remove XP Guardian 2010 processes, registries and files as well as other spyware threats.



February 10th, 2010 at 1:23 pm
my son’s computer got this damn virus. His operating system is XP. I can’t get to the Internet on his computer because every time I try this virus sends up a message that it has blocked Internet Explorer due to a keystroke virus. I can’t remember how to get to the Windows C prompt to try and do this manually. I did not see anything in the Add/Remove programs named XP Guardian. So if you could email me some options, I would really appreciate it.
thanks very much…Beverly
Reply
Luciana Reply:
February 10th, 2010 at 11:46 pm
Your internet browser is blocked by XP Guardian 2010 fraud, and it’s not because of keylogger infection. XP Guardian 2010 fabricates those alerts to trick you into buying the program. Scroll up for the manual removal guidelines.
Reply
February 17th, 2010 at 9:46 pm
hey follow the steps run the regedit32.exe from the windows/system32 directory and you can delete these things then do a file search for those other ones it seems to be working when other patches didn’t
Reply
March 5th, 2010 at 3:25 pm
This is better than the last fix i tried in that it worked, but still messed up because above when they say locate and delete the registry files, they really mean replace them with the bit after the \start command. if you just go and delete them you can’t start anything. took me another 45 minutes just to get the explorer to work again.
but … better than that sf virus. that i will allow.
thank you.
Reply