1 of 2
Danger level 6
Type: Rogue Anti-Spyware
Common infection symptoms:
  • Connects to the internet without permission
  • Shows commercial adverts
  • System crashes
  • Annoying Pop-up's
  • Slow Computer
Other mutations known as:
XPAntispyware2009 , XP Antivirus

XPAntivirus

It can be easy to fall for the clever lies of rogue antispyware these days, especially with rogues such as XPAntivirus which are difficult to differentiate from real security tools due to its well-designed graphical user interfaces. Do not be fooled though – XPAntivirus, which emanates from the same despicable family of rogues as XP Antivirus 2008 and XP Antivirus 2009 has no ability to detect, quarantine or remove any type of threat from the system, and is in fact nothing more than a malicious infection in itself.

XPAntivirus will use anything at its disposal in order to successfully gain access to its victims’ PCs. Tactics used include harmful and seditious browser hijacking websites that forcefully redirect users from their browsing and search sessions to compromised landing pages, where drive-by download tactics are used to forcefully root the XPAntivirus infection into the PC. Other forms of infection forming part of XPAntivirus’ online marketing campaign include using bogus online malware scanners and infected online flash ads.

After successfully rooting itself in the system, XPAntivirus will create 0 entries in the Windows registry, which will impersonate infections on the PC. In reality these entries are utterly harmless, and only used as part of XPAntivirus’ attack on the system in an effort to panic the user into paying for its worthless software. As a further attack on the system XPAntivirus will launch an unwarranted fake system scan, which will also report on many fake infections and threats being present on the system.

This rogue will proceed with its attack against the PC, and will only relent when the user either pays for its worthless software, or decides to complete destroy XPAntivirus altogether. Other symptoms reportedly associated with this rogue include the user’s inability to establish an internet connection, as well as not being able to launch any type of program on the infected PC. Other symptoms are increased erratic system behavior, poor system performance and a barrage of fake security alerts, including the following:

Privacy Violation alert!
XP antivirus detected Privacy Violation. Some program is secretly sending your private data to untrusted internet host. Click here to block this activity by removing threats (Recommended).

And

System files modification alert!
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss. Click here to block unathorised modification by removing threats (Recommended).

When all is said and done the user will only be able to regain control of his PC if he were to erase XPAntivirus immediately. This can easily and safest be achieved by using a properly functioning security tool which will not only obliterate XPAntivirus but also protect against similar future attacks.

Download Spyware Removal Tool to Remove* XPAntivirus
  • Quick & tested solution for XPAntivirus removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove XPAntivirus

Files associated with XPAntivirus infection:

WVCnRfsPUym.exe
tbp.exe
lwp.exe
ibl.exe
gtn.exe
bpw.exe
167.exe
_ex-68.exe
yt45gRI378y8aW.exe
TurboTax2010 keygen~whymeth~.exe
skymonk_25583998_29.exe
scm.exe
lvvm.exe
bkq.exe
bfj.exe
22.exe
xpa_eng[1].exe
XPAntivirusUpdate.exe
XPantivirus2008_v880378[1].exe
XPantivirus2008_B28[1].exe
XPAntivirus.exe
xpa2008pro.exe
xpa0803_en.exe
xpa0403.exe
winsrc.dll
shcjq9j0enf5.exe, shc3uej0et6v.exe, shcrebj0e70l.exe, shcemaj0e7dn.exe
rhcvdnj0ej6n.exe
rhctfmj0ev0j.exe
rhct2nj0e1e7.exe
rhcrvoj0evej.exe
rhcr1cj0er1q.exe
rhcnn4j0ea3j.exe
rhcnlfj0en0r.exe
rhcnlbj0ec0g.exe
rhcnkhj0ea7j.exe
rhcnfgj0ec1v.exe
rhcne5j0e7en.exe
rhcn28j0e10r.exe
rhclruj0et39.exe
rhcl3gj0en2e.exe
rhcjsuj0e57g.exe
rhcj4lj0egej.exe
rhcggqj0ej5p.exe
rhceppj0eeen.exe
rhcefoj0e9fr.exe
rhcea1j0el81.exe
rhccvsj0eed5.exe
rhcclvj0ee5a.exe
rhccbbj0e1c7.exe
rhcc3kj0e3at.exe
rhcaowj0ev65.exe
rhcafbj0egfe.exe
rhca3hj0e78n.exe
rhc9ksj0enfv.exe
rhc7e0j0en25.exe
rhc5hlj0eeaj.exe
rhc5erj0eg2a.exe
rhc3m3j0e72t.exe
rhc38nj0ee8t.exe
rhc1v0j0e3ca.exe
rhc1p5j0e325.exe
rhc1nkj0ea49.exe
rhc13tj0ea81.exe
rhc11uj0ejar.exe
pphcv1cj0er1q.exe
pphcrudj0e12j.exe
pphcrntj0et35.exe
pphcjfgj0elc5.exe
pphcefaj0er5a.exe
pphcea4j0etca.exe
pphcafpj0e32t.exe
pphc97oj0eadc.exe
pphc79nj0ej4s.exe
pphc5gbj0ep8v.exe
lphcvwej0e7d9.exe
lphcvw4j0elfp.exe
lphcvv2j0evep.exe
lphcvt1j0ep4e.exe
lphcvp0j0evba.exe
lphcvl1j0ercr.exe
lphcvkpj0e95p.exe
lphcvhdj0egag.exe
lphcva2j0elfp.exe
lphcv7pj0ep05.exe
lphcv6mj0erfk.exe
lphcv1cj0er1q.exe
lphcv0vj0etep.exe
lphcv0hj0en75.exe
lphcv0fj0er21.exe
lphctw9j0en7c.exe
lphctucj0ec7r.exe
lphctsqj0eabn.exe
lphcts6j0e95n.exe
lphctgfj0ej3v.exe
lphct5rj0epfp.exe
lphct37j0ejde.exe
lphct10j0evhg.exe
lphcrtrj0e147.exe
lphcrq6j0eedr.exe
lphcrm0j0eran.exe
lphcrkuj0erf8.exe
lphcrgnj0ec8t.exe
lphcreej0ev4t.exe
lphcr9nj0ea6c.exe
lphcr86j0ev9r.exe
lphcr7wj0ej4j.exe
lphcpwlj0eebe.exe
lphcpr4j0egd3.exe
lphcpm8j0ej65.exe
lphcpm7j0ee2p.exe
lphcplnj0eat1.exe
lphcp6dj0e949.exe
lphcnsuj0e57g.exe
lphcns5j0enfg.exe
lphcnn1j0eg9a.exe
lphcnmpj0ea1v.exe
lphcnctj0ev8r.exe
lphcnb8j0e9cc.exe
lphcn4lj0egej.exe
lphclvoj0e13e.exe
lphclu3j0e16p.exe
lphclo8j0epcm.exe
lphclnaj0ee47.exe
lphclmjj0e50l.exe
lphclgqj0ej5p.exe
lphclacj0epb9.exe
lphcl5tj0eaag.exe
lphcl27j0ev83.exe
lphcjupj0e9wb.exe
lphcjkhj0ea7j.exe
lphcjk1j0etdr.exe
lphcjjdj0e12t.exe
lphcjh1j0eau4.exe
lphcjgrj0e3bj.exe
lphcjfgj0ec1v.exe
lphcjfej0e16l.exe
lphcjenj0epa7.exe
lphcjekj0e1c3.exe
lphcj7cj0ea59.exe,scan22071[1].exe,1024466436.exe,scan2207[1].exe
lphcj3jj0e9en.exe
lphcgw3j0el0n.exe
lphcgsrj0eafn.exe
lphcgshj0ec7v.exe
lphcgs5j0encn.exe
lphcgruj0et39.exe
lphcgpnj0e18v.exe
lphcgksj0ec8r.exe
lphcgd8j0ep8p.exe
lphcgb3j0ej91.exe
lphcg8vj0e95e.exe
lphcg3nj0epen.exe
lphcg24j0e70v.exe
lphcg0rj0eabg.exe
lphceufj0elbe.exe
lphceudj0ejk5.exe
lphcesgj0egt5.exe
lphceowj0ev65.exe
lphcenbj0ecga.exe
lphcefbj0egfe.exe
lphceasj0e761.exe
lphce9pj0e181.exe
lphce27j0e74j.exe
lphccwkj0ecvk.exe
lphcctdj0eren.exe
lphccq2j0e90r.exe
lphccesj0ev77.exe
lphcc9qj0ej11.exe
lphcc74j0et7n.exe
lphcc6kj0eg7v.exe
lphcc52j0e5ag.exe
lphcc2wj0eeb3.exe
lphcav7j0e9nn.exe
lphcakhj0egaa.exe
lphcag6j0et0e.exe
lphcaekj0ee57.exe
lphcaa1j0el81.exe
lphca30j0etee.exe
lphca1tj0e315.exe
lphca15j0ejnb.exe
lphc9vsj0eed5.exe
lphc9uhj0ec5p.exe
lphc9u9j0evge.exe
lphc9q6j0eel4.exe
lphc9m6j0e9hp.exe
lphc9lvj0ee5a.exe
lphc9lpj0etae.exe
lphc9dkj0e7cv.exe
lphc9bbj0e1c7.exe
lphc97oj0eadc.exe
lphc97ej0ej57.exe
lphc94pj0e9dt.exe
lphc93kj0e3at.exe
lphc93ej0e92t.exe
lphc7qkj0er9c.exe
lphc7koj0e917.exe
lphc7h2j0etfr.exe
lphc7g2j0ec1p.exe
lphc7euj0egb3.exe
lphc7cuj0ene9.exe
lphc784j0etar.exe
lphc784j0ejf7.exe
lphc73fj0ej4l.exe
lphc71lj0e94p.exe
lphc5v0j0e3ca.exe
lphc5p5j0e325.exe
lphc5nkj0ea49.exe
lphc5ndj0et05.exe
lphc5m0j0er5t.exe
lphc5gtj0ec8r.exe
lphc51uj0ejar.exe
lphc3rqj0ej55.exe
lphc3pkj0ejd9.exe
lphc3o2j0e17g.exe
lphc3k6j0e59g.exe
lphc3fbj0ej3k.exe
lphc3fbj0e3f3.exe
lphc3f8j0eaaa.exe
lphc3e0j0en25.exe
lphc3dsj0e7fn.exe
lphc35hj0ee9p.exe
lphc335j0eja7.exe
lphc1s6j0e7cr.exe
lphc1nhj0ecf1.exe
lphc1hlj0eeaj.exe
lphc1etj0ega7.exe
lphc1erj0eg2a.exe
lphc1dfj0ee1g.exe
lphc19kj0e963.exe
lphc128j0ev9n.exe
f.exe, d.exe
download[1].exe
aaaamonj.exe
.tt71.tmp.exe
xpa1003_en.exe
xpapro0803_en.exe
.tt51.tmp.exe
xpa_2008.exe
CfgWiz.exe
xpa_eng.exe
xpa2008.exe
av2008xp.exe
xpscanner.exe
xpa.exe
winowl32.dll
d.exe
scan2207[1].exe
1024466436.exe
scan22071[1].exe
lphcj7cj0ea59.exe
xpa1503_en.exe
XPAntivirus.url
XPAntivirus.lnk
XPAntivirus on the Web.lnk
Uninstall XPAntivirus.lnk
av2008xp.exe
CfgWiz.exe

XPAntivirus DLL's to remove:

winsrc.dll
winowl32.dll

XPAntivirus processes to kill:

av2008xp.exe
CfgWiz.exe
WVCnRfsPUym.exe
tbp.exe
lwp.exe
ibl.exe
gtn.exe
bpw.exe
167.exe
_ex-68.exe
yt45gRI378y8aW.exe
TurboTax2010 keygen~whymeth~.exe
skymonk_25583998_29.exe
scm.exe
lvvm.exe
bkq.exe
bfj.exe
22.exe
xpa_eng[1].exe
XPantivirus2008_v880378[1].exe
XPantivirus2008_B28[1].exe
XPAntivirus.exe
xpa2008pro.exe
xpa0803_en.exe
xpa0403.exe
shcjq9j0enf5.exe, shc3uej0et6v.exe, shcrebj0e70l.exe, shcemaj0e7dn.exe
rhcvdnj0ej6n.exe
rhctfmj0ev0j.exe
rhct2nj0e1e7.exe
rhcrvoj0evej.exe
rhcr1cj0er1q.exe
rhcnn4j0ea3j.exe
rhcnlfj0en0r.exe
rhcnlbj0ec0g.exe
rhcnkhj0ea7j.exe
rhcnfgj0ec1v.exe
rhcne5j0e7en.exe
rhcn28j0e10r.exe
rhclruj0et39.exe
rhcl3gj0en2e.exe
rhcjsuj0e57g.exe
rhcj4lj0egej.exe
rhcggqj0ej5p.exe
rhceppj0eeen.exe
rhcefoj0e9fr.exe
rhcea1j0el81.exe
rhccvsj0eed5.exe
rhcclvj0ee5a.exe
rhccbbj0e1c7.exe
rhcc3kj0e3at.exe
rhcaowj0ev65.exe
rhcafbj0egfe.exe
rhca3hj0e78n.exe
rhc9ksj0enfv.exe
rhc7e0j0en25.exe
rhc5hlj0eeaj.exe
rhc5erj0eg2a.exe
rhc3m3j0e72t.exe
rhc38nj0ee8t.exe
rhc1v0j0e3ca.exe
rhc1p5j0e325.exe
rhc1nkj0ea49.exe
rhc13tj0ea81.exe
rhc11uj0ejar.exe
pphcv1cj0er1q.exe
pphcrudj0e12j.exe
pphcrntj0et35.exe
pphcjfgj0elc5.exe
pphcefaj0er5a.exe
pphcea4j0etca.exe
pphcafpj0e32t.exe
pphc97oj0eadc.exe
pphc79nj0ej4s.exe
pphc5gbj0ep8v.exe
lphcvwej0e7d9.exe
lphcvw4j0elfp.exe
lphcvv2j0evep.exe
lphcvt1j0ep4e.exe
lphcvp0j0evba.exe
lphcvl1j0ercr.exe
lphcvkpj0e95p.exe
lphcvhdj0egag.exe
lphcva2j0elfp.exe
lphcv7pj0ep05.exe
lphcv6mj0erfk.exe
lphcv1cj0er1q.exe
lphcv0vj0etep.exe
lphcv0hj0en75.exe
lphcv0fj0er21.exe
lphctw9j0en7c.exe
lphctucj0ec7r.exe
lphctsqj0eabn.exe
lphcts6j0e95n.exe
lphctgfj0ej3v.exe
lphct5rj0epfp.exe
lphct37j0ejde.exe
lphct10j0evhg.exe
lphcrtrj0e147.exe
lphcrq6j0eedr.exe
lphcrm0j0eran.exe
lphcrkuj0erf8.exe
lphcrgnj0ec8t.exe
lphcreej0ev4t.exe
lphcr9nj0ea6c.exe
lphcr86j0ev9r.exe
lphcr7wj0ej4j.exe
lphcpwlj0eebe.exe
lphcpr4j0egd3.exe
lphcpm8j0ej65.exe
lphcpm7j0ee2p.exe
lphcplnj0eat1.exe
lphcp6dj0e949.exe
lphcnsuj0e57g.exe
lphcns5j0enfg.exe
lphcnn1j0eg9a.exe
lphcnmpj0ea1v.exe
lphcnctj0ev8r.exe
lphcnb8j0e9cc.exe
lphcn4lj0egej.exe
lphclvoj0e13e.exe
lphclu3j0e16p.exe
lphclo8j0epcm.exe
lphclnaj0ee47.exe
lphclmjj0e50l.exe
lphclgqj0ej5p.exe
lphclacj0epb9.exe
lphcl5tj0eaag.exe
lphcl27j0ev83.exe
lphcjupj0e9wb.exe
lphcjkhj0ea7j.exe
lphcjk1j0etdr.exe
lphcjjdj0e12t.exe
lphcjh1j0eau4.exe
lphcjgrj0e3bj.exe
lphcjfgj0ec1v.exe
lphcjfej0e16l.exe
lphcjenj0epa7.exe
lphcjekj0e1c3.exe
lphcj7cj0ea59.exe,scan22071[1].exe,1024466436.exe,scan2207[1].exe
lphcj3jj0e9en.exe
lphcgw3j0el0n.exe
lphcgsrj0eafn.exe
lphcgshj0ec7v.exe
lphcgs5j0encn.exe
lphcgruj0et39.exe
lphcgpnj0e18v.exe
lphcgksj0ec8r.exe
lphcgd8j0ep8p.exe
lphcgb3j0ej91.exe
lphcg8vj0e95e.exe
lphcg3nj0epen.exe
lphcg24j0e70v.exe
lphcg0rj0eabg.exe
lphceufj0elbe.exe
lphceudj0ejk5.exe
lphcesgj0egt5.exe
lphceowj0ev65.exe
lphcenbj0ecga.exe
lphcefbj0egfe.exe
lphceasj0e761.exe
lphce9pj0e181.exe
lphce27j0e74j.exe
lphccwkj0ecvk.exe
lphcctdj0eren.exe
lphccq2j0e90r.exe
lphccesj0ev77.exe
lphcc9qj0ej11.exe
lphcc74j0et7n.exe
lphcc6kj0eg7v.exe
lphcc52j0e5ag.exe
lphcc2wj0eeb3.exe
lphcav7j0e9nn.exe
lphcakhj0egaa.exe
lphcag6j0et0e.exe
lphcaekj0ee57.exe
lphcaa1j0el81.exe
lphca30j0etee.exe
lphca1tj0e315.exe
lphca15j0ejnb.exe
lphc9vsj0eed5.exe
lphc9uhj0ec5p.exe
lphc9u9j0evge.exe
lphc9q6j0eel4.exe
lphc9m6j0e9hp.exe
lphc9lvj0ee5a.exe
lphc9lpj0etae.exe
lphc9dkj0e7cv.exe
lphc9bbj0e1c7.exe
lphc97oj0eadc.exe
lphc97ej0ej57.exe
lphc94pj0e9dt.exe
lphc93kj0e3at.exe
lphc93ej0e92t.exe
lphc7qkj0er9c.exe
lphc7koj0e917.exe
lphc7h2j0etfr.exe
lphc7g2j0ec1p.exe
lphc7euj0egb3.exe
lphc7cuj0ene9.exe
lphc784j0etar.exe
lphc784j0ejf7.exe
lphc73fj0ej4l.exe
lphc71lj0e94p.exe
lphc5v0j0e3ca.exe
lphc5p5j0e325.exe
lphc5nkj0ea49.exe
lphc5ndj0et05.exe
lphc5m0j0er5t.exe
lphc5gtj0ec8r.exe
lphc51uj0ejar.exe
lphc3rqj0ej55.exe
lphc3pkj0ejd9.exe
lphc3o2j0e17g.exe
lphc3k6j0e59g.exe
lphc3fbj0ej3k.exe
lphc3fbj0e3f3.exe
lphc3f8j0eaaa.exe
lphc3e0j0en25.exe
lphc3dsj0e7fn.exe
lphc35hj0ee9p.exe
lphc335j0eja7.exe
lphc1s6j0e7cr.exe
lphc1nhj0ecf1.exe
lphc1hlj0eeaj.exe
lphc1etj0ega7.exe
lphc1erj0eg2a.exe
lphc1dfj0ee1g.exe
lphc19kj0e963.exe
lphc128j0ev9n.exe
f.exe, d.exe
download[1].exe
aaaamonj.exe
.tt71.tmp.exe
xpa1003_en.exe
xpapro0803_en.exe
.tt51.tmp.exe
xpa_2008.exe
CfgWiz.exe
xpa_eng.exe
xpa2008.exe
av2008xp.exe
xpscanner.exe
d.exe
scan2207[1].exe
1024466436.exe
scan22071[1].exe
lphcj7cj0ea59.exe
xpa.exe
xpa1503_en.exe
XPAntivirusUpdate.exe

Remove XPAntivirus registry entries:

SoftwareXP antivirus
SoftwareMicrosoftWindowsCurrentVersionRunXPAntivirus
SoftwareMicrosoftWindowsCurrentVersionRunXP antivirus
MICROSOFT\WINDOWS\CURRENTVERSION\RUN
WINDOWS\CURRENTVERSION\RUN\14931545604967183595324892598563
WINDOWS\CURRENTVERSION\RUN\19785659369864643732137639727298
WINDOWS\CURRENTVERSION\RUN\47715724179478356601833087992991
WINDOWS\CURRENTVERSION\RUN\54480612624282658590606090192204
WINDOWS\CURRENTVERSION\RUN\57900878247254086192821130456015
WINDOWS\CURRENTVERSION\RUN\74983470143324143951555564816958
WINDOWS\CURRENTVERSION\RUN\92049218335572823192410739436224
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\23356220370392311320880324224442
Microsoft\Windows\CurrentVersion\Run\lphcj7cj0ea59
Microsoft\Windows\CurrentVersion\Run\SMrhcn7cj0ea59
MICROSOFT\WINDOWS\CURRENTVERSION\RUN\79946778822613832333313434317816
XP-antvirus
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 14931545604967183595324892598563
HKEY_CURRENT_USER\SOFTWARE\MICROS
Disclaimer

Comments

  1. C.C Elliott Feb 24, 2008

    i was on the internet and all of a sudden this xpantivirus window took over my screen and pretended to scan my system and said that i had been infected and it pretended to remove them and, afterwards i scaned my computer with my normal virus scan on my computer and it found that this xpantivirus thing was a trojan.
    i found your site and removed it all.
    Thanx

  2. Angel Jun 22, 2008

    Thank you very much for having a site up like this. a similar thing happened to me as the person above. i was googling some info when all of a sudden the screen changed to the xpantivirus screen and "scanned" my computer for infections. i didn't know if it was something that was installed on my computer as my fiance does all kinds of stuff like that so i hit remove now. when it prompted me to save the file to remove them i got suspicious. i thought it might be some kind of trojan virus whatever so i looked it up and came across this site. thanks again for having a source like this to help those of us that don't know a whole lot about these kinds of things!!!

  3. andrew Mar 18, 2009

    Its catches itself as a virus (haha)

  4. desconocido Sep 2, 2009

    spyhunter look says it's a fake antivirus when the scanner is false is the same, miren dice que spyhunter es un falso antivirus en el scaner cuando el que es falso es el mismo

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.