AntivirusXP 2008 Removal Guide
Do you know what AntivirusXP 2008 is?
DESCRIPTION
AntivirusXP 2008 sometimes called Antivirus XP 2008, is a rogue anti-spyware program designed by hackers to take your money in return for a useless program. We have noticed that the creators of rogue anti-spyware programs such as AntivirusXP 2008 and Antivirus 2008 are using the year “2008″ in the name of their deceiving programs. As if we did not know what year this is. We have found that many of the programs that end with “2008″ in the name just like AntivirusXP 2008, may be related to one another in that they perform the same malicious actions.
AntivirusXP 2008 is very dangerous to have installed on your computer. AntivirusXP 2008 may install other files or programs that pose a serious threat to the security of your system. AntivirusXP 2008 may ultimately allow your personal information to be sent to a remote user who has access to your system through a security hole. AntivirusXP 2008 may come from a Trojan such as Zlob or even the Antivirusxp2008.com website which promotes the AntivirusXP 2008 rogue anti-spyware program.
In non-techie terms: AntivirusXP 2008 is not much different from a car sales person who sells you a previously wrecked car but assures you that it is brand new. AntivirusXP 2008 pretends to remove spyware or rid your computer of parasites. AntivirusXP 2008 does neither. You must remove AntivirusXP 2008 and avoid download or installing AntivirusXP 2008.
Research Updates:
- Through further investigative research we have discovered that the support address of XP Antivirus 2008 which is support@xpantivirus.com, comes back as “user unknown” if used. The actual producer, Innovagest 2000, may have a contact address of support@innovagest2000.com. After using this address we do not get a response. This supports the fact that XP Antivirus 2008 is not legitimate.
- The site antivirxp08.com was found to be a malicious web page that could install or sell the Antivirus XP 2008 program. We strongly advise you to avoid visiting this page. If you find that you were redirected to this page then you must remove the Antivirus XP 2008 program or Trojan infection that is causing this issue. When you search for antivirxp08.com through Google you may get an obscured result that has a message under the title that says “This site may harm your computer”.
AntivirusXP 2008 screen shot image:
AntivirusXP2008.com website image:
AntivirusXP 2008 Automatic Removal Instructions
This automatic removal method is for non-techie computer users. If you’re too lazy to learn about spyware removal or how to access sensitive files in your computer, then this is the method for you.
Before you start: Print or bookmark these instructions because you’ll have to reboot into Safe Mode. Also back up your computer in case you make a mistake.
- Download and save SmitFraudFix to your desktop.
- Restart your computer in Safe Mode (how to do safe mode). Once the
desktop appears, double click on the SmitfraudFix.exe on your desktop. - After the credits screen, you’ll see a menu. Select the option number 2, which is ‘Clean (safe mode recommended)’, and then
press Enter to delete infect files. - SmitFraudFix will begin cleaning your computer and take a series of cleanup processes. When the process is over, it will automatically begin the Disk Cleanup program.
- Once the Disk Cleanup program is complete, you will be prompted with the message ‘Registry cleaning - Do you want to clean the registry’. Answer Y (Yes) and hit Enter. Reboot your computer.
- SmitFraudFix will now check if wininet.dll is infected. SmitFraudFix will ask you whether to replace the infected file (if there’s any) ‘Replace infected
file?’ Answer by typing Y (Yes) and hit Enter. - Reboot your computer to complete the cleaning process.
- After reboot, a Notepad screen may appear containing a log of all the files
removed from your computer. If it doesn’t appear, a file will be created called
rapport.txt in the root of your drive, (Local Disk C:). - Restart your computer in Safe Mode (how to do safe mode).
- Go to C:\Windows\Temp, click Edit, click Select All, press DELETE, and then
click Yes to confirm that you want all the items to go to the Recycle Bin. - Go to C:\Documents and Settings\[LISTED USER]\Local Settings\Temp, click Edit, click Select All, press DELETE, and then click Yes to confirm that
you want all the items to go to the Recycle Bin. - Reboot your computer back to normal mode. Go to Windows Update and download all critical updates.
AntivirusXP 2008 Manual Removal Instructions
This manual removal method is for techie computer users. AntivirusXP 2008 manual removal may be difficult and time consuming to remove. There’s no guarantee that AntivirusXP 2008 will be removed completely. So read the AntivirusXP 2008 removal steps carefully and good luck.
Before you start: Close all programs and Internet browsers. Also back up your computer in case you make a mistake and your computer stops working.
- Uninstall AntivirusXP 2008 Program
Click on Start > Settings > Control Panel > Double-click on Add/Remove Programs. Search for and uninstall AntivirusXP 2008 if found. - To stop AntivirusXP 2008 processes (view process removal steps)
Go to Start > Run > type taskmgr. The click the Processes tab and you’ll see a list of running processes.
Search and stop these AntivirusXP 2008 processes:
AntivirusXP2008.exe
rhcn7cj0ea59.exe
rhcn7cj0ea59.exe.local
For each unwanted process, right-click on it and then select “End task”. - To Unregister AntivirusXP 2008 DLLs (view DLL removal steps)
Search and unregister these AntivirusXP 2008 DLLs:
rhcn7cj0ea59Skin.dll
To locate the AntivirusXP 2008 DLL path, go to Start > Search > All Files or Folders. Type AntivirusXP 2008 and in the Look in: select either My Computer or Local Hard Drives. Click the Search button.
Once you have the AntivirusXP 2008 DLL path, go to Start and then click on Run. In the Run command box, type cmd, and then click on OK.
To locate the exact DLL path, type cd in order to change the current directory. To display the contents of the directory, use the dir command. To remove the DLL file type regsvr32 /u FILENAME.dll (FILENAME is the name of the file that you want to unregister). - To unregister AntivirusXP 2008 registry keys (view registry keys removal steps)
Go to Start > Run > type regedit > press OK.
Edit the value (on the right pane) by right-clicking on it and selecting the Modify option. Select the Delete option.
Search and delete these AntivirusXP 2008 registry keys: - If your homepage has been changed, go to Start > Control Panel > Internet Options > click on the General > click Use Default under Home Page. Add the your desired default homepage, then click Apply > click OK. Open a new web browser to check that you have your desired default homepage.
- Remove AntivirusXP 2008 Directories.
To find AntivirusXP 2008 directories, go to Start > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder.
Search and delete the following AntivirusXP 2008 directories:
C:\ProgramFiles\AntivirusXP 2008
C:\ProgramFiles\Antivirus XP 2008
Right-click on the AntivirusXP 2008 folder and select Delete.
A message will appear saying ‘Are you sure you want to remove the folder AntivirusXP 2008 and move all its contents to the Recycle Bin?’, click Yes.
Another message will appear saying ‘Renaming, moving or deleting AntivirusXP 2008 could make some programs not work. Are you sure you want to do this?’, click Yes. - To remove AntivirusXP 2008 icons on your Desktop, drag and drop them to the Recycle Bin.
You’ve completed the AntivirusXP 2008 manual removal instructions!
I hope this article has helped you solve your AntivirusXP 2008 problems. If you want to contribute to this article, post your comment below.
Disclaimer: This article is for educational purposes. By using this information you agree to be bound by the disclaimer. There’s no guarantee that AntivirusXP 2008 will be completely removed from your computer. Seek professional help if your computer continues to experience problems.
Did You Find this Article Helpful?
Subscribe to Spyware Techie for more!
Or get latest articles to your via email:
There are other things that this malware will do to your computer but are not mentioned by this guide. Antivirus XP 2008 will install the Sysinternal Bluescreen of Death screensaver on your computer or replace your existing screensaver with it. It basically makes your computer appeared to have crashed and the system is trying to prevent damage by doing a memory dump. This screen will switch to the windows bootup screen after the bluescreen has been displayed for a while. Luckily it is only a screensaver that tries to mimic the look of a system crash to drive users into panic and paying for their fake software. In my case the screensaver is in the C:\Windows\System32 directory with some random string of
alphabets as its name and ending in the usual .scr. There is also a bitmap file installed in the same directory. It is basically the picture of the message that malware, virus has been detected on your computer and you should use some antivirus to clean up. This bitmap file is flashed on the screen for a few seconds before the windows login screen is shown on bootup. It is just another tricks in their arsenal of scare tactics. Most of these are put into the windows registry to replace your screensaver, window background picture. One must clean up these entries in the registry as well as those already mentioned in this guide.
hi and thank yuo.
that was very very helpful.
Thank you so much for this information. I thought my daughter’s computer was beyond help. You saved me a lot of money!
This also installed a boot screen on my computer, along with the desktop bitmap and the screensaver. It was also in the system32 folder.
Again, thanks!!
I have this problem too. Thanks for this helpful !!
thanks man! it really removes that annoying spyware :)
Thanks what a great help! there is goodand bad hackers :) Caught it opening a link in a CNN fake-email
I thought i was dead when that antivirus thing popped up. after some searching, i was pleased to find this guide to help me remove it. i did run into some preoblems however:
after step 5, smitfraud didn’t automatically look into wininet.dll. actually when i clicked it, it turned red and said something was missing. i’m guessing there was nothing to be found in tha first place, so i guess it’s fixed? let me know if i did something wrong plz