How to Remove XP Anitvirus

XP Antivirus is a spyware that infects computers through trojan viruses and then pretends to be a legitimate antispyware application. It generates constant pop-up messages warning you of spyware threats on your hard drive and offering to sell you the XP Antivirus to delete them. However, purchasing the application does not remove the spyware from your computer as all of the messages are fake. This application might slow down your Internet connection and overall computer performance, redirect your browsers and download even more spyware.

Instructions

End System Processes

1. Press "Ctrl," "Shift" and "Esc" keys at the same time to bring up the Task Manager.

2. Click on the "Processes" tab to view the current processes running in the background.

3. Press and hold the "Ctrl" key, and then click on the following system processes to select them all at the same time:

   XPantivirus2008_B28[1].exe
   XPantivirus2008_v880378[1].exe
   xpa_eng.exe
   xpscanner.exe
   xpa1503_en.exe
   xpa2008pro.exe
   xpantivirus2008_v880157.exe
   xpantivirus2008_v880136.exe
   xpantivirus2008_v880076.exe
   xpantivirus2008_v880070.exe
   xpantivirus2008_v880019.exe
   xpa.exe
   install_v2.exe
   download.exe
   sefind.exe
   xpa2008.exe
   XPAntivirusUpdate.exe
   XPAntivirus.exe

4. Click on the "End Process" button and close the Task Manager.

Unregister DLL Files

1. Go to the "Start" menu and select "Run."

2. Type "cmd" in the search line and click on "OK" to activate the command line dialogue window.

3. Type "regsvr32/u msplg7.dll" and press "Enter" to unregister the file. Do the same for "wininet.dll" and "shlwapi.dll."

4. Close the command line dialogue window.

Delete Registry Entries

1. Click on the "Start" menu and then on "Run."

2. Type "regedit" and press "Enter" to bring up the Registry Editor.

3. Find and delete the following registry keys and values:

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\XP Antivirus 2008
   63825787604427079274186537277345
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XPAntivirusFilter
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP antivirus_is1
   HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Run\"XP antivirus" = "C:\Program Files\XPAntivirus\XPAntivirus.exe"
   XP antivirus
   HKEY_USERS\Software\XP antivirus

4. Close the Registry Editor.

Remove Files and Folders

1. Go to the "Start" menu and click on "Search."

2. Check the "All Files and Folders" option and select the local hard drive(s) to be searched.

3. Type "scui.cpl" and press "Enter" to begin the search. Delete all of the found items, and repeat this process for the following items:

   XPantivirus2008_B28[1].exe
   XPantivirus2008_v880378[1].exe
   63825787604427079274186537277345
   xpa_eng.exe
   xpscanner.exe
   xpa1503_en.exe
   xpa2008pro.exe
   xpantivirus2008_v880157.exe
   xpantivirus2008_v880136.exe
   xpantivirus2008_v880076.exe
   xpantivirus2008_v880070.exe
   xpantivirus2008_v880019.exe
   xpa.exe
   install_v2.exe
   helper.sys
   download.exe
   sefind.exe
   msplg7.dll
   estsprt.sys
   xpa2008.exe
   Uninstall XP Antivirus 2008.lnk
   XP Antivirus 2008.lnk
   XPAntivirus.url
   XPAntivirus on the Web.lnk
   Uninstall XPAntivirus.lnk
   XP antivirus
   XPAntivirus.lnk
   wininet.dll
   shlwapi.dll
   XPAntivirusUpdate.exe
   XPAntivirus.exe

4. Restart your computer.

Tips & Warnings

• Always back up important data before manually removing viruses or spyware.

• Delete only the indicated registry entries. Removal of a legitimate key or value might disable the operating system.

References

• SpywareRemove.com: Remove XPAntivirus