How to remove XP Guardian

Friday, January 29th, 2010 at 7:58 am
Home » Rogue Antispyware » XP Guardian

XP Guardian description

XP Guardian is a clone of Antivirus Pro 2010 and PC Antispyware 2010. All of these applications are malicious but they are presented as security programs. XPGuardian presents itself as a part of Windows operating system; this may tricks victims into purchasing the tool as it was a legitimate thing.

XPGuardian

XP Guardian functions just like other rogue anti-spyware programs.It loads falsified security warnings to make an impression of badly infected system. And then it demands paying for using the tool. The paid version doesn’t even exist and the threats reported by XPGuardian are all made-up.

XP Guardian is a Rogue Antispyware software

How to manually remove XP Guardian

To remove XP Guardian spyware you must block XP Guardian sites, stop and remove processes, unregister DLL files, search and delete all other XP Guardian files and registry utility. Follow the XP Guardian detection and removal instructions below.

The most typical software removal method is to remove XP Guardian by using "Add or Remove Programs" service. However there may be hidden XP Guardian files, running processes and registries in your computer, so XP Guardian may recreate all other files after reboot.

XP Guardian manual removal instructions

Stop and remove XP Guardian processes:
av.exe Read more how to kill XP Guardian processes

Locate and delete XP Guardian registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Read more how to delete XP Guardian registry entries
Download RegistryBooster 2010 to scan errors caused by XP Guardian

Detect and delete other XP Guardian files:
%UserProfile%\Local Settings\Application Data\av.exe
%UserProfile%\Local Settings\Application Data\WRblt8464P

We strongly recommend you to use spyware remover to track XP Guardian and automaticaly remove XP Guardian processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: ,

3 Responses to

XP Guardian

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here