XP antivirus 2008

Issue

Xp antivirus 2008 is not an anti-virus but a rogue: Security software using deceptive means to settle and perform other operations. Once installed, unauthorized software used most alarms to inform the user of the presence of spyware or malware on their system.


This rogue claims that it can remove the following viruses:

• SillyDl
• QQPass 1
• PassNCash
• Matcash BG II

Removing XP antivirus 2008

Using Malwarebytes' Anti-Malware

If XPAntivirus08 is installed on the PC, it is possible to remove it via Safe Mode with MalwareByte's Anti Malware.

• Download MalwareByte's Anti-Malware :

Malwarebytes' Anti-Malware 1.40

• Boot in Safe Mode
  • Restart the PC and tap the F8 key (or F5, 2 or 4 for some), until the appearance of entries with a choice of starting
  • With the arrow key, select Safe Mode/ Enter/ username
• Once in Safe Mode, run MalwareByte, then delete all the items detected as malwares.
• Restart the computer, it should now be clean!

Using SmitfraudFix

(Note: "process.exe", a component of the tool is detected by some antivirus programs as a "RiskTool. It is not a virus but a utility to terminate the process.

• Download SmitfraudFix and save it on your desktop.
• Then double-click and then click Run SmitfraudFix. (On Vista: Right-click on SmitfraudFix and select "Run as administrator")
• Select 1 to create a report file causing the infection.
  • At the end of the analysis, a report will be generated. Save it on the desktop.
  • At this point, if you need help, please post your results.
• Restart the computer in Safe Mode.
  • Double-click SmitfraudFix. (On Vista: Right-click on SmitfraudFix and select "Run as administrator")
  • Select 2 to delete the files causing the infection.
  • To the question: Do you clean the registry? Answer Y (yes) to unlock the screen and remove the keys starting automatically the infection, the fix will *determine if the file wininet.dll is infected. To the question: Correct the infected file? Answer Y (yes) to replace the corrupted file.
  • And then also save the report to your desktop.
  • Reboot in normal mode and post the report on the topic of the forum post that you created.