XP Anti-Virus 2013 virus (uninstall guide)

XP Anti-Virus 2013 is yet another fake anti-malware utility that requires immediate removal. It simply was not created to assist users in real cleanup of their systems. What this hoax can do is simply to scare users into believing their system is in danger, after fake security warnings, alerts and notifications being presented upon completion of bogus system scan. Needless to say, this program might indeed be quite scary especially for those users who don’t realize that it is a rogue (fake AV).

Understanding the need to assist our users in effective removal of XP Anti-Virus 2013 hoax, we’ve developed a special video guide and placed it at YouTube. If your system is now infected with this malware, please initially ignore all deceitful statements and reports given by this program. It cannot remove real security threats, neither will it timely warn you about malware intrusion attempts. The hoax will eventually lead you to the point where you will be asked by it to remove fake security threats reported by it. Buying this scam, of course, is a serious mistake. Hopefully, you will not be in the list of those users who were deceived by this scam.

In order to remove XP Anti-Virus 2013 malware effectively from your infected computer please therefore follow our simple and clear removal guide stipulated below. If you have any troubles of questions doing this please make sure to get in touch at any time of your convenience.

XP Anti-Virus 2013 removal video guide:

Fake alerts and notifications of XP Anti-Virus 2013 scam:

Privacy alert!
Rogue malware detected in your system. Data leaks and system damage are possible. Click here for a free security scan and spyware deletion.

Privacy threat! Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.

Severe system damage!
Spyware and viruses detected in the background. Sensitive system components under attack! Data loss, identity theft and system corruption are possible. Act now, click here for a free security scan.

System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working in the background right now. Perform an in-depth scan and removal now, click here.

System hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

Threat detected!
Security alert! Your computer was found to be infected with privacy-threatening software. Private data may get stolen and system damage may be severe. Recover your PC from the infection right now, perform a security scan.

Virus infection!
System security was found to be compromised. Your computer is now infected. Attention, irreversible system changes may occur. Private data may get stolen. Click here now for an instant anti-virus scan.

XP Anti-Virus 2013 screenshot:

XP Anti-Virus 2013 scam

XP Anti-Virus 2013 removal steps:

  1. Click “Start“, go to “Run” and in the open space insert the download link for GridinSoft Trojan Killer’s installer – http://trojan-killer.net/download.php
  2. Save the installer of GridinSoft Trojan Killer to your desktop.
  3. Right-click the installer of GridinSoft Trojan Killer and select “Run as…“.
  4. Uncheck the box “Protect my computer and data from unauthorized program activity” and click “OK“.
  5. Install GridinSoft Trojan Killer.
  6. Uncheck the box “Run Trojan Killer” at the end of installation.
  7. Right-click the desktop icon of GridinSoft Trojan Killer and select “Run as…“.
  8. Uncheck the box “Protect my computer and data from unauthorized program activity” and click “OK“.
  9. Run GridinSoft Trojan Killer, update the program and run scan with it. Click “Remove selected” at the end of scan to remove all infections associated with XP Anti-Virus 2013 fake AV.

XP Anti-Virus 2013 removal tool:

Manual removal guide to delete XP Anti-Virus 2013 scam:

Associated XP Anti-Virus 2013 files:

  • %LocalAppData%\[rnd_2]
  • %Temp%\[rnd_2]
  • %UserProfile%\Templates\[rnd_2]
  • %CommonApplData%\[rnd_2]

Associated XP Anti-Virus 2013 registry entries:

  • HKEY_CURRENT_USER\Software\Classes\.exe
  • HKEY_CURRENT_USER\Software\Classes\.exe\ [rnd_0]
  • HKEY_CURRENT_USER\Software\Classes\.exe\Content Type application/x-msdownload
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon\ %1
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\ “[rnd_1].exe” -a “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\ “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\ Application
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\Content Type application/x-msdownload
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\DefaultIcon\ %1
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command\ “[rnd_1].exe” -a “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command\ “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command\IsolatedCommand “%1″ %*

Leave a Comment


*