Remove XP Protector 2009. Description and removal instructions

 
Title: XP Protector 2009
Also known as: XPProtector 2009, XPProtector2009
Type: Malware
Severity scale:XP Protector 2009 severity is 73  (73 / 100)
 
XP Protector 2009 is typical corrupt anti-spyware. It loads massive pop-ups trying to lure people into fraudulent security websites that sell non-existent software. Do not buy XPProtector2009 or anything else promoted by this program.

XP Protector 2009 is almost identical copy of another scam named AntiVirus XP. Both of these applications shouldn’t be trusted. XPProtector 2009 claims to be security tool. It displays plenty of pop-ups that look similar to warnings loaded by reputable anti-spyware tools. It also mimics computer scan to convince user that XP Protector 2009 is legitimate and functional application. But in the real world XPProtector2009 is useless and it is a scam. Do not trust XPProtector 2009 and remove it right after it infects a computer.


Related files: pphcj7cj0ea59.exe, rhcn7cj0ea59.exe, xpprotector2009.exe, forceuninstall.exe, pphc3nsj0e57c.exe, thcansj0e57c.exe, Uninstall.exe, xpprotectorinstaller.exe, xp protector 2009.lnk, how to register xp protector 2009.lnk, license agreement.lnk, register xp protector 2009.lnk, uninstall.lnk, database.dat, msvcr71.dll, thcansj0e57c.exe.local, license.txt, mfc71.dll, mfc71enu.dll, msvcp71.dll

XP Protector 2009 properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic XP Protector 2009 removal:

remover for XP Protector 2009

XP Protector 2009 manual removal:

Kill processes:
rhcn7cj0ea59.exe pphcj7cj0ea59.exe
Delete registry values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\internet settings\user agent\post platform xpprotector09
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run smthcansj0e57c
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\thcansj0e57c
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\thcansj0e57c displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\thcansj0e57c uninstallstring
HKEY_LOCAL_MACHINE\software\thcansj0e57c
HKEY_LOCAL_MACHINE\software\thcansj0e57c advid
HKEY_LOCAL_MACHINE\software\thcansj0e57c automaticallyupdates
HKEY_LOCAL_MACHINE\software\thcansj0e57c backgroundscan
HKEY_LOCAL_MACHINE\software\thcansj0e57c backgroundscantimeout
HKEY_LOCAL_MACHINE\software\thcansj0e57c buydiscurl
HKEY_LOCAL_MACHINE\software\thcansj0e57c buyurl
HKEY_LOCAL_MACHINE\software\thcansj0e57c databaseversion
HKEY_LOCAL_MACHINE\software\thcansj0e57c daysinterval
HKEY_LOCAL_MACHINE\software\thcansj0e57c domain
HKEY_LOCAL_MACHINE\software\thcansj0e57c engineversion
HKEY_LOCAL_MACHINE\software\thcansj0e57c guiversion
HKEY_LOCAL_MACHINE\software\thcansj0e57c installdir
HKEY_LOCAL_MACHINE\software\thcansj0e57c lasttimestamp
HKEY_LOCAL_MACHINE\software\thcansj0e57c minimizeonstart
HKEY_LOCAL_MACHINE\software\thcansj0e57c programversion
HKEY_LOCAL_MACHINE\software\thcansj0e57c proxyname
HKEY_LOCAL_MACHINE\software\thcansj0e57c proxyport
HKEY_LOCAL_MACHINE\software\thcansj0e57c scandepth
HKEY_LOCAL_MACHINE\software\thcansj0e57c scanpriority
HKEY_LOCAL_MACHINE\software\thcansj0e57c scansystemonstartup
HKEY_LOCAL_MACHINE\software\thcansj0e57c softid
Unregister DLLs:
msvcr71.dll msvcp71.dll mfc71enu.dll mfc71.dll

Delete files:
forceuninstall.exe pphc3nsj0e57c.exe thcansj0e57c.exe uninstall.exe xpprotectorinstaller.exe %common_desktopdirectory%\\xp protector 2009.lnk %common_programs%\\xp protector 2009.lnk %common_programs%\\xp protector 2009\\how to register xp protector 2009.lnk %common_programs%\\xp protector 2009\\license agreement.lnk %common_programs%\\xp protector 2009\\register xp protector 2009.lnk %common_programs%\\xp protector 2009\\uninstall.lnk %common_programs%\\xp protector 2009\\xp protector 2009.lnk %profile%\\application data\\microsoft\\internet explorer\\quick launch\\xp protector 2009.lnk %program_files%\\thcansj0e57c\\database.dat %program_files%\\thcansj0e57c\\uninstall.exe %program_files%\\thcansj0e57c\\msvcr71.dll %program_files%\\thcansj0e57c\\thcansj0e57c.exe %program_files%\\thcansj0e57c\\thcansj0e57c.exe.local %program_files%\\thcansj0e57c\\forceuninstall.exe %program_files%\\thcansj0e57c\\license.txt %program_files%\\thcansj0e57c\\mfc71.dll %program_files%\\thcansj0e57c\\mfc71enu.dll %program_files%\\thcansj0e57c\\msvcp71.dll %program_files%\\thcansj0e57c\\msvcr71.dll %program_files%\\thcansj0e57c\\msvcp71.dll %program_files%\\thcansj0e57c\\mfc71enu.dll %program_files%\\thcansj0e57c\\mfc71.dll %program_files%\\thcansj0e57c\\uninstall.exe %program_files%\\thcansj0e57c\\thcansj0e57c.exe %program_files%\\thcansj0e57c\\forceuninstall.exe xpprotectorinstaller.exe pphc3nsj0e57c.exe
Delete directories:
%common_programs%\xp protector 2009
%profile%\application data\thcansj0e57c
%program_files%\thcansj0e57c

Other programs to remove XP Protector 2009:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 09/09/08
Information updated: 10/09/08

Additional resources related to XP Protector 2009:

Attention: If you know or you have a website or page about XP Protector 2009 removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about XP Protector 2009 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: