XP Antivirus Plus 2013. Uninstall guide

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)

XP Antivirus Plus 2013 stands for a new fake antispyware utility developed by hackers quite recently. This bogus anti-malware tool comes like a thief at night – unpredictably and unexpectedly. It doesn’t let users know of its infiltration attempts. Its installation is hidden from user’s attention. This is why no one can actually terminate its infiltration process. XP Antivirus Plus 2013 virus belongs to the well-known Braviax malware clan, also being referred to as one of the MutiRogue 2013 samples.

Once XP Antivirus Plus 2013 virus enters your machine it immediately begins to amend it. First, it adds some new registry entries in order to make sure the hoax is launched automatically together with every system startup. This means that as soon as you switch your PC on to do something with it this scam appears and begins brainwashing you with its many deceitful statements. It begins running the series of fake system scans and then, once they’re completed, it reports various fake infections to you. Remember that they don’t even exist on your system. They’re simply invented in order to scare you tremendously with a lot of such untrue information.

The goal of XP Antivirus Plus 2013 virus program is to make users buy its fake licensed version which is not able to remove real threats. Indeed, when there are real vulnerabilities this program will not be good at all to assist users in malware elimination. So, if your system has been infected with this junkware, please completely ignore all its bogus virus reports, alerts and notifications. Instead, please carefully follow our malware removal guide that will help you delete this malware from your system. If you have any problems or difficulties doing so please do not hesitate to get in touch with us as soon as possible via all available customer support options.

XP Antivirus Plus 2013 similar removal video guide:

XP Antivirus Plus 2013 step-by-step removal instructions from GridinSoft Trojan Killer anti-virus Lab

Step 1.

Run GridinSoft Trojan Killer. Click Win+R and type the direct link for the program’s downloading.

If it does not work, download GridinSoft Trojan Killer from another uninfected machine and transfer it with the help of a flash drive.

Step 2.

Install GridinSoft Trojan Killer. Right click – Run as administrator.

Run as administrator


Don’t uncheck the Start Trojan Killer checkbox at the end of installation!


Manual removal guide of XP Antivirus Plus 2013 virus:

Delete XP Antivirus Plus 2013 files:

  • %LocalAppData%\[rnd_2]
  • %Temp%\[rnd_2]
  • %UserProfile%\Templates\[rnd_2]
  • %CommonApplData%\[rnd_2]

Delete XP Antivirus Plus 2013 registry entries:

  • HKEY_CURRENT_USER\Software\Classes\.exe
  • HKEY_CURRENT_USER\Software\Classes\.exe\ [rnd_0]
  • HKEY_CURRENT_USER\Software\Classes\.exe\Content Type application/x-msdownload
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon\ %1
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\ “[rnd_1].exe” -a “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\ “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\ Application
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\Content Type application/x-msdownload
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\DefaultIcon
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\DefaultIcon\ %1
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command\ “[rnd_1].exe” -a “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\open\command\IsolatedCommand “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command\ “%1″ %*
  • HKEY_CURRENT_USER\Software\Classes\[rnd_0]\shell\runas\command\IsolatedCommand “%1″ %*
(Visited 176 times, 1 visits today)

Related posts:

Leave a Comment