XP Antivirus 2015 Virus Removal Guide

XP Antivirus 2015 is a new fake computer antivirus application. The application was released around 6/7/2011 and has spread through the drive by download type infection. Generally, this type of application is spread through suspicious websites. When browsing these websites, XP Antivirus 2015 is generally downloaded without user permission and installed on the computer. This type of application is classified as a Rogue Security Application. While XP Antivirus 2015 may look like a real antivirus program, the program is fake. The program can’t provide any of the features it claims to have. XP Antivirus 2015 is one of many new fake applications; these fake antivirus programs are a large family of fake antivirus programs which are similar in functionality and look. The previous version of XP Antivirus 2015 was XP Anti-Virus 2016, which has a similar look and was released in March 2016.

The main executable for XP Antivirus 2015 is generally a series of three random letters or PW.exe. The file is generally a hidden system file. This executable is similar to AV.exe and AVE.exe, which are the main executable of previous clones of this virus. XP Antivirus 2015 will modify the registry; therefore, the registry must be fixed before removing the main executable file. The comments for AV.exe and comments for AVE.exe may provide insight into the successful removal of XP Antivirus 2015. These two pages have roughly a combined 160 comments.

Below is our recommended removal tool for XP Antivirus 2015. The removal tool has been rated 5 cows out of 5 by Tucows and was previously CNET’s Editor’s Choice. Feel free to download it below.

XP Antivirus 2015 will block the user from browsing the web. To download the removal tool, please type in the address below in Internet Explorer.

http://www.virusremovalguru.com/download.php

It is still possible to use Internet Explorer. In the video below, we have detailed how to access the web in Internet Explorer.

We recommend reading through our removal tips which will help to remove XP Antivirus 2015. XP Antivirus 2015, like many other fake antivirus programs, will create a series of warnings and pop ups in order to scare the user into purchasing the fake program. Some of these warnings which are created by XP Antivirus 2015 can be found below.

“XP Antivirus 2015 Firewall Alert!
XP Antivirus 2015 has blocked a program from accessing the internet.
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen. Private data can be stolen by third parties, including credit card details and passwords.”

“Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.”

XP Antivirus 2015 will also modify Internet Explorer to show the following alert listed below when the browser is opened. It will continue to show the following when visiting websites. It will essentially redirect the webpage to the following.

“Internet Explorer alert. Visiting this site may pose a security threat to your system!

Possible reasons include:

Dangerous code found in this site’s pages which installs unwanted software into your system.
Suspicious and potentially unsafe network activity detected.
Spyware infection in your system.
Complaints from other users about this site.
Port and system scans performed by the site being visited.

Things you can do:

Get a copy of XP Antivirus 2015 to safeguard your PC while surfing the web (RECOMMENDED).
Run a spyware, virus and malware scan.
Continue surfing without any security measures (DANGEROUS).”

It is recommended to use safe mode when removing the virus because XP Antivirus 2015 will generally not be able to load in safe mode. To enter safe mode, restart the computer and press F8 multiple times before the Windows screen to bring up the boot options.

Boot Menu

The safe mode with networking option will allow the user to be able to use the internet in safe mode. XP Antivirus 2015 can be removed by using the

or by manually removing the virus.

View XP Antivirus 2015 Files
View XP Antivirus 2015 Keys

Manual XP Antivirus 2015 Removal – In order to manually remove XP Antivirus 2015, the processes associated with XP Antivirus 2015 must be stopped, the files associated with the processes must be removed, and the registry entries must be corrected to the previous state before XP Antivirus 2015 entered the computer.

Stop XP Antivirus 2015 Processes (Learn How To Do This)
[random letters].exe

The executable for XP Antivirus 2015 will generally be a series of three characters or PW.exe.

Remove XP Antivirus 2015 Files (Learn How To Do This)
C:\Users\[username]\AppData\Local\[random letters].exe

XP Antivirus 2015 main executable file is generally a hidden protected system file. This is most likely done to make it harder to be found by the user. Therefore, the user will need to make changes to the view properties for viewing folders. The user will need to turn on “show hidden files” and must turn off “hide protected operating system files” in order to see these files. This feature can be found in the folder options in the view tab. In Windows 7, you can search “hidden files and folders” in the Windows Search Bar to find the folder options. To bring up the Windows Search Bar, click on the Windows logo in the bottom left hand part of the screen. It is recommended that the user turn back on “hide protected operating system files” after removing XP Antivirus 2015.

Remove XP Antivirus 2015 Registry Keys (Learn How To Do This)
HKEY_CURRENT_USER\Software\XP Antivirus 2015
HKEY_LOCAL_MACHINE\SOFTWARE\XP Antivirus 2015
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XP Antivirus 2015

Remove XP Antivirus 2015 Startup Entry (Learn How To Do This)
[random letters].exe

Your feedback is very highly valued by others so please feel free to comment below. Please feel free to share a solution that you may have used to remove XP Antivirus 2015.

This entry was posted on Wednesday, June 8th, 2017 at 10:08 pm and is filed under Malware Removal. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

Leave a Reply