XP Defender Pro removal guide

XP Defender Pro is a rogue antivirus that installed itself through various trojans and uses aggressive techniques to protect itself from removal. If you’ll launch any executable – ave.exe instead launches XP Defender Pro. This rogue also modify certain keys so that when you launch FireFox or Internet Explorer it will launch itself instead and display a fake firewall warning. XP Defender Pro will scan your computer and then display a variety of false infections. It will not, though, allow you to remove any of these infections without first purchasing the program.

XP Defender Pro
XP Defender Pro

XP Defender Pro is a rogue anti-spyware and a potentially significant threat to your PC security and your own privacy, remove XP Defender Pro ASAP once detected in your computer.

GridinSoft LLC and Trojan-Killer.com IS NOT associated, affiliated, consorted, or connected with the publishers or creators of XP Defender Pro.


XP Defender Pro automatical remover:

  1. 1. Download the last version of Trojan Killer to clear (not infected) computer and install it
  2. 2. Update the virus database
  3. 3. Copy whole folder “c:\Program Files\GridinSoft Trojan Killer” to your memory stick
  4. 4. Rename “trojankiller.exe” to “iexplore.exe”
  5. 5. Move memory stick to infected PC and run iexplore.exe from “Trojan Killer” folder

The screenshot above displaying all the threats that Trojan Killer found. Please note that the infections found on your computer may be different than what is shown here
The screenshot above displaying all the threats that Trojan Killer found. Please note that the infections found on your computer may be different than what is shown here

As you might have foreseen, XP Defender Pro is not a lonely walker in the empty space. In contrary, it has multiple ties with other rogues so that complex malware removal is the best way to get rid of XP Defender Pro. In addition, if you remove XP Defender Pro automatically, you get life-time protection from malware aggression.


XP Defender Pro manual removal guide:

Delete XP Defender Pro files:

%AppData%\ave.exe
%AppData%\av.exe

Delete XP Defender Pro registry entries:

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1” %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1” %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1” %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1” %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1”

Leave a Comment

*