SJ Internet Solutions

XP Guardian Descriptions:

XP Guardian, also known as XPGuardian, is the newest rogueware coming from the same family as Antivirus Pro 2010, PC Antispyware 2010 as well as Home Antivirus 2010. The fake application uses scare tactics to make you believe you need to purchase the software.

Once installed, XP Guardian starts scanning your computer. It detect a list of infections which are files created by Trojans in advanced. In addition, warning windows start popping up on the screen.

Never trust XP Guardian. Remove it as soon as you notice the application on your PC. Follow our site and we will provide you the full list of instructions how to do that.

Manual XP Guardian Removal Instructions:

Stop These XP Guardian Processes:
(Learn how to do this)
av.exe

Find and Delete These XP Guardian Files:
(Learn how to do this)
%UserProfile%\Local Settings\Application Data\av.exe
%UserProfile%\Local Settings\Application Data\WRblt8464P
%Documents and Settings%\[UserName]\Application Data\av.exe
%Documents and Settings%\[UserName]\Application Data\WRblt8464P

Remove These XP Guardian Registry Values:
(Learn how to do this)
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “av.exe” /START “firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “av.exe” /START “iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?