XP Antivirus 2008

Posted: June 2, 2008

XP Antivirus 2008 Description

ScreenshotXP Antivirus 2008 is a rogue anti-spyware program that uses scare tactics to get you to purchase the full version of the XP Antivirus 2008 program. XP Antivirus 2008, or XPAntivirus 2008, may be downloaded and installed through the Zlob Trojan infection which is found on fake video codecs used to view porn videos. Zlob may affect your System32 files and load with a process called winlogon.exe. Zlob may even have rootkit functionality which gives it the ability to hide files in the system. Zlob may hijack browsers, display pop up ads and disable key system functions.

XP Antivirus 2008, if installed, runs a scan on your computer and alleges to detect spyware on your computer. After the scan is complete, XP Antivirus 2008 will display false postives and pop up a fake warnings message with the option to remove the detected spyware. Computer users are urged to avoid downloading or purchasing XP Antivirus 2008 no matter how legitimate the program may look. XP Antivirus 2008 may recreate itself after reboot, continue to run in the background of your system without your knowledge and display fake warning messages to drive you to purchase the full version of XP Antivirus 2008. XP Antivirus 2008's activities may generate a system slowdown.


ScreenshotScreenshot

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %desktopdirectory%\xp antivirus 2008.lnk
    2 %program_files%\xp antivirus\xpa.exe
    3 %startmenu%\xp antivirus 2008\uninstall xp antivirus 2008.lnk
    4 %startmenu%\xp antivirus 2008\xp antivirus 2008.lnk
    5 agpqlrfm.exe
    6 bindsrv2.exe.bat
    7 ddccBrSk.dll
    8 dmngyvfc.dll
    9 dssc32.exe.bat
    10 erms.exe
    11 fkaaejuc.dll
    12 hgGxXoMF.dll
    13 iifgETLc.dll
    14 install_v2.exe
    15 jaxtcwfg.dll
    16 kgxmotapktx.dll
    17 khfGvTMf.dll
    18 nrnnmb.dll
    19 obmuxmov.dll
    20 ooiqyu.dll
    21 pmalmfly.dll
    22 rhc9s8j0ec0t.exe
    23 rhc9s8j0ec0t.exe.local
    24 s1265.php.bat
    25 scksexde.exe.bat
    26 sjdvhd.dll
    27 smchk.exe
    28 smchk.exe.bat
    29 WinCtrl32.dl_
    30 WinCtrl32.dll
    31 winpu73.sys
    32 xpa.exe
    33 xpa2008.exe
    34 xpantivirus2008_v880019.exe
    35 xpantivirus2008_v880187.exe
    36 xpantivirus2008_v880339.exe
    37 xxyabcCs.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\software\xp antivirus\options billingregurlHKEY_CURRENT_USER\software\xp antivirus\options billingurl2HKEY_CURRENT_USER\software\xp antivirus\options billingurlapproved2HKEY_CURRENT_USER\software\xp antivirus\options lastrunHKEY_CURRENT_USER\software\xp antivirus\options scansHKEY_CURRENT_USER\software\xp antivirus\options securityvectorHKEY_CURRENT_USER\software\xp antivirus\options termsurl

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to XP Antivirus 2008 may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

4 Comments

Leave a Reply

Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter. If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.