What is XP Antivirus Plus 2013?
XP Antivirus Plus 2013 is a multi rouge malware client. In a nut shell this is a fake antivirus program made to trick and scare users into making a purchase. Scams like this are nothing new and have been around for many years.
How Did I get infected with XP Antivirus Plus 2013?
In many ways this is a loaded question. Often times users are infected by visiting a malicious or hacked website that injects code onto their computer. This code is more commonly an exploit that then goes out and downloads malware like XP Antivirus Plus 2013.
There are a number or tricks used as well to con people into install the software. Once you remove XP Antivirus Plus 2013 you have to still run a full antivirus scan to ensure you are not infected with anything else.
We like Spyware Doctor with Antivirus. This anti-virus client is from Symantec. They are the same makers of Norton anti-virus. However the SDA interface is very simple to use and we like it better then Norton.
What is XP Antivirus Plus 2013 Doing to My Computer Right Now?
This program will mostly block other programs from running. It is very common not to be able to use antivirus software to remove this threat as the virus blocks it. We do have several work around’s described below to help you out. The warnings given off from XP Antivirus Plus 2013 are not real. The program shows a bunch of scary messages about being hacked as well as showing you thousands of infections. These are all made up. It’s part of the scam to scare and trick users into making a purchase of XP Antivirus Plus 2013.
» Download XP Antivirus Plus 2013 Removal Software
XP Antivirus Plus 2013 Manual Removal Procedures
The first thing we need to do is stop this virus program from running. After that we can delete the main executable and from there run a full virus scan.
The virus name is like the below
- [random].exe ( Example is rhf.exe or 3458fgfjr3fv.exe) This will change over time so you are looking for a file that is named something that makes no sense at all.
Here are several ways to stop this threat
A. Browse to the file location shown below under File Locations and re-name the file first and then restart your computer. Then browse to that file location again and delete the file. You can not delete a file while it is in use.
B. Boot into Safe Mode and delete the file. Again look at the file path below. You can also boot into “safe mode with networking” and download Spyware Doctor with Antivirus. You will be able to install it and run the virus scan. Learn how to boot into safe mode here
C: Log-into another users account and see if you can delete the file. Again use the File Locations below to locate the file
E: Start the Task Manager the very second you login and terminate the process that way. Then locate and delete the file
F: Use the command line to kill the task and then delete the file using the File Locations below. This is a little more advanced but we have a guide on this on http://www.removevirus.org/kill-running-process-using-command-line
File Locations
Take note that the below file locations contain hidden files and folders. For instance the AppData folder is a hidden folder. In order to view these folders you will need to show hidden files and folders. Learn how to at http://www.removevirus.org/show-hidden-files-and-folders
Windows Vista/7:
In one of the folder paths below you should find the file
- C:\Users\USER NAME\AppData\Local
- C:\Users\USER NAME\AppData\
Once you have deleted the above executable, XP Antivirus Plus 2013 will no longer be running. At this time you need to run a full virus scan. RUN THE SCAN!. We recommend wither SpyHunter. You need to ensure no other viruses are on your computer. So many people skip this very simple step. Take an extra few min tues and ensure you have all the viruses removed.
Outside Resources:
http://www.slideshare.net/gravysalson/delete-xp-antivirus-plus-2013
Thanks for this post, i will try that.