Remove XP Defender Pro, or ave.exe (XP Defender Pro, or ave.exe Removal)

March 25th, 2010 | by Alex |

XP Defender Pro, or ave.exe Descriptions:

XP Defender Pro (XPDefenderPro) is the latest rogueware trying to rip you off. XP Defender Pro comes from the same family as Vista Defender Pro and Win 7 Defender Pro. Don’t give and don’t have anything in common with it. Be sure you have the up-to-date antivirus software.

As most of the present roguewares, XP Defender Pro is installed as you visit malicious sites, promoting the fake software. Other way to get this infection is by downloading flash player updates, as well as video codecs from the unknown sites. Be sure to enter the websites you know, as well as download software which is legible and trustful.

XP Defender Pro is installed as you want to update your flash player, or download a video codec. Keep in mind that watching movies online can cause great damage to your machine. Once installed, XP Defender Pro starts scanning your machine as you boot Windows up. These scans are simulated in advance, so all the viruses detected are only the way to threaten you, and, of course, convince you to spend your money on the useless application. Be careful.

Never install XP Defender Pro on your own wish. In case you already have this virus on your PC, remove it manually, following the instructions below. However, in order to detect XP Defender Pro automatically, use spyware detection utility.

Detect XP Defender Pro automatically – Download SpyHunter* Spyware Detection Utility

XP Defender Pro, or ave.exe Manual Removal Instructions:

Stop These XP Defender Pro Processes:
(Learn how to do this)
ave.exe

Find and Delete These XP Defender Pro Files:
(Learn how to do this)
%UserProfile%\AppData\Local\ave.exe

Remove These XP Defender Pro Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%Program Files%\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?