What is XP Anti-virus 2013?
XP Anti-virus 2013 is a piece of malware created to lure you into buying a non-functional program which supposedly removes viruses. This bogus application mimics operations of legitimate antivirus programs and expects that you will start thinking that you are infected. XP Anti-virus 2013 gets into the system through a Trojan that you may download bundled with other applications such as video codecs, video or music players, email attachments, etc. Once installed, the rogue presents misleading information, and you should remove it as soon as you can.
If you do remove this infection, you will have to bear its misleading scans and simulated infections such as worms, viruses, Trojans, etc, not to mention annoying Task Bar pop-up messages pushing you into activating the full version of XP Anti-virus 2013. Importantly, as the infection presented do not exist on your machine, do not even try to delete them, because instead of malicious elements some valid files of the system may be deleted. Moreover, do not believe that your PC is infected, because the only possible infection may be the very rogue, which should be deleted.
Although you can delete the infection manually, we highly recommend you remove XP Anti-virus 2013 with an automatic malware removal tool. The rogue will be detected and fully removed, because an antispyware application detects all the components of the infection. If you carry out the same procedure manually, it is possible that you will skip something, which does not guarantee that the infection will not be regenerated.
tested removal of XP Anti-virus 2013*100% FREE spyware scan and
Stop these XP Anti-virus 2013 Processes:
Remove these XP Anti-virus 2013 Files:
Remove these XP Anti-virus 2013 Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = ""%LocalAppData%\.exe -a "C:\Program Files\Mozilla Firefox\firefox.exe""
HKEY_CLASSES_ROOT\ah\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*
HKEY_CURRENT_USER\Software\Classes\ "(Default)" = 'Application'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*
HKEY_CURRENT_USER\Software\Classes\[random].exe\shell\open\command "(Default)" = "%LocalAppData%\[random].exe" -a "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = ""%LocalAppData%\.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe""
HKEY_CURRENT_USER\Software\Classes\[random].exe "(Default)" = ''
HKEY_CURRENT_USER\Software\Classes\\shell\open\command "(Default)" = "%LocalAppData%\.exe" -a "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = ""%LocalAppData%\.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode"