Home » Fake Antispyware » Antivirus XP 2008

Antivirus XP 2008 Removal Guide

Threat Level:

9/10

Rate this Article:

Comments (0)

Article Views: 2185

Category:	Fake Antispyware

There are many ways for rogues such as Antivirus XP 2008 to arrive at your computer. In this case, the rogue antispyware application is being promoted and advertised via Trojans and other types of malware. In general, such infections can spread via spam email or social engineering. When you receive an email message from an unknown sender that is absolutely random, you should not open an attachment if there is one, or try and click on the link that is embedded on the message. It is very likely that you would end up being infected with Antivirus XP 2008 eventually.

Also, there are a lot of fake security alerts on the websites that you visit on daily basis, so if you click on any of these ads it is also possible to get infected with Antivirus XP 2008. In a nutshell, you would save yourself a lot of trouble by not clicking anywhere. However, even if you apply all the safety measures, rogues like Antivirus XP 2008 can still enter your system, because they don’t need to prompt you about the oncoming infection, and you will become aware of it only when the rogue’s interface pops into your screen.

Actually, Antivirus XP 2008 looks like a legitimate program, because it copies the color scheme and logo of official Windows products. For users who are not very much computer-savvy Antivirus XP 2008 can definitely seem reliable, especially as it launches a full system scan and finds a lot of viruses, giving description, level of threat and status. It says “Alert! Your system is infected!” and then offers to Remove Viruses. Don’t miss the golden tab at the left bottom corner of the interface which “Get Maximal Realtime Protection with Antivirus XP 2008”.

It implies that you would need to pay for the activation or the registration of this program in order to acquire this ultimate real time protection. That is absolutely out of question, because if you pay, you would reveal your credit card number, expiration date and the CVV2 to a third party thus giving a key to your bank account to cyber criminals. Of course, it is understandable that you would want to remove these parasites from your computer that are slowing down your system a great deal, but the truth is that the only thing slowing your computer down is Antivirus XP 2008 itself.

Your problems will be gone if and when your remove Antivirus XP 2008. Acquire a legitimate antimalware tool that will terminate the rogue and will help you to look for other malicious threats in your system, because Antivirus XP 2008 seldom comes alone.

Download Malware Scanner to detect Antivirus XP 2008*

Tested Antivirus XP 2008 removal solution for 64/32-bit Windows 7/Vista/XP/2000

*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

Antivirus XP 2008 Screenshots:

Antivirus XP 2008 technical info for manual removal:

Files Modified/Created on the system:

#	File Name	File Size (Bytes)	File Hash
1	lphcrw3j0e5e5.exe	199168 bytes	MD5: 4740615d379ec65e77d6414c1e9de9ca
2	ave.exe	200192 bytes	MD5: f3daefe27408c203ef4a4c19f06039e3
3	lwpwer.exe, empa.exe	1189857 bytes	MD5: c91ef4d73d64d00663c04adf19b5782b
4	rhca9fj0e7jr.exe	9457664 bytes	MD5: 83259ea84925f23ce43f526c0fc4d24b
5	%ProgramFiles%\rhcn7cj0ea59
6	Register Antivirus XP 2008.lnk
7	26scan[1].exe
8	ieupdates.exe
9	lphcef9j0e15r.exe	110080 bytes	MD5: 158da82d501be7e394b0327bcff04981
10	pphcr66j0e11c.exe
11	rhcg2sj0ep0c.exe	831488 bytes	MD5: 0f79fbdbcf2a416d1831570f461f8240
12	pphc38wj0e7er.exe
13	lphc110j0e78a.exe	134144 bytes	MD5: 765f909fc1b15d20796cfa467bcafc57
14	Antivirus-2008.exe	1075712 bytes	MD5: aa8ea9ef0820268d9246ff3d3d5422ac
15	rhcn7cj0ea59.exe	9457664 bytes	MD5: e41af37d5cd6508107efb81784f77e59
16	vma.exe	182784 bytes	MD5: a409477352916aac173b02b747151b7f
17	antiviirus.exe	10240 bytes	MD5: f811c4377332c81fde4e4dfa1c6d5ea0
18	pphcvmfj0e5a1.exe
19	wav.exe	325632 bytes	MD5: 4fbc16d94ea226f7278e294e0044b2b0
20	AntvrsInstall[1].exe	60416 bytes	MD5: fcfb95b95b2812bd93aff08e0e608667
21	AntivirusXP2008.exe	1671168 bytes	MD5: 3c23036f83013ced69398c50c1d8cc46
22	scan16085[1].exe	195072 bytes	MD5: 0c575193d1a1344f01b844b7911ff716
23	av2008xp.exe	1227264 bytes	MD5: 04a76850419d15ed8f713a38d8e55865
24	yayxuRJc.dll	321792 bytes	MD5: 08a133614055caf4cd5f2afd77e36e5c
25	Antivirusgolden 4.0.exe	1953792 bytes	MD5: cf5a5c661b9cb6fce5cc92ac6f906c16
26	pphcn3jj0epf7.exe
27	rhcn7cj0ea59Skin.dll	8245248 bytes	MD5: 317bbd8489a60112cf4958f40cf040d1
28	antivirus-2008pro.exe	1231064 bytes	MD5: 4c372f908aa1abc8b7184c49f1ac089c
29	rhctp3j0en6c.exe
30	lphca80j0e11g.exe	130048 bytes	MD5: c0776ab5d08df451897670752548f95b
31	xpa2008.exe	1056256 bytes	MD5: 6a616e48b6bdbf0796a5a598fe5aef9b
32	1scan31[1].exe
33	pphcn4nj0e58t.exe
34	scan[1].exe	60928 bytes	MD5: a45e0c5d415f7a9ce0eed56d177e40ed
35	pphcjuej0en4o.exe
36	vvunbwrhxa.exe	132096 bytes	MD5: f6eca74cd80fe171003f71a5aede2ff4
37	rhcn7cj0ea59.exe.local
38	av[1].exe	462848 bytes	MD5: d4ddb37ef8f171406e117d3dc7d99f6f
39	AntivirusGolden.exe	2273280 bytes	MD5: 471977806c4ceba71cbe040885b200a8
40	rhc13bj0e73j.exe	831488 bytes	MD5: f1692980a3ab58a22b33442cfd8f9c23
41	lphcg1gj0er7r.exe	110080 bytes	MD5: f5624d97a72e252d1fa252edc1fab213
42	Setup_trsupersolution-freeantivirus_com[1].exe	199168 bytes
43	lphcjosj0e9e5.exe	114176 bytes	MD5: 1f07bc3c130b2ccd952c01588e3fdc6f
44	lphcj7cj0ea59.exe	110080 bytes	MD5: d85e0a81c0c3665f36c17ed001f578c1
45	%AppData%\rhcn7cj0ea59
46	AntivirusXP.exe	1512960 bytes	MD5: d30b70479b5949ede657231ecd974aa4
47	lphcj7cj0ea59.exe,26scan[1].exe,642292000.exe	203776 bytes	MD5: 619fab63e1a12f2cf948e812131dce04
48	How to Register Antivirus XP 2008.lnk
49	.tt89.tmp	1589014 bytes	MD5: 626018abdf88b5134601723c9b6bde47
50	lphcjc8j0ec35.exe	199168 bytes	MD5: 609e59d17a35e514caea543868134d7a
51	pphcruaj0e355.exe
52	pphc1q9j0e5vc.exe
53	3.exe	827392 bytes	MD5: 1fc7d7591e0edcad45565ccda51a4528
54	.tt7.tmp.exe	1603919 bytes	MD5: 07a690fe30506a1a1a4e4f997d044dd4
55	imod3.dll
56	642292000.exe
57	pphcahoj0ercl.exe	106496 bytes	MD5: 69534bea316938567b5c53e697d21222
58	Antivirus XP 2008.lnk
59	rhcpwqj0ej27.exe, rhce80j0e11g.exe	9457664 bytes	MD5: 30e26e1a6a81503bd3c6008486386ca1
60	lphcc3qj0eacl.exe, lphce9fj0e7jr.exe	110080 bytes	MD5: d6c2a10553c213e9ede4f62137e45338
61	xpa_2008.exe	1050624 bytes	MD5: 8130d8a90b89b07f52f321c1b8f89379
62	pphc1kdj0elbj.exe
63	%AllUsersProfile%\Start Menu\Programs\Antivirus XP 2008
64	wscntfy.exe	30408704 bytes	MD5: f95cbc60e79ae4f0e9efdc1a4d3819ae
65	rhcgedj0ep8l.exe
66	lphccn4j0eadc.exe	110080 bytes	MD5: 00fe0f3086a6e4297f901f60516de0a6
67	Antivirusgolden 3.8.exe	2080768 bytes	MD5: 2ff9e315a9b6d340b2daa6e4ee8d03d6
68	pphc31wj0e9ea.exe
69	AntvrsInstall.exe	52224 bytes	MD5: 4a574021ce73bdade5281b52ef667f72
70	lphcgl5j0en59.exe	35328 bytes	MD5: 2913d35231da4c43a380e10a6c0e6643
71	pphcj7cj0ea59.exe	94208 bytes	MD5: 43b4f1d85a9ae77a818b4ffec7984247
72	rhcg4kj0e98e.exe
73	SetupAntivirusXP[1].exe	804864 bytes	MD5: bf5de889078aafe7af90d5d5e176db6a
74	Antivirus-Golden.exe	2273280 bytes	MD5: 03b478b848cea9282dc964dfd10ee8e0
75	Antvrs.exe	878592 bytes	MD5: 650a6cb1433b764e27ea59d2eca999a3
76	lphc395j0ee2a.exe	110080 bytes	MD5: 7ce64667732234eca965e01c4d0106a2
77	bpphcj7cj0ea59.exe	106496 bytes	MD5: 83eae4fc14acd18de28b313c821ca235
78	MSASCui.exe	183808 bytes	MD5: 912cfea4c8420146d77900a115c07097
79	Antivirusgold 4.1.exe	1994752 bytes	MD5: 43285e38f15090960a3ff09ff2a5803a
80	lphcrkkj0erbr.exe	110080 bytes	MD5: 0d0d2b357df5205bbce414e514be6b7e
81	lphc748j0elfp.exe	110080 bytes	MD5: 715b63c8e14e093ab269f665a0e88bdb
82	av.exe	178688 bytes	MD5: 5f966fac2df8730c9db4b0f4f6ee4238
83	.tt5E.tmp.exe	1606431 bytes	MD5: 0ac13469fe7054790800fd8e24d8c5df
84	setup_1_1_[1].exe	69120 bytes	MD5: 698dee2006883c23b3b7abcc29facc1f
85	vav.exe	325632 bytes	MD5: 4f94513287f9f829d4ef2b0bd177bd5e
86	lphc1tgj0e5e9.exe	110080 bytes	MD5: ce564d30ec9bbbc8278661b54f9a16db
87	pphclpmj0e73r.exe
88	lphcj7cj0ea59.exe,04scan[1].exe,584289103.exe	152576 bytes	MD5: 17aa05f3c70e113770e62d4875c13c0d
89	1450345358.exe
90	lphcc65j0e909.exe	203776 bytes	MD5: cd55078e05ec97707836e982a88336e9
91	av2008xp.exe,Install_1_1_[1].exe	1233920 bytes	MD5: 18db68b9045c0fe8096e0e46c95cb365

Files in the following directories were modified:

%ProgramFiles%
%AppData%
%AllUsersProfile%\Start Menu\Programs

Memory Processes Created:

#	Process Name	Process Filename	Main module size
1	lphcrw3j0e5e5.exe	lphcrw3j0e5e5.exe	199168 bytes
2	ave.exe	ave.exe	200192 bytes
3	lwpwer.exe, empa.exe	lwpwer.exe, empa.exe	1189857 bytes
4	rhca9fj0e7jr.exe	rhca9fj0e7jr.exe	9457664 bytes
5	26scan[1].exe	26scan[1].exe
6	ieupdates.exe	ieupdates.exe
7	lphcef9j0e15r.exe	lphcef9j0e15r.exe	110080 bytes
8	pphcr66j0e11c.exe	pphcr66j0e11c.exe
9	rhcg2sj0ep0c.exe	rhcg2sj0ep0c.exe	831488 bytes
10	pphc38wj0e7er.exe	pphc38wj0e7er.exe
11	lphc110j0e78a.exe	lphc110j0e78a.exe	134144 bytes
12	Antivirus-2008.exe	Antivirus-2008.exe	1075712 bytes
13	rhcn7cj0ea59.exe	rhcn7cj0ea59.exe	9457664 bytes
14	vma.exe	vma.exe	182784 bytes
15	antiviirus.exe	antiviirus.exe	10240 bytes
16	pphcvmfj0e5a1.exe	pphcvmfj0e5a1.exe
17	wav.exe	wav.exe	325632 bytes
18	AntvrsInstall[1].exe	AntvrsInstall[1].exe	60416 bytes
19	AntivirusXP2008.exe	AntivirusXP2008.exe	1671168 bytes
20	scan16085[1].exe	scan16085[1].exe	195072 bytes
21	av2008xp.exe	av2008xp.exe	1227264 bytes
22	Antivirusgolden 4.0.exe	Antivirusgolden 4.0.exe	1953792 bytes
23	pphcn3jj0epf7.exe	pphcn3jj0epf7.exe
24	antivirus-2008pro.exe	antivirus-2008pro.exe	1231064 bytes
25	rhctp3j0en6c.exe	rhctp3j0en6c.exe
26	lphca80j0e11g.exe	lphca80j0e11g.exe	130048 bytes
27	xpa2008.exe	xpa2008.exe	1056256 bytes
28	1scan31[1].exe	1scan31[1].exe
29	pphcn4nj0e58t.exe	pphcn4nj0e58t.exe
30	scan[1].exe	scan[1].exe	60928 bytes
31	pphcjuej0en4o.exe	pphcjuej0en4o.exe
32	vvunbwrhxa.exe	vvunbwrhxa.exe	132096 bytes
33	rhcn7cj0ea59.exe.local	rhcn7cj0ea59.exe.local
34	av[1].exe	av[1].exe	462848 bytes
35	AntivirusGolden.exe	AntivirusGolden.exe	2273280 bytes
36	rhc13bj0e73j.exe	rhc13bj0e73j.exe	831488 bytes
37	lphcg1gj0er7r.exe	lphcg1gj0er7r.exe	110080 bytes
38	Setup_trsupersolution-freeantivirus_com[1].exe	Setup_trsupersolution-freeantivirus_com[1].exe	199168 bytes
39	lphcjosj0e9e5.exe	lphcjosj0e9e5.exe	114176 bytes
40	lphcj7cj0ea59.exe	lphcj7cj0ea59.exe	110080 bytes
41	AntivirusXP.exe	AntivirusXP.exe	1512960 bytes
42	lphcj7cj0ea59.exe,26scan[1].exe,642292000.exe	lphcj7cj0ea59.exe,26scan[1].exe,642292000.exe	203776 bytes
43	lphcjc8j0ec35.exe	lphcjc8j0ec35.exe	199168 bytes
44	pphcruaj0e355.exe	pphcruaj0e355.exe
45	pphc1q9j0e5vc.exe	pphc1q9j0e5vc.exe
46	3.exe	3.exe	827392 bytes
47	.tt7.tmp.exe	.tt7.tmp.exe	1603919 bytes
48	642292000.exe	642292000.exe
49	pphcahoj0ercl.exe	pphcahoj0ercl.exe	106496 bytes
50	rhcpwqj0ej27.exe, rhce80j0e11g.exe	rhcpwqj0ej27.exe, rhce80j0e11g.exe	9457664 bytes
51	lphcc3qj0eacl.exe, lphce9fj0e7jr.exe	lphcc3qj0eacl.exe, lphce9fj0e7jr.exe	110080 bytes
52	xpa_2008.exe	xpa_2008.exe	1050624 bytes
53	pphc1kdj0elbj.exe	pphc1kdj0elbj.exe
54	wscntfy.exe	wscntfy.exe	30408704 bytes
55	rhcgedj0ep8l.exe	rhcgedj0ep8l.exe
56	lphccn4j0eadc.exe	lphccn4j0eadc.exe	110080 bytes
57	Antivirusgolden 3.8.exe	Antivirusgolden 3.8.exe	2080768 bytes
58	pphc31wj0e9ea.exe	pphc31wj0e9ea.exe
59	AntvrsInstall.exe	AntvrsInstall.exe	52224 bytes
60	lphcgl5j0en59.exe	lphcgl5j0en59.exe	35328 bytes
61	pphcj7cj0ea59.exe	pphcj7cj0ea59.exe	94208 bytes
62	rhcg4kj0e98e.exe	rhcg4kj0e98e.exe
63	SetupAntivirusXP[1].exe	SetupAntivirusXP[1].exe	804864 bytes
64	Antivirus-Golden.exe	Antivirus-Golden.exe	2273280 bytes
65	Antvrs.exe	Antvrs.exe	878592 bytes
66	lphc395j0ee2a.exe	lphc395j0ee2a.exe	110080 bytes
67	bpphcj7cj0ea59.exe	bpphcj7cj0ea59.exe	106496 bytes
68	MSASCui.exe	MSASCui.exe	183808 bytes
69	Antivirusgold 4.1.exe	Antivirusgold 4.1.exe	1994752 bytes
70	lphcrkkj0erbr.exe	lphcrkkj0erbr.exe	110080 bytes
71	lphc748j0elfp.exe	lphc748j0elfp.exe	110080 bytes
72	av.exe	av.exe	178688 bytes
73	.tt5E.tmp.exe	.tt5E.tmp.exe	1606431 bytes
74	setup_1_1_[1].exe	setup_1_1_[1].exe	69120 bytes
75	vav.exe	vav.exe	325632 bytes
76	lphc1tgj0e5e9.exe	lphc1tgj0e5e9.exe	110080 bytes
77	pphclpmj0e73r.exe	pphclpmj0e73r.exe
78	lphcj7cj0ea59.exe,04scan[1].exe,584289103.exe	lphcj7cj0ea59.exe,04scan[1].exe,584289103.exe	152576 bytes
79	1450345358.exe	1450345358.exe
80	lphcc65j0e909.exe	lphcc65j0e909.exe	203776 bytes
81	av2008xp.exe,Install_1_1_[1].exe	av2008xp.exe,Install_1_1_[1].exe	1233920 bytes

Registry Modifications:

The following Registry Keys were created:

MICROSOFT\WINDOWS\CURRENTVERSION\RUN\AntivirusXP.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphcc65j0e909
RUNNING PROGRAM\pphcvmfj0e5a1.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ inrhcnvjj0epd5
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\AntivirXP08
Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\AntivirusXP
RUNNING PROGRAM\pphclpmj0e73r.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SMrhcn7cj0ea59
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphc1tgj0e5e9
Microsoft\Windows\CurrentVersion\Run\lphcj7cj0ea59
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SMrhcg2sj0ep0c
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ AntivirusXP2008
rhcn7cj0ea59
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphcjc8j0ec35
Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Antivirus XP 2008
Microsoft\Windows\CurrentVersion\Uninstall\rhcn7cj0ea59
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ inrhc11wj0e13t
RUNNING PROGRAM\.tt89.tmp
Microsoft\Windows\CurrentVersion\Run\SMrhcn7cj0ea59
AntivirusGolden 3.8
RUNNING PROGRAM\pphc1q9j0e5vc.exe
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\s9201
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9C0D6625-1D9B-48FB-BFE6-0E796464E576}
RUNNING PROGRAM\pphcn3jj0epf7.exe
RUNNING PROGRAM\pphcn4nj0e58t.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SM3
Antivirus-Golden
Software\Microsoft\Windows\CurrentVersion\RunOnce "3P_UDEC"
AntivirusGolden 4.1
RUNNING PROGRAM\pphcruaj0e355.exe
AntivirusXP
AntivirusGolden 4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RUNNING PROGRAM\pphc38wj0e7er.exe
RUNNING PROGRAM\pphcr66j0e11c.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SMrhcgedj0ep8l
RUNNING PROGRAM\pphcjuej0en4o.exe
lphcj7cj0ea59
SOFTWARE\Microsoft\Windows\CurrentVersion "rhcn7cj0ea59"
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SMrhcg4kj0e98e
SMrhcn7cj0ea59
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ lphcjosj0e9e5
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SMrhctp3j0en6c
RUNNING PROGRAM\pphc1kdj0elbj.exe
AntivirusXP2008
RUNNING PROGRAM\pphc31wj0e9ea.exe
SOFTWARE\Microsoft\Windows\CurrentVersion rhcn7cj0ea59
SOFTWARE\Microsoft\Windows\CurrentVersion\rhcn7cj0ea59

Antivirus XP 2008 Removal Guide

Recently Active Threats

New Threats

Recently Active Trojans