XP Defender Firewall Alert – fake one

There are many fake security warnings, notifications, alerts and popups of XP Defender virus. This is a fake anti-spyware program that has in mind to trick user into thinking that his/her PC is in a dangerous condition. While it is running it displays the multitude of untrue facts about poor security status of your computer and its security protection mechanisms. One of the alerts that it displays is called “XP Defender Firewall Alert”. Without hesitation, this is a fake alert that has nothing to do with the real firewall available and running on your system. So, please be careful not to trust any faulty information presented in the text of this fake firewall alert.

XP Defender virus

In addition to this fake XP Defender Firewall Alert, there are many other faulty and deceptive statements presented by this hoax. All of them have the intention to make users believe their system is in a real dangerous condition. Then the virus will offer users to buy its fake and helpless license (activation code) as a supposed solution to removal of all fake threats. However, keep in mind that doing so is a serious mistake, because this program is totally useless and helpless.

Removal of XP Defender and its faulty “firewall alerts” and “system security alerts” is possible if you choose the powerful anti-malware application that can eradicate and neutralize this scam. We recommend you to follow the guidelines stipulated below.


XP Defender removal tool:

XP Defender similar removal video:

XP Defender manual removal guide:

Associated iles:

%commonappdata%\pcdfdata\[rnd].exe
%comonappdataW%\pcdfdata\app.ico
%commonappdata%\pcdfdata\config.bin
%commonappdata%\pcdfdata\defs.bin
%commonappdata%\pcdfdata\support.ico
%commonappdata%\pcdfdata\uninst.ico
%commonappdata%\pcdfdata\vl.bin
%commondesktopdir%\XP Defender.lnk
%commonprograms%\XP Defender\XP Defender.lnk
%commonprograms%\XP Defender\XP Defender Help and Support.lnk
%commonprograms%\XP Defender\XP Defender.lnk

Associated registry entries:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\pcdfsvc %commonappdata%\pcdfdata\[rnd].exe /min
HKCU\Software\Classes\.exe
HKCU\Software\Classes\.exe\ [rnd_2]
HKCU\Software\Classes\.exe\Content Type application/x-m
HKCU\Software\Classes\.exe\DefaultIcon
HKCU\Software\Classes\.exe\DefaultIcon\ %1
HKCU\Software\Classes\.exe\shell
HKCU\Software\Classes\.exe\shell\open
HKCU\Software\Classes\.exe\shell\open\command
HKCU\Software\Classes\.exe\shell\open\command\ “%commonappdata%\pcdfdata\[rnd].exe” /ex “%1” %*
HKCU\Software\Classes\.exe\shell\open\command\IsolatedCommand “%1” %*
HKCU\Software\Classes\.exe\shell\runas
HKCU\Software\Classes\.exe\shell\runas\command
HKCU\Software\Classes\.exe\shell\runas\command\ “%1” %*
HKCU\Software\Classes\.exe\shell\runas\command\IsolatedCommand “%1” %*

Leave a Comment

*