The 9th Soul

Software Warning: Antivirus XP 2008

Posted in internet news by Fated Blue on September 1, 2008


XP Antivirus 2008 Description
XP Antivirus 2008 is a rogue anti-spyware program that uses scare tactics to get you to purchase the full version of the XP Antivirus 2008 program. XP Antivirus 2008, or XPAntivirus 2008, may be downloaded and installed through the Zlob Trojan infection which is found on fake video codecs used to view porn videos. Zlob may affect your System32 files and load with a process called winlogon.exe. Zlob may even have rootkit functionality which gives it the ability to hide files in the system. Zlob may hijack browsers, display pop up ads and disable key system functions.

XP Antivirus 2008, if installed, runs a scan on your computer and alleges to detect spyware on your computer. After the scan is complete, XP Antivirus 2008 will display false postives and pop up a fake warnings message with the option to remove the detected spyware. Computer users are urged to avoid downloading or purchasing XP Antivirus 2008 no matter how legitimate the program may look. XP Antivirus 2008 may recreate itself after reboot, continue to run in the background of your system without your knowledge and display fake warning messages to drive you to purchase the full version of XP Antivirus 2008. XP Antivirus 2008’s activities may generate a system slowdown.

How can I get rid of XP Antivirus 2008?
The most common spyware removal tactic is to uninstall XP Antivirus 2008 by using the “Add/Remove Programs” utility. However, as there may still be hidden XP Antivirus 2008 files, it’s possible that XP Antivirus 2008 will reappear after reboot. Follow the XP Antivirus 2008 detection and removal methods below.

XP Antivirus 2008 or XPAntivirus 2008 Automatic Detection (Recommended)
Is your PC infected with XP Antivirus 2008? To safely & quickly detect XP Antivirus 2008, we highly recommend you…

Spyhunter

SpyHunter’s free version is only for spyware detection. If SpyHunter’s spyware scanner detects XP Antivirus 2008 on your PC, you have the option of purchasing SpyHunter’s spyware removal tool to remove XP Antivirus 2008 and other spyware threats.

XP Antivirus 2008 Manual Removal Instructions
Below is a list of XP Antivirus 2008 manual removal instructions and XP Antivirus 2008 components listed to help you remove SpyCrush from your PC. Backup Reminder: Always be sure to back up your PC before making any changes.

Note: This manual removal process may be difficult and you run the risk of destroying your computer. We recommend that you use SpyHunter’s spyware detection tool to check for XP Antivirus 2008.

Step 1 : Use Windows File Search Tool to Find XP Antivirus 2008 Path
Go to Start > Search > All Files or Folders.
In the “All or part of the the file name” section, type in “XP Antivirus 2008” file name(s).
To get better results, select “Look in: Local Hard Drives” or “Look in: My Computer” and then click “Search” button.
When Windows finishes your search, hover over the “In Folder” of “XP Antivirus 2008”, highlight the file and copy/paste the path into the address bar. Save the file’s path on your clipboard because you’ll need the file path to delete XP Antivirus 2008 in the following manual removal steps. Read more about How to Find XP Antivirus 2008 with File Search Tool

Step 2 : Use Windows Task Manager to Remove XP Antivirus 2008 Processes
To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
Click on the “Image Name” button to search for “XP Antivirus 2008” process by name.
Select the “XP Antivirus 2008” process and click on the “End Process” button to kill it.
Remove the “XP Antivirus 2008” processes files:

rhc9s8j0ec0t.exe
smchk.exe
erms.exe
agpqlrfm.exe
xpa2008.exe
install_v2.exe
xpa.exe
%program_files%\xp antivirus\xpa.exe
xpantivirus2008_v880187.exe
xpantivirus2008_v880019.exe
xpantivirus2008_v880339.exe

Step 3 : Use Registry Editor to Remove XP Antivirus 2008 Registry Values
To open the Registry Editor, go to Start > Run > type regedit and then press the “OK” button.
Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
To delete “XP Antivirus 2008” value, right-click on it and select the “Delete” option.
Locate and delete “XP Antivirus 2008” registry entries:

HKEY_CURRENT_USER\software\xp antivirus\options billingurlapproved2
HKEY_CURRENT_USER\software\xp antivirus\options billingurl2
HKEY_CURRENT_USER\software\xp antivirus\options billingregurl
HKEY_CURRENT_USER\software\xp antivirus\options termsurl
HKEY_CURRENT_USER\software\xp antivirus\options securityvector
HKEY_CURRENT_USER\software\xp antivirus\options lastrun
HKEY_CURRENT_USER\software\xp antivirus\options scans

Step 4 : Use Windows Command Prompt to Unregister XP Antivirus 2008 DLL Files
To open the Windows Command Prompt, go to Start > Run > type cmd and then click the “OK” button.
Type “cd” in order to change the current directory, press the “space” button, enter the full path to where you believe the XP Antivirus 2008 DLL file is located and press the “Enter” button on your keyboard. If you don’t know where XP Antivirus 2008 DLL file is located, use the “dir” command to display the directory’s contents.
To unregister “XP Antivirus 2008” DLL file, type in the exact directory path + “regsvr32 /u” + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u XP Antivirus 2008.dll) and press the “Enter” button. A message will pop up that says you successfully unregistered the file.
Search and unregister “XP Antivirus 2008” DLL files:

kgxmotapktx.dll
jaxtcwfg.dll
ooiqyu.dll
dmngyvfc.dll
nrnnmb.dll
khfGvTMf.dll
iifgETLc.dll
hgGxXoMF.dll
sjdvhd.dll
fkaaejuc.dll
obmuxmov.dll
pmalmfly.dll
ddccBrSk.dll
xxyabcCs.dll
WinCtrl32.dll

Step 5 : Detect and Delete Other XP Antivirus 2008 Files
To open the Windows Command Prompt, go to Start > Run > type cmd and then press the “OK” button.
Type in “dir /A name_of_the_folder” (for example, C:\Spyware-folder), which will display the folder’s content even the hidden files.
To change directory, type in “cd name_of_the_folder”.
Once you have the file you’re looking for type in “del name_of_the_file”.
To delete a file in folder, type in “del name_of_the_file”.
To delete the entire folder, type in “rmdir /S name_of_the_folder”.
Select the “XP Antivirus 2008” process and click on the “End Process” button to kill it.
Remove the “XP Antivirus 2008” processes files:

rhc9s8j0ec0t.exe.local
rhc9s8j0ec0t.exe
dssc32.exe.bat
bindsrv2.exe.bat
smchk.exe.bat
smchk.exe
scksexde.exe.bat
s1265.php.bat
winpu73.sys
erms.exe
kgxmotapktx.dll
agpqlrfm.exe
jaxtcwfg.dll
ooiqyu.dll
dmngyvfc.dll
nrnnmb.dll
khfGvTMf.dll
iifgETLc.dll
hgGxXoMF.dll
sjdvhd.dll
fkaaejuc.dll
obmuxmov.dll
pmalmfly.dll
ddccBrSk.dll
xxyabcCs.dll
WinCtrl32.dl_
WinCtrl32.dll
xpa2008.exe
install_v2.exe
xpa.exe
%startmenu%\xp antivirus 2008\uninstall xp antivirus 2008.lnk
%startmenu%\xp antivirus 2008\xp antivirus 2008.lnk
%program_files%\xp antivirus\xpa.exe
%desktopdirectory%\xp antivirus 2008.lnk
xpantivirus2008_v880187.exe
xpantivirus2008_v880019.exe
xpantivirus2008_v880339.exe

XP Antivirus 2008 Recommendation
RECOMMENDED: To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good spyware cleaner/remover to track XP Antivirus 2008 and automatically remove XP Antivirus 2008 as well as other spyware, adware, trojans, and virus threats in your PC.

Writer’s Note: You can also use system restore if you’re in a hurry😀

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: