Severity scale:  

Windows XP Restore. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as WindowsXPRestore | Type: Rogue Antispyware

Windows XP Restore is a rogue computer optimization and defragmentation program that wants to scare you into thinking that your computer has some problems and issues. Windows XP Restore pretends to scan your hard drives and system memory for various errors. Then it states that you need to use the defragment tool to fix supposedly found errors. It fixes some errors for free and then prompts to pay for a full version of the program to fix other programs as well. Please do not fall victim to this rogue program and remove Windows XP Restore from your computer upon detection. Please use the removal instructions below.

Windows XP Restore enters the system without user permission and in order to protect itself attempts to disable legit antimalware software found. Actually, it blocks nearly all programs on the computer. Just run a program several times and it will eventually work. Compromised computer becomes completely taken over by this fake program in the result of such actions and Windows XP Restore begins the campaign it was designed to. Win Defrag will be configured to launch at startup, so be sure it will greatly affect your computer by running fake scanners and pop-up ads or notifications that will annoy you.

Overall, your computer will work slower. You will also see fake alerts from Windows taskbar. As you can see, Windows XP Restore is a total scam. Do not purchase it. If you have this rogue program on your computer please use the removal instructions below. You can remove Windows XP Restore manually but we strongly recommend to use an automatic removal tool given below.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows XP Restore you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows XP Restore. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.
Press mentions on Reimage
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows XP Restore (2012-02-06)
We have tested Malwarebytes's efficiency in removing Windows XP Restore (2012-02-06)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows XP Restore (2012-02-06)
We have tested Malwarebytes's efficiency in removing Windows XP Restore (2012-02-06)

Windows XP Restore manual removal:

Kill processes:

Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random].exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "[random]"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "CertificateRevocation" = '0'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnonBadCertRecving" = '0'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktop "NoChangingWallPaper" = '1'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes" = '/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAttachments "SaveZoneInformation" = '1'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = '1'

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciessystem "DisableTaskMgr" = '1'

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "CheckExeSignatures" = 'no'

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain "Use FormSuggest" = 'yes'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced "Hidden" = '0'

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced "ShowSuperHidden" = 0'

Delete files:
%AllUsersProfile%Application Data~[random]

%AllUsersProfile%Application Data~[random]r

%AllUsersProfile%Application Data[random].dll

%AllUsersProfile%Application Data[random].exe

%UserProfile%DesktopWindows XP Restore.lnk

%UserProfile%Start MenuProgramsWindows XP RestoreUninstall Windows XP Restore.lnk

%UserProfile%Start MenuProgramsWindows XP RestoreWindows XP Restore.lnk

Delete directories:
%UserProfile%Start MenuProgramsWindows XP Restore

%AllUsersProfile%Application Data[random]

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions