XP AntiMalware. How to remove? (Uninstall guide)

XP AntiMalware is also known as XPAntiMalware | Type: Rogue Antispyware
Severity scale:  
XP AntiMalware is a rogue anti-malware program that is promoted through the use of Trojans, browser hijackers and other similar malware. When your computer is infected with this bogus software, you will see many fake security alerts and notifications stating that your computer is infected. While running, XPAntiMalware will supposedly scan your computer and display a variety of infections that won't be removed unless you first purchase the program. The scan results are false, you can safely ignore them. The same could be said about fake system security alerts, you should ignore them too.

To make things even worse, XP AntiMalware will hijack Internet Explorer so that you will be constantly redirected to various misleading websites that promote malicious software or display misleading online ads. The rogue application will also block security related websites and antivirus software to protect itself form being deleted. As you can see, program is nothing more but a scam. Please use the removal guide below to remove XP AntiMalware from your PC as soon as possible.

XP AntiMalware removal instructions:

1. Click Start->Run (or WinKey+R). Input: "command". Press Enter or click OK.

2. Type "notepad" as shown in the image below and press Enter. Notepad will open.

3. Copy and past the following text into Notepad:

Windows Registry Editor Version 5.00


@=""%1" %*"

"Content Type"="application/x-msdownload"

4. Save file as "exefix.reg" (without quotation-marks) to your Desktop.
NOTE: choose Save as type: All files

5. Double-click to open exefix.reg. Click "Yes" for Registry Editor prompt window.

6. Download Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.

If you can't complete the above steps then please use another PC to download an automatic removal tool and exefix.reg (Right Click (Save Target As)) to download file. Copy these files to USB flash drive or any other external media and transfer them to infected computer. Launch exefix.reg file first and then install Spyware Doctor. XP AntiMalware properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic XP AntiMalware removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove XP AntiMalware you agree with our Privacy Policy and Agreement of Use.
remover for XP AntiMalware
Compatible with OS X
Webroot SecureAnywhere AntiVirus is recommended remover to uninstall XP AntiMalware. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Do it now!
remover for XP AntiMalware Happiness
Compatible with Microsoft
SpyHunter is recommended remover to uninstall XP AntiMalware. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove XP AntiMalware using Webroot SecureAnywhere AntiVirus SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.
Alternate Software
Tested and Confirmed! STOPzilla removes XP AntiMalware (2010-03-17 04:38:09)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes XP AntiMalware (2010-03-17 04:38:09)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing XP AntiMalware (2010-04-28 07:41:22)
Zemana Antimalware
Tested and Confirmed! STOPzilla removes XP AntiMalware (2010-03-17 04:38:09)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes XP AntiMalware (2010-03-17 04:38:09)
Virus Removal Phone Support
Help Line to remove XP AntiMalware

XP AntiMalware manual removal

Kill processes:
Delete registry values:
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand | @ = ?€??€?%AppData%ave.exe?€? /START ?€?%1?€³ %*?€?
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand | IsolatedCommand = ?€??€?%1?€³ %*?€?
HKEY_CURRENT_USERSoftwareClasses.exe | @ = ?€?secfile?€?
HKEY_CURRENT_USERSoftwareClasses.exe | Content Type = ?€?application/x-msdownload?€?
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand | @ = ?€??€?%AppData%ave.exe?€? /START ?€?%1?€³ %*?€?
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand | IsolatedCommand = ?€??€?%1?€³ %*?€?
Delete files:
%UserProfile%\Local Settings\Application Data\ave.exe

Geolocation of XP AntiMalware

Map reveals the prevalence of XP AntiMalware. Countries and regions that have been affected the most are: United States.

Information added: 03/17/10 04:38; information updated: 04/28/10 05:04

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Comments on XP AntiMalware

FYI- we beat this virus once, or so we thought...it comes back as vma.exe At least the user knew enough this time not to think it was real and follow all the faux prompts. We are running NAV, superanti-spyware, SpyBot AND MalwareBytes...how many damn software do we need to get rid of this thing!
i did everything and the spyware doctor said it removed all the trojans and stuff, but why do i keep getting a popup from the anti malware?
la sequence n'est pas reconnue comme sequence de commande de registre...

Post a comment

Attention: Use this form only if you have additional information about XP AntiMalware parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook
Recent Malware
Read on mobile
Press Mentions
I failed to remove XP AntiMalware using SpyHunter.


add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!