How to remove xp antivirus 2008 spyware

This post help to remove spyware from the computer. Antivirus 2008 is counterfeit anti-virus software. Antivirus 2008 usually installed itself onto your PC without your permission, through Trojan and virus. Antivirus 2008 will display fake system alerts or fake security alerts to trick user to buy the Paid Version of Antivirus 2008 (You could get Antivirus 2008 by opening an infected message in myspace or installing infected or fake video codec from video sharing websites.)

Press “Alt+Ctrl+Delete“, then click on “Task Manager“.
You can also launch the Task Manager instantly if you press Ctrl + Shift + ESC simultaneously.
Right click on AV2008.exe and AntiVirus2008.exe and click End Task.
Create a registry backup
Remove HKEY_LOCAL_MACHINE\SOFTWARE\AntiVirus2008
Remove HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows \CurrentVersion \Uninstall\AntiVirus2008
Click Start –> Search, then click on 'For Files and Folders…'
Search for File name AV2008.exe , AntiVirus2008.exe , AntiVirus2008.lnk , Uninstall AntiVirus2008.lnk
Type the filenames on the search box, and choose the “Local Hard Drives” (normally, it’s C: drive)
Click on 'Search' and delete these files

Get Antivirus Security For Your Computer

Computer viruses are malicious enough to spoil your years work. If you are among those who require being online for various purposes, whether work or fun, your computer is at risk of being attacked by numerous viruses roaming in cyberspace. So, guard your system against pesky malware with the help of an effective antivirus security program.

There can be a number of essential things that are required to be checked before you install antivirus or install spyware. Ensure that your PC is not virus infected. Such PC security software programs don't work if you install it on an infected computer. Since there are computer viruses that imitate the behavior of different computer files, the antivirus software may not be able to detect them. Once you make sure that your PC is malware-free, install your antivirus software

If you are completely baffled about which antivirus software program you should buy, you can take help of any online computer repair technician. They are masters in handling every issue related to computers and networking. Moreover, they can refer you the kind of antivirus you should use along with getting its installation, configuration and up-gradation done.

It is suggested to install antivirus or install antispyware under experts' guidance to ensure your PC security. Help centers have different computer support plans depending upon your personal requirements.

Other services available with these online computer help resources are PC health check up, data back-up services, troubleshooting computer errors, and handling basic installation/reinstallation for PC, operating systems or any other software applications. These services are not just limited to PCs or laptops. There is also the Internet support which is getting famous among computer enthusiasts. You can consider about availing Internet optimization services to optimize you Internet speed and run your network as never before.

In addition to offering you antivirus support services, online computer help resources can also help you with a plethora of technical support services. You can try asking these company a try-before-you-use plan which is generally free of cost. Another advantage of going with online computer support companies is their 24x7 availability and their expertise in handling technical issues and problems.

How to manually remove XP Antivirus 2010

This post provide antivirus support for remove virus 2010. Antivirus 2010 not only it uses misleading advertisements to gain a purchase, but also it crashes a system and loads fake Blue Screen of Death

Step 1: Stop unwanted process running in background.

Click Start then Run and type taskmgr.exe
Click on Process tab in Task Manager and locate the following Image name(s).

AV2010.exe
svchost.exe
wingamma.exe
Highlight the Image name and click End Process to Stop.
Close Task Manager.

Step 2:- Delete the suspicious file(s) or folder(s) from the computer

Click on Start and Run, type
C:\Program Files\AV2010 c:\Program Files\AV2010\AV2010.exe c:\Program Files\AV2010\svchost.exe
C:\WINDOWS\system32\IEDefender.dll
c:\WINDOWS\system32\wingamma.exe c:\Documents and Settings\All Users\Desktop\AV2010.lnk c:\Documents and Settings\All Users\Start Menu\Programs\AV2010
c:\Documents and Settings\All Users\Start Menu\Programs\AV2010\AV2010.lnk c:\Documents and Settings\All Users\Start Menu\Programs\AV2010\Uninstall.lnk
Locate the following folder and Delete

c:\Program Files\AV2010
c:\Documents and Settings\All Users\Start Menu\Programs\AV2010
close the Window.

Step 3:- Uninstall the Suspicious program from the computer.

Click on Start and Run, type appwiz.cpl, press Enter.
Locate Antivirus 2010 in Add and Remove Program.
Click on Remove (Uninstall) button.
Close Add or Remove program.
Restart the computer.

Step 4:- Manual Removal of suspicious entries from Registry.

CAUTION: Changing the Registry incorrectly could cause your comuter to stop working. Please make sure to create backup of registry or create system point before proceeding.

Click Start, Click run and type regedit.

Create a registry backup.
Note: Some of these Registry keys and values may be random.
Locate the following registry keys, right click and Delete
HKEY_CURRENT_USER\Software\AV2010
HKEY_CLASSES_ROOT\AppID\{3C40236D-990B-443C-90E8-B1C07BCD4A68}
HKEY_CLASSES_ROOT\AppID\IEDefender.DLL
HKEY_CLASSES_ROOT\CLSID\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO
HKEY_CLASSES_ROOT\IEDefender.IEDefenderBHO.1
HKEY_CLASSES_ROOT\Interface\{7BC7565C-5062-43CE-8797-DC2C271140A9}
HKEY_CLASSES_ROOT\TypeLib\{705FD64B-2B7B-4856-9337-44CA1DA86849}
HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC8A493F-D236-4653-9A03-2BF4FD94F643}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0012
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0013
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 'Windows Gamma Display'
Restart the computer.

How to manually identify and remove spyware and unauthorized Browser Helper Objects in Windows XP

Spyware is a general term that is used for a program that performs certain operations, such as the following:

• Advertising

• Collecting personal information

• Changing the configuration of the computer without consent


Typically, spyware is installed together with file sharing programs and with other programs that are available for free on the Internet.

When you install a program from the Internet on a computer, make sure that you carefully read the End User License Agreement (EULA). The inclusion of unwanted software in a given software installation may be documented. However, the documentation may appear at the end of a license agreement or of a privacy statement.

Spyware programs may also be installed when you visit a Web site and are prompted to install some components before you can access the Web page. Trojan viruses and other viruses may also install spyware programs on the computer.

This post discusses how to remove spyware that is loaded by using Browser Helper Objects (BHOs) in Microsoft Windows XP.


Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

You can identify a spyware program that is loaded by using BHOs. To do this, you can use the Microsoft system configuration utility (Msconfig.exe) and the Microsoft system information utility (Msinfo32.exe).

BHOs are Component Object Model (COM) components that Microsoft Internet Explorer loads whenever it starts. BHOs run in the same memory context as the browser. BHOs can perform any action on available windows and modules.


Note Legitimate programs, such as Microsoft Money, also use BHOs.

After you identify the unauthorized BHOs, remove the BHOs.

To manually remove BHOs, follow these steps:

1. Click Start, click Run, type regedit , and then click OK.

2. Locate and then double-click the following registry subkey:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

3. Under the Browser Helper Objects key, you may see ClassIDs (CLSIDs) that have a format that is similar to the following:

{XXXXXXXX - XXXX – XXXX – XXXX – XXXXXXXXXXXX}

Note CLSIDs are 128-bit numbers in hexadecimal notation that are enclosed in a pair of braces.

4.Note the CLSID.

5.Locate and then click the following registry subkey:

HKEY_CLASSES_ROOT\CLSID\{ CLSID }\InprocServer32

Note { CLSID } is the CLSID that you noted in step 4.

6.In the right pane, double-click (Default).

7.Click Value data to see the path of the .dll file. The path may be similar to the following:

C:\Windows\ Program_Name .dll

Note Program_Name can be a spyware program or a legitimate program that is using a BHO.

8.If Program_Name is not a recognized or legitimate program, unregister the .dll file, and then remove the { CLSID } subkeys. To do this, follow these steps:

a. At a command prompt, type the following command to unregister the .dll file:

regsvr32 -u Path \ Program_Name .dll

Note Path is the path of the Program_Name .dll file that is contained in the Value data box in step 7.

b.Locate and then delete the following { CLSID } registry subkeys:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\CLSID\{ CLSID }

•HKEY_CLASSES_ROOT\CLSID\{ CLSID }

Note { CLSID } is the 128-bit number that you noted in step 4.

9.Exit Registry Editor.

10.Restart the computer