Remove Windows XP Repair. Description and removal instructions
Title: Windows XP Repair | Also known as: WindowsXP Repair, WindowsXPRepair | |
Type: Spyware |
Severity scale: (71 / 100) |
Windows XP Repair is a rogue disk defragmenter that deliberately reports fake hard drive and system errors. It wants to make you think that your computer has nemerous problems and to scare you into purchasing the rogue program. Please do not fall victim to this rogue program and remove Windows XP Repair from your computer as soon as possible. Please use the removal instructions below. Windows XP Repair enters the system without user permission and in order to protect itself attempts to disable legit security software. Compromised computer becomes completely taken over by this fake program in the result of such actions and Windows XP Repair begins the campaign it was designed to. Windows XP Repair will be configured to launch at startup, so be sure it will greatly affect your computer by running fake scanners and pop-up ads or notifications that will annoy you. It will also block other programs that are important for a normal computer work. Some of the fake alerts read:
Critical Error Hard Drive not found.
Missing hard drive.
Critical Error!
Windows was unable to save all the data for the file \System32\496A8300. The data has been lost. This error may be caused by a failure of your computer hardware.
Windows XP Repair is nothing more but a scam. Please do not install it on your computer. And most importantly, do not purchase this bogus program. If you have already purchased it the you should contact your credit card company and dispute the charges. Then please use the removal instructions below to remove Windows XP Repair either manually or with an automatic removal tool given below.
Discuss Windows XP Repair in
spyware removal forum
Automatic Windows XP Repair removal:
Windows XP Repair manual removal:
Kill processes:
[random].exe
how to kill malicious processes
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ” .exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ” “
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ‘0’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ‘0’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ‘1’
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ‘1’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ‘0’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0′
how to unregister malicious DLLs
Delete files:
%AllUsersProfile%\Application Data\~ %AllUsersProfile%\Application Data\~ r %AllUsersProfile%\Application Data\[random].dll %AllUsersProfile%\Application Data\[random].exe %AllUsersProfile%\Application Data\[random].exe %UserProfile%\Desktop\Windows XP Recovery.lnk %UserProfile%\Start Menu\Programs\Windows XP Recovery %UserProfile%\Start Menu\Programs\Windows XP RecoveryNINSTALL WINDOWS XP RECOVERY.LNK %USERPROFILE%\START MENU\PROGRAMS\WINDOWS XP RECOVERY\WINDOWS XP RECOVERY.LNK
how to remove harmful files
Delete directories:
%AllUsersProfile%\Application Data\[random]