How to remove XP Guardian 2010

Wednesday, February 10th, 2010 at 1:46 am
Home » Rogue Antispyware » XP Guardian 2010

XP Guardian 2010 description

XP Guardian 2010 is a  malicious program which spreads via Trojan. It is also a clone of XP Internet Security 2010 malware. The bogus system is generated to be installed and downloaded after Trojan is loaded to your PC. The parasite automatically starts computer scans and shows you a mass of fake security alerts.

XP Guardian 2010

This is its way of trying to trick user into believing his computer is infected. We can make sure you,  security warnings are not real and you are fully safe to ignore all alerts. You just need to get rid of the parasite which is lying within your computer. Choose the reputable anti-spyware program and remove  malware from your PC

XP Guardian 2010 is a Rogue Antispyware software

How to manually remove XP Guardian 2010

To remove XP Guardian 2010 spyware you must block XP Guardian 2010 sites, stop and remove processes, unregister DLL files, search and delete all other XP Guardian 2010 files and registry utility. Follow the XP Guardian 2010 detection and removal instructions below.

The most typical software removal method is to remove XP Guardian 2010 by using "Add or Remove Programs" service. However there may be hidden XP Guardian 2010 files, running processes and registries in your computer, so XP Guardian 2010 may recreate all other files after reboot.

XP Guardian 2010 manual removal instructions

Stop and remove XP Guardian 2010 processes:
av.exe Read more how to kill XP Guardian 2010 processes

Locate and delete XP Guardian 2010 registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "av.exe" /START "%1? %*"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "av.exe" /START "firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "av.exe" /START "firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "av.exe" /START "iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Read more how to delete XP Guardian 2010 registry entries
Download RegistryBooster 2010 to scan errors caused by XP Guardian 2010

Detect and delete other XP Guardian 2010 files:
av.exe
WRblt8464P

We strongly recommend you to use spyware remover to track XP Guardian 2010 and automaticaly remove XP Guardian 2010 processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , ,

4 Responses to

XP Guardian 2010

  1. Beverly

    my son’s computer got this damn virus. His operating system is XP. I can’t get to the Internet on his computer because every time I try this virus sends up a message that it has blocked Internet Explorer due to a keystroke virus. I can’t remember how to get to the Windows C prompt to try and do this manually. I did not see anything in the Add/Remove programs named XP Guardian. So if you could email me some options, I would really appreciate it.

    thanks very much…Beverly

    Reply

    Luciana Reply:

    Your internet browser is blocked by XP Guardian 2010 fraud, and it’s not because of keylogger infection. XP Guardian 2010 fabricates those alerts to trick you into buying the program. Scroll up for the manual removal guidelines.

    Reply

  2. shawn p

    hey follow the steps run the regedit32.exe from the windows/system32 directory and you can delete these things then do a file search for those other ones it seems to be working when other patches didn’t

    Reply

  3. tim

    This is better than the last fix i tried in that it worked, but still messed up because above when they say locate and delete the registry files, they really mean replace them with the bit after the \start command. if you just go and delete them you can’t start anything. took me another 45 minutes just to get the explorer to work again.
    but … better than that sf virus. that i will allow.
    thank you.

    Reply

Leave a Reply

Download does not start? Try a mirror download here