How to Remove XP Defender Rogue Anti-Spyware?
# This article How to Remove XP Defender Virus is an article in Spyware Removal Instructions, the original author is Security-Wire.com .You can read more information in the following:
XP Defender Information:
XP Defender (also called as XPDefender) is a fake computer security application that infiltrates into your computer through security vulnerabilities used by Trojans infections. These trojans install ave.exe file and name the rogueware according to the compromised Operating Systems. The ave.exe family includes Vista Guardian 2010, XP Guardian 2010, Vista Internet Security 2010, Win 7 Internet Secuty 2010 and Vista Antispyware 2010, as well as XP Defender Pro. Once installed, XP Defender is configured to start automatically when Windows starts. When running, XP Defender is showing fake system scanners and bogus scan results that announce variety errors and malware problems. When you open your browser, XP Defender displays a fabricated warning stating that your Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen parasite which prevents you from going online. The only goal of giving this misleading information is to make you purchase XP Defenders’ alleged full version because only the paid version is promised to remove “detected” threats. Please know that XP Defender is not capable to detect any actual threats. Use this removal guide and remove XP Defender.
XP Defender Screenshot:
Manual Removal
Note: If you are not proficient with computer, it’s suggested that you backup your registry before manually removing XP Defender Rogue Anti-Spyware. And double check the entries that you are going to delete, or your computer can’t work for missing some files.
Step 1: End its process by opening Task Manager.
ave.exe
Step 2: The registry entries you need to delete:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?
Step 3: Files you need to delete:
%AppData%\ave.exe
Please, be aware that manual removal of XP Defender Rogue Anti-Spyware is a cumbersome task and can not always ensure complete removal of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards.Moreover, lack of the required skills and even the slightest deviation from the instructions may lead to irreparable system damage. That’s why it’s strongly recommended automatic removal of XP Defender Rogue Anti-Spyware, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.
Automatic XP Defender Rogue Anti-Spyware Removal:
1. Restart your computer and keep pressing F8 Key before Windows launches. Use the arrow keys to select the “Safe Mode with Networking” option, and then hit ENTER Key to continue.
2. Download XP Defender Virus Remover, install it and update its database to the latest. After that, restart your computer so as to make XP Defender Virus Remover fully functional. Repeat Step 1 into Safe Mode and run an Online Scan of your computer so that XP Defender Virus Remover can detect all potential malware in your system.
NOTE: If you have problem installing XP Defender Virus Remover, you can download this correction script, unzip it and then double click to run it. It will correct your registry settings that the virus has modified. Then double click the program and finish the installation.
3. After the Online Scan finishes, click “Details” for the malware detected to make sure that your important data are not infected and removed. Ignore or select the scan result and click “Remove” to remove the threats. Reboot your computer and let XP Defender Virus Remover delete all detected virus.
4. Click to repair your corrupted registry
Why should you need to repair the registry?
As we all know, virus and Trojans modify and destroy system registry and make the computer malfunction so that the computer will not perform normally. Even if the virus and Trojans are removed, the registry is still destroyed or modified, so the computer still has problems. That’s the very reason why you need to repair the registry. At the meanwhile, some virus and Trojans leave some DLL files in the registry and this will cause strange DLL errors and affect the computer performance.
To make your computer run as perfectly as before or much faster than before:
1. Download and install Multi-Awarded Registry Tool.
2. Run a full scan of your registry.
3. Click “Repair Problems” and repair all errors detected.
After these 3 easy steps, your computer will run much faster than before within minutes!
Related posts:
Step by Step Remove Bestpathsecurity.com Hijacker Guide | Security-Wire.com on May 24th, 2010
[…] is a rogue website which promotes the sale of XP Defender (or XP Defense Pro and XP Defense 2010) rogue antispyware program. The reason why you are rerouted […]