How to remove XP Guardian
Friday, January 29th, 2010 at 7:58 amHome » Rogue Antispyware » XP Guardian
XP Guardian description
XP Guardian is a clone of Antivirus Pro 2010 and PC Antispyware 2010. All of these applications are malicious but they are presented as security programs. XPGuardian presents itself as a part of Windows operating system; this may tricks victims into purchasing the tool as it was a legitimate thing.
XP Guardian functions just like other rogue anti-spyware programs.It loads falsified security warnings to make an impression of badly infected system. And then it demands paying for using the tool. The paid version doesn’t even exist and the threats reported by XPGuardian are all made-up.
XP Guardian is a Rogue Antispyware software
How to manually remove XP Guardian
To remove XP Guardian spyware you must block XP Guardian sites, stop and remove processes, unregister DLL files, search and delete all other XP Guardian files and registry utility. Follow the XP Guardian detection and removal instructions below.
The most typical software removal method is to remove XP Guardian by using "Add or Remove Programs" service. However there may be hidden XP Guardian files, running processes and registries in your computer, so XP Guardian may recreate all other files after reboot.
XP Guardian manual removal instructions
Stop and remove XP Guardian processes:
av.exe
Read more how to kill XP Guardian processes
Locate and delete XP Guardian registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Read more how to delete XP Guardian registry entries
Download RegistryBooster 2010 to scan errors caused by XP Guardian
Detect and delete other XP Guardian files:
%UserProfile%\Local Settings\Application Data\av.exe
%UserProfile%\Local Settings\Application Data\WRblt8464P
We strongly recommend you to use spyware remover to track XP Guardian and automaticaly remove XP Guardian processes, registries and files as well as other spyware threats.
Trackbacks
- Remove Vista Guardian 2010, VistaGuardian 2010 removal help
- Remove Windows Guardian 2010, Windows Guardian 2010 removal help
- Remove Total Vista Security, TotalVistaSecurity removal help



XP Guardian