How to Remove XP Police Antivirus (Removal)

February 22nd, 2009 | by Alex |

XP Police Antivirus Descriptions:

XP Police Antivirus, or simply known as XP Police, is created by some bad people who try to ruin the integrity of our computing experience. XP Police is not what we normally see in our life where policemen are the protection to our daily life. In reality, the opposite is true. XP Police is the culprits. It is ironic to see this happens again and again, without much intervention from the government. Guess we are living in an usual world and nothing really surprises us anymore. Generally, XP Police Antivirus usually comes up after you installed a video codec that come with Trojan, malware and virus. XP Police Antivirus normally generates fake and misleading system popup error messages such as “Trojan Detected! A piece of malicious code was found in your system which can replicate itself if no action is taken. Click here to have your system cleaned by XP Police Antivirus.” What this does is to trick the innocent people like you to spend money and purchase XP Police Antivirus, which is the real spyware itself. Don’t fall into the trap!

It is more important that ever to remove all the components of of the XP Police Antivirus, and all the malware and trojans that it might have come bundle with (such as zlob.trojan, trojan.vundo and Trojan.Downloader). We don’t want someone spying on our digital life, do we? To effectively and safely remove XP Police Antivirus, we have created a manual removal instructions. Be sure to back the data up before proceeding. Good luck!

XPPoliceAntivirus Download SpyHunter* Spyware Detection Utility

Manual XP Police Antivirus Removal Instructions:

Stop XP Police Antivirus Processes:
(Learn how to do this)
XPPolice.exe

Find and Delete these XP Police Antivirus Files:
(Learn how to do this)
XPPolice.exe
c:\Program Files\XPPoliceAntivirus
c:\Program Files\XPPoliceAntivirus\AVCoreFn.dll
c:\Program Files\XPPoliceAntivirus\bdconf.cfg
c:\Program Files\XPPoliceAntivirus\Core.dll
c:\Program Files\XPPoliceAntivirus\setup.dat
c:\Program Files\XPPoliceAntivirus\xppolice.exe
c:\Program Files\XPPoliceAntivirus\Plugins
c:\Program Files\XPPoliceAntivirus\Plugins\ceva_dll.cvd
c:\Program Files\XPPoliceAntivirus\sounds
c:\Program Files\XPPoliceAntivirus\sounds\alert.wav
c:\Program Files\XPPoliceAntivirus\Plugins\ceva_emu.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\ceva_vfs.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\ceva_vfs.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\cevakrnl.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\cevakrnl.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\cevakrnl.rvd
c:\Program Files\XPPoliceAntivirus\Plugins\cookie.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\cran.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\cran.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\e_spyw.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\e_spyw.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\emalware.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\gvmscripts.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\hpe.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\java.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\mdx_97.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\mdx_97.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\mdx_w95.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\mdx_x95.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\mdx_xf.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\mobmalware.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\na.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\nelf.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\regarch.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\regscan.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\rup.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\sdx.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\sdx.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\unpack.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\unpack.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\vb0.dat
c:\Program Files\XPPoliceAntivirus\Plugins\vb1.dat
c:\Program Files\XPPoliceAntivirus\Plugins\vb2.dat
c:\Program Files\XPPoliceAntivirus\Plugins\ve.cvd
c:\Program Files\XPPoliceAntivirus\Plugins\ve.ivd
c:\Program Files\XPPoliceAntivirus\Plugins\vedata.cvd
c:\Program Files\XPPoliceAntivirus\sounds\click.wav
c:\Program Files\XPPoliceAntivirus\sounds\fire.wav
%UserProfile%\Desktop\XP Police Antivirus.LNK
%UserProfile%\Start Menu\XP Police Antivirus.LNK

Remove XP Police Antivirus Registry Values:
(Learn how to do this)
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run ieupdate

bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark bookmark


Add this page to Favorite (For Internet Explorer)


Disclaimer

  1. 107 Responses to “How to Remove XP Police Antivirus (Removal)”

  2. By AngryMan on Jan 27, 2009 | Reply

    Are you kidding me? XP Police Antivirus? This thing is worse than a real criminal!!!

  3. By jesse on Jan 27, 2009 | Reply

    xppolice.exe is not found. what’s next?

  4. By Melanie on Feb 3, 2009 | Reply

    Thank you. I went to a website and this thing popped up on my desktop, downloaded it to my Program Files directory and all these silly pop-ups popped everywhere. It really did look like real Windows programs.

    Following your instructions I was able to get that stuff off my system although I couldn’t find it in the registry. Thank you so much.

  5. By Melanie on Feb 3, 2009 | Reply

    Updated: I did find it in my registry. Thanks a lot.

  6. By Bill on Feb 3, 2009 | Reply

    Thank you!!!!! I very much appreciate your clear instructions. We seem to have this one cleared out, thanks to you.

    Looks like an IE vulnerability?

  7. By policeman on Feb 3, 2009 | Reply

    I’ll find the people who created this xp police antivirus shit and put them in jail!

  8. By DeputyChiefX3 on Feb 4, 2009 | Reply

    Thanks for your clear instructions. I can’t find it in the registry! and thanks for helping out sombody who really doesn’t understand everywhere to look to get rid of this junk!

  9. By angry on Feb 4, 2009 | Reply

    it wont let me stop the processes. eveyrthing keeps popping up and you can’t delete it. any tips

  10. By nads on Feb 4, 2009 | Reply

    I can’t say how much I hate you. stupid xp police antivirus! i can’t do anything with the laptop.

  11. By Hawk on Feb 5, 2009 | Reply

    How can i locate it if it isn’t directly in my program files?? I searched and found the shortcut to to program but the program doesn’t appear in my program files.

  12. By Chris on Feb 5, 2009 | Reply

    This has even removed my authority to the Task Manager. It’s greyed out now. Any ideas on how I can get it back?

    Thanks

  13. By Jack on Feb 5, 2009 | Reply

    Start Reg.-Editor and see HKEY_Curent_User/Software/Microsoft/CurrentVersion/Policies/System” and delete for the two entries saying “DisableRegistryTools” and “disableTaskMgr”. Make sure to start in SafeMode in case you can’t get the Reg.-Editor startet. Follow all other steps as mentioned above.

  14. By Brendon on Feb 5, 2009 | Reply

    Xppolice disables task manager. To fix this go to start, run then enter the text below.

    REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

    That should enable task manager. Hope that helps.

  15. By Johnny Brasco on Feb 5, 2009 | Reply

    Click Start, Run, and then copy & paste this (w/o quotes):

    “REG add HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem /v DisableTaskMgr /t REG_DWORD /d 0 /f”

  16. By Pissed Off Internet User on Feb 6, 2009 | Reply

    This is ****ing bull****. These people who create this ****ing viruses should be shot or put in ****ing prison. In-bed these ****ing viruses in an active-x video file program. All i see is these ****ing low life people, no, not people, ****ing scum, who desire to cause pain and frustration to other people who try to go about their daily ****ing lives. These people should create a ****ing virus to put money into my ****ing bank account!!!!!!!
    You ****ing ***holes, you have something coming to you. ****ing no good mother ****er’s. I hope one day you ****ing choke on your ****ing ****ed up viruses and ****ing die.

  17. By Pissed Off Internet User on Feb 6, 2009 | Reply

    Thanks for posting information on this site everyone. Now, i can spend the next hour or so removing this bologna. I hope i can get rid of this virus and start having fun on my pc.

  18. By Kobe on Feb 6, 2009 | Reply

    Don’t get pissed off so easily. They have a very good removal instruction to remove Antivirus 360, but make sure you do this in safe mode (reboot computer -> press F8 as soon as you see Starting Windows). This will minimize the AV360 processes running in the background.

  19. By Fred on Feb 7, 2009 | Reply

    I’ve completed the manual removal of the XP Police virus …. but my Internet Explorer still goes only to the XP Police web site. The home page is se to Yahoo, but no matter what address I type in, the IE goes to “about:security” then the XP Police web site.

    Is there something I still need to do to stop this? Or, did I miss something?

    Fred

  20. By nny guy on Feb 8, 2009 | Reply

    Check Registry Editor again.When I cleaned a family member’s computer this AM, XPpolice had created a folder within the registry under CurrentUser/Software with the IE home page reset as well as some other changed settings.

  21. By DJ Eelness on Feb 9, 2009 | Reply

    Actually there is another way: Create a new account and delete folder in Program files from there. I tried in your way but i could not delete XP Police folder because it was in use and when I tried to open task manager pop up window showed up: Task manager was disabled by Adminstrator! I think these bastards became more trickier every second… :D

  22. By Nick on Feb 10, 2009 | Reply

    Ok. this virus has been increasingly annoying to me, thanks for telling me how to get rid of it because mcafee wouldn’t pick it up, and I think it installed some other things too because I was recomended to get spyware doctor and it came up with a extreamly high level trojan named Trojan-Spy.Zbot and I can’t get ANYTHING to pick it up or find much info on it besides the fact it is a REALLY strong keylogger and even has some sort of backdoor proxy use ( sorry for my poor grammer, I’m really tired )

  23. By thequicknessinc on Feb 10, 2009 | Reply

    alright, hopefully you were quick and got here first. speed is the key.

    Go to Run:
    Type: taskkill /f /fi /XPPolice.exe

    Thats the hardest part. Now the process has stopped so you can delete that list of files. you can relax and take your time with the rest.

    Then delete the regeistry:

    Go to Run:
    Type: regedit
    click on: HKEY_CURRENT_USER
    then on: software
    then you see xp police 2009. delete that entire registry.

    Everything should work now except your ctrl alt delete right?

    Go to Run:
    Type: REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

    Now your headache is over. have a good day. and thanks to everyone who supplied me with all the pieces for this. it took me about the past 3 hours.

  24. By Matt Suhu on Feb 10, 2009 | Reply

    Thank you, thequicknessinc. you rock!

  25. By thequicknessinc on Feb 10, 2009 | Reply

    Found one more registry entry that needs to be deleted.

    Go to Run:
    type: regedit
    click on: HKEY_CURRENT_USER
    then on: software
    then on: microsoft
    then on: windows
    then on: CurrentVersion
    then click on: Run

    there should be a registry entry called “policeav”, delete that too.

  26. By thequicknessinc on Feb 10, 2009 | Reply

    This headache doesnt seem to end?

    Go to Run:
    type: regedit
    click on: HKEY_CURRENT_USER
    then on: software
    then on: internet explorer
    search throughout that file for anymore changes. only one i found was under main – startpage.

  27. By Carmaletta on Feb 10, 2009 | Reply

    My sister got this horrible thing, and it’s very similar to the one that I had last year. We ran SpyHunter to find the files and register keys, then planned to delete them. When we went to the registry, though, we couldn’t find any of the files. When we tried to delete the folder in Program Files, it wouldn’t let us. We also lost the task manager. We tried several of the fixes listed here and nothing. I then rebooted the computer and suddenly, every sign of it was gone except for one little cookie that we can’t find. However, we stalk can’t access the task manager. Any ideas?

  28. By Jamie on Feb 10, 2009 | Reply

    Great instructions, this did the trick for me, fyi, i think this my wife got this on our computer by going to this web site…

    freaky best man speech.com

  29. By Jesse on Feb 10, 2009 | Reply

    I just got this on my laptop today, and I couldn’t delete it or access Task Manager.
    If you can’t fix it, REBOOT IN SAFE MODE, then follow the above instructions in deleting the files and registry key.

  30. By Dkkkkkb on Feb 11, 2009 | Reply

    Do a system restore :) :) best way i found to fix the problem after searching for ever

  31. By Victim # 534,642 on Feb 11, 2009 | Reply

    Thank you thequicknessinc! I have spent the entire day trying to figure out the best way to handle this thing. Thanks to you, all of my problems are solved!!!

  32. By Herman on Feb 11, 2009 | Reply

    Thank you for your help. After hours spent Tuesday and Wednesday finally some answers.

  33. By Karen on Feb 11, 2009 | Reply

    Thanks for the help. The only problem I have left now is that when I do a google search (it’s my homepage) and click on a link it opens in a new tab and half the time goes to some random site. Any ideas on what else I have to delete?

  34. By Mary Garcia on Feb 12, 2009 | Reply

    WTF!!! I’m so pissed off over this XP Police crap. This is unreal. Oh how I would love to find out what stupid ass immature idiot created this virus.

    I’m about ready to start the process from this site. Reading all of the positive comments i’m already feeling better that i’ll get this fixed.

    This is what it’s done to me for reference and/or commands I cannot access…

    1. System Restore-disabled. Can’t access it thru Start-
    All Programs-Accessories or even manually thru cmd.
    2. Task Manager-disabled. Doesn’t matter if you right click on bottom bar or Ctrl-Alt-Del, the Task Manager is shadeded out so it’s not clickable.
    3. S-L-O-W!!! Oh my this thing is crawling. Safe Mode, Safe Mode-Networking, Safe Mode-Command, doesn’t matter. Takes forever to do anything.

    Wish me luck. Will post back tonight!

    Mary

  35. By Mary on Feb 12, 2009 | Reply

    Oh, and for whomever suggested to simply do a System Restore….that’s the 1st thing this Virus goes after to disable. System Restore and Task Manager. I could only wish this virus was that simple to fix.

  36. By thequicknessinc on Feb 12, 2009 | Reply

    Karen,
    Im guessing you use Internet Explorer right? If so, it created some registry changes for internet explorer. Do this –>

    Click on Run off of your start menu
    type: regedit
    click on: HKEY_CURRENT_USER
    then click: software
    then click: microsoft
    then click: Internet Explorer
    highlight Main, scroll down to Start Page on the right hand side: If its changed change it back to google.com or whatever you want.
    go back to the left hand side and look a few more folders down for TypedURLs. Highlight it and in the right hand side find any XPPolice urls and just delete them.

  37. By LiSmOr3 on Feb 12, 2009 | Reply

    If you’re having trouble finding certain registry files like ‘disabletaskmgr’ (they aren’t always in the same place for everyone), remember you can search for them within regedit. I did this when I found that typing in the ‘reg add’ command to re-enable task manager didn’t work and the paths to the ‘disabletaskmgr’ file listed in the above comments didn’t exist on my system, and it found them for me to delete. Everything works fine now. Good luck. Also thanks to thequicknessinc and all others who have posted very good advice on how to sort out this problem. Much obliged.

  38. By tony on Feb 12, 2009 | Reply

    i tryed to remove through your but its not working what am i doing wrong

  39. By thequicknessinc on Feb 12, 2009 | Reply

    tony

    its because youve got your tennis shoes on, you have to take your shoes off for it to work. jk
    i need to know what youre doing first before i can tell you how to do it right. heres some hints though.

    Did you stop the XPPolice.exe process? Use task manager to stop that specific process first. If you cant use task manager you have to use the taskkill command. Type that into the Run dialog box. If that doesnt work Go to Run, type: cmd, and then type it into the command prompt. type this without quotations–> “taskkill /f /fi /XPPolice.exe”

    after you stop the process from running start deleting all the files listed at the top of the page.

    If youre still having problems post back. Good luck!

  40. By Dan on Feb 12, 2009 | Reply

    hi all,

    I’ve got everything corrected except my start page is still showing the about:security XPPolice webpage. If I try to go to another website, it takes me back to this page. I followed the steps above and changed the start page back to what i wanted and cleaned out the typedURLs folder. Should I be looking for something else?

  41. By thequicknessinc on Feb 13, 2009 | Reply

    This might sound dumb, but try reinstalling Internet Explorer? Or just search through the IE registry to see if it had the chance to alter anything else?

  42. By Peter on Feb 13, 2009 | Reply

    Holy Sh;t.

    I know how to use the basics of my computer and have been happy to say until now have been lucky. How the crap am I going to figure this out.

    I dont want to say how p;ssed I am at this person for making this as it probably provides the twisted fk with what he needs to reach for his ‘lucky’ sock out the draw. Lets focus on the fact this fker is a virgin living with his mum working a dull job and with no hope of ever getting laid apart from Karma ramming him in the @ss. What a dueshebag… Rot in hell

    Thanks for your help everyone.

  43. By Sean on Feb 13, 2009 | Reply

    I Still can not get the Ctrl+Alt+Delete to work it is still disabled
    I tried to do:
    Go to Run:
    Type: REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

    As writen by thequicknessinc
    But it will not even run REG add
    Can someone help me please I was able to remove everything else.
    Thank you to everyone who has tried to put information. REALLY!!!!

  44. By alokpatel on Feb 13, 2009 | Reply

    hi plz install my pc free xp police antivirus

  45. By Sacheendra on Feb 13, 2009 | Reply

    thequicknessinc saved my life. Everything is working now. Thanks Mate.

  46. By Tom on Feb 13, 2009 | Reply

    Hi

    Okay so I’ve been at this for a while now and I still seem to have an issue. I can’t find some of the file names but the ones I did I deleted. I did the regedit stuff and deleted what was to be deleted. My problem is that when I do a google search and click search the screen widens. Then when I click on the link a new window pops up and takes me to this “coupon mountain” website everytime. I followed quicknessinc’s advice to Karen but there were no xp police things on the TYPEDURL screen. Anyone have an idea what is going on? Is it possible that this XP Police thing is still on my computer? Thank you for any help.

    tom

  47. By Billa on Feb 13, 2009 | Reply

    By deleting the program files folder, i mean xp police program files folder.

  48. By Robbie on Feb 13, 2009 | Reply

    I seem to have a problem that nobody else has.
    My regedit is also disabled just like the task manager is. Can you help pls?

  49. By Robbie on Feb 13, 2009 | Reply

    Also, when I try to backup my registry, I get a failure pop up. Then a catostrophic failure message. These may be false messages since a backup file shows where I put it. How do I know if I backed up my registry or not?

  50. By kat on Feb 13, 2009 | Reply

    My administrator is locked out and they’ve taken control over my screen saver. When the popup comes on and I right click the police site shows up on toolbar. I can’t find any files with any known names of this problem. How do I get control back over admin. I’ve tried to open in safe mode and it won’t let me, just reverts back to last known.

  51. By edith on Feb 13, 2009 | Reply

    thx a lot thequicknessinc!!!
    u save my computer. ^^

  52. By Sailesh on Feb 14, 2009 | Reply

    Hi. I had just got my broadband fixed and was suddenty struck by this f*kng XP police. Needless to say it was too naked to be recognised as a patrolman besides I had a few windows which were actually askng me to screw my system and make it available for the trojans. Its surprising that such viruses continue to screw our happiness and nothing can be done. I had quick heal installed luckily. I had to reboot my system and when the system started to load Quick Heal confirmed a few exe file to be trojans and hence quarantined them. I was reading the entire blog while going out to dine with my family today on Valentines day. Thank you every one for helping me get the XP Police out. I wish I could hang those bastards!!!!
    A few files I had to delete they were amvo.exe and cogad.exe from my processes. I hope I have cleaned everything.

  53. By Koblog on Feb 15, 2009 | Reply

    I have three User accounts on the laptop:

    Admin
    User 1
    User 2

    User 1 and User 2 were non-admin, but I changed them to admin so Thunderbird would update properly.

    It was while they were admin that XP Police was allowed to be installed.

    Question:

    Would XP Police have been able to install itself if the user accounts (as opposed to the Admin account) had been non-Admin instead of Admin?

    The only way I was able to recover was because I logged off the infected user account and re-logged on as Admin. That allowed me to delete XP Police and also allowed Task Manager to run.

  54. By Koblog on Feb 15, 2009 | Reply

    If you are having trouble deleting the “Disable Task Manager” registry entries, it might be because that account is not set as admin.

    I had to set the account as admin, then regedit allowed me to delete the various registry entries mentioned above:

    1) (Hattip: thequicknessinc, Feb 10)

    Go to Run:
    Type: regedit
    click on: HKEY_CURRENT_USER
    then on: software
    then you see xp police 2009. delete that entire registry.

    2: (Hattip Jack, Feb 5)

    Start Reg.-Editor and see HKEY_Curent_User/Software/Microsoft/CurrentVersion/Policies/System” and delete for the two entries saying “DisableRegistryTools” and “disableTaskMgr”.

    3) (Hattip: thequicknessinc, Feb10)

    Found one more registry entry that needs to be deleted.

    Go to Run:
    type: regedit
    click on: HKEY_CURRENT_USER
    then on: software
    then on: microsoft
    then on: windows
    then on: CurrentVersion
    then click on: Run

    there should be a registry entry called “policeav”, delete that too.

    I highly recommend you create user accounts (Control Panel: User accounts) while you are logged in as the admin, but click the “limited” button for the other user accounts so you can always bail back to the main admin account and regain control of your computer.

    If you have only one account, and it’s an Admin account, these viruses leave you little wiggle room when they take over.

  55. By Carmel on Feb 16, 2009 | Reply

    When i try to kill the process via description
    Go to Run:
    Type: taskkill /f /fi /XPPolice.exe

    I get the message Windows can’t find taskkill; I then opened a cmd file and typed it in again and it tells me taskkill is not reognised as an internal or exernal command
    - am I doing something dumb?

  56. By aak on Feb 16, 2009 | Reply

    Oh man. System Restore worked for me!! You may have to do the task kill process listed above first, which I did, but definitely try system restore. Just go to control panel and search for system restore and go through the wizard. Good luck

  57. By Jadoo on Feb 16, 2009 | Reply

    Done. Thanks for helping!

  58. By sarahb on Feb 16, 2009 | Reply

    i can’t find XPPolice.exe in processes. please help i’m gonna end up throwing my laptop out of my window in a few hours.

  59. By steve on Feb 16, 2009 | Reply

    whoever created virus doctor should go to hell!

  60. By Joe on Feb 16, 2009 | Reply

    first, thanks everyone for all your input. I have one question. I have removed all the references to xp police that i know of, but when surfing the internet using explorer, randomly i get diverted to the xp police website. if i hit refresh or the back button it allows me to view the website i’ve requested. any advice??

    thanks

  61. By NeNe on Feb 16, 2009 | Reply

    Basically i juss want to get rid of this damn thing :| …. My task bar is gone, the uninstaller is gone, Idk how to do this, I did the search thing and found all the XP police on the computer, I tried to delete them, and I tried to rename them, I cannot do anything! I use this computer mainly for school! Please help me!

    NeNe

  62. By james on Feb 16, 2009 | Reply

    spy hunter finished scanning , it says i need to register and pay to remove , how can i remove without paying

  63. By God on Feb 17, 2009 | Reply

    I am going to take down these bastards who puts xp police antivirus craps on my computer. it’s so annoying. I could no longer play games! :(

  64. By Amy on Feb 17, 2009 | Reply

    I’m a Mac user who is bewildered by the whole PC process. Please, please, someone help me…

    1) I have gone to “Run” and entered the taskkill line which it doesn’t recognize.

    2) I have gone into “reged” and found the XPPolice file but do not know how to delete it – it won’t drag to the recycle bin, and won’t disappear when I hit the delete button. Is there another way to delete on a PC that I don’t know about?

    3) I have gone to Run “cmd” and typed in the taskkill line and it says ERROR: The search filter cannot be recognized.

    Can anyone give me some more suggestions to someone who is especially clueless to how to do anything on a PC?

    THANKS YOU SO MUCH!!
    Amy

  65. By Amy on Feb 17, 2009 | Reply

    UPDATE: Never mind! I just figured out how to delete on a PC, it was under EDIT! Ok I think I’ve gotten rid of it, except the part about:
    Run
    HKEY_CURRENT_USER
    Software
    “internet explorer” – I have no internet explorere listed under software – is that ok?

    Amy

  66. By Hermunster on Feb 17, 2009 | Reply

    Thanks for the intel on that last folder. Maybe those *******s will leave my internet browser alone.

  67. By Anna on Feb 17, 2009 | Reply

    Hello,

    I don’t use internet explorer… i use firefox so how would i go about deleting it?

    #

    By thequicknessinc on Feb 12, 2009 | Reply

    Click on Run off of your start menu
    type: regedit
    click on: HKEY_CURRENT_USER
    then click: software
    then click: microsoft
    then click: Internet Explorer
    highlight Main, scroll down to Start Page on the right hand side: If its changed change it back to google.com or whatever you want.
    go back to the left hand side and look a few more folders down for TypedURLs. Highlight it and in the right hand side find any XPPolice urls and just delete them.

  68. By gorblimey61 on Feb 17, 2009 | Reply

    This xp-police thing installed itself on my PC and I found the folder in Program Files and deleted it (after re-naming the folder). I still have a residual effect from it while browsing the net. Sometimes when I try to load a new page this “security warning” thing will pop up. I can usually just back out of it and re-load the new page, but its annoying and I’m not sure how to get rid of it. I didn’t find anything in the registry.

  69. By marra24 on Feb 17, 2009 | Reply

    I think everyone has a different way of getting this bull off. I tried by using anna step.

    Start menu
    Click: run
    type: regedit
    click: HKEY-CURRENT-USER
    click: software
    thats when I found xp antipolice
    right click on antipolice/ then was asked did I want to delete program and subkeys
    Click: yes
    program was gone at least from taskbar
    Went to back to start menu and deleted shortcuts

    so far so good
    I have never seen anything like this and I am a techsupport agent

  70. By bad, bad XP Police on Feb 17, 2009 | Reply

    You, sir, are a genius.

    Thank you very much for the useful advice.

    I don;t think taskkill is an option on all machines. Not everyone has it installed…

    In any case, I didn’t need to kill the process in safe mode.

  71. By bad, bad XP Police on Feb 17, 2009 | Reply

    Sorry. I was replying to “thequicknessinc”.
    Many thanks!

  72. By KarenR on Feb 17, 2009 | Reply

    What do you do if your virus scan has you reboot after everything was quarantined..and when the computer comes back on it’s asking the owner to log on. I’m completely locked out of that computer..can’t even get on. HELP!! Nobody has mentioned any of this happening to them yet.

  73. By shoot man. on Feb 18, 2009 | Reply

    im seriously so frustrated. i want to grab my lappy and toss it out the effing window. the stupid little windows pop up things wont stop coming! every screwing second man!
    and its really pissing me off how it keeps reminding me to register for a lifetime of xp police antivirus contract something.
    and im like WTF?! and i cant get it off! i got rid off the “hkey user” thing or whatever.

    but it wont let me access my task manager, even if i tried what you guys did. HELP ME PLEASE!

  74. By Happy guy on Feb 18, 2009 | Reply

    You should be given a medal thequicknessinc.

    Thank you very much.

  75. By Whitey on Feb 18, 2009 | Reply

    Holy crap man this thing is brutal. Been dicking with it for around 6 hours now trying to mop it up and its still kicking my ass.

    Heres what ive got so far. Ive tried pretty much everything listed above. Some thigns are sucessfull, some arent. Its almost like this fucking thing is evolving with a mind of its own.

    By going through the registry i was finally able to get my task mgr back. Running the taskill by cmd wouldnt work.

    I booted up in safemode and tracked down all the files i could through the registry and removed everything listed here. Atleast to the best of my ability. For whatever reason i wasnt able to take the exact paths in my registry to certain files listed here. Guess everyones computer is different. I searched for anything “police” “xppolice” etc related while in the registry and nuked anything relative.

    However i clearly havnt got everything. Im still getting the “Infiltration” popup as well as another and my searches are still be redirected. Though it is better than it was.

    Question: Does anyone know what the names of the processes are under task mgr? I mean i looked for the obvious but nothing is jumping out as malacious but obvioulsy theres something still running.

    Thanks too all the input everyones provided.

  76. By ONE MORE THING! on Feb 18, 2009 | Reply

    thequicknessinc you are the best person ever! Just one question though, I’ve followed all your previous instruction and it’s done wonders so far but when I click on Start and go to my All Programs, the XP Police Antivirus bar is still there highlighted in orange. When I try to right click to delete it, nothing shows up. Please help. ^^;;

  77. By Angie on Feb 18, 2009 | Reply

    Thanks for the help. The only problem I have left now is that when I do a search and click on a link half the time it goes to some random site. Also, it won’t diplay my hotmail inbox and every page loads with errors. Any ideas on what else I have to delete?

  78. By Frustrated! on Feb 18, 2009 | Reply

    I followed the procedures and I think I have removed the XP Police virus itself. I can get back into task manager now (YEAH!!) and my internet browser does not look as weird. I know there is something still on there from that virus though, because I went to download a Security Suite (antivirus, spyware, etc) provided free of charge from my cable/internet company and I can get onto the website — cox.com — I can login and I can click on the security suite. But as soon as I hit the “Download” button it keeps shutting down my internet. I have to reopen the internet application and try again — but it still doesn’t work! I’m getting so frustrated! I have tried it with both internet explorer and with mozilla — neither work. Any ideas how I can get some anti virus/spyware loaded on my computer without getting kicked out of the internet broswer page?

  79. By Porati on Feb 18, 2009 | Reply

    thequicknessinc,

    Thank you! You are a very good person, and as long as XP Police is around you have your “good deed daily” in the bag!

    Have a nice day!

  80. By G_Man on Feb 18, 2009 | Reply

    I had the same problem, and I went into the program folder and renamed the exe. file, then when you restart it wont start up, and then you can start removing it.

  81. By Sam on Feb 18, 2009 | Reply

    hey so this thing downloaded on my computer this morning but i didnt realize what it was til about two hours ago when i googled it and ive been working on getting rid of it ever since butttt, whenever i go to run> and try any of the task kill stuff it says THE SEARCH FILTER CANNOT BE RECOGNIZED. but this police SH** is fu**ing PI**ING ME OFF.
    help!!

  82. By steve on Feb 18, 2009 | Reply

    god that shit was scary, wouldn’t let me open task manager, said administrator took away my privledge, thanks for tellin me how to do that shit

  83. By dude this sucks! on Feb 18, 2009 | Reply

    i have tried everything you said! do you think you could give a step by step again please thequicknessinc?? please dude.

  84. By dude this sucks! on Feb 18, 2009 | Reply

    why do you say speed is the key? i am not dumb but it took me a few hours to start and try to solve the prob and cant get it please help me!

  85. By Rich on Feb 18, 2009 | Reply

    Thanks for all the great information on how to remove this ugly virus. It nice to know there are people like you all out there …. it makes up for the one idiot that creates crap like this.

  86. By James on Feb 19, 2009 | Reply

    You guys rock. Came home and found this xp police crap all over the screen. tried McAfee to no help. after 10 minutes with your suggestions, it’s clean. Bless you!

  87. By Jon on Feb 19, 2009 | Reply

    My version of this parasite blocked my access to taskmanager. I ran this from Start>Run to get it back.

    REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

  88. By zack on Feb 20, 2009 | Reply

    ok this xp police thing is pissing me off. i cant find it and when i open the internet it says Insecure Internet activity. Threat of virus attack. and the stupid xp police thing comes up. can someyone tell me how to fix it.

  89. By Pat on Feb 20, 2009 | Reply

    Thanks for the fix it worked. However my Internet Explorer and Firefox in XP won’t work even in safemode. I get a message from both during startup that says it encountered an error and needs to close. iexplore.exe gets a referenced memory error and so does Firefox. Firefox gets XPCOM:EventReceiver: firefox.exe-Application Error The instruction at “0×9f71517c” referenced memory at “0×9f71517c”. The memory could not be “read”. Any ideas how to fix would be greatly appreciated, and thanks again for your help!

  90. By Katie on Feb 21, 2009 | Reply

    Thanks sooooo much!

  91. By mahuta on Feb 22, 2009 | Reply

    Hey umm i have a few questions and hopefully one can give me help by emailing me or something.

    I have deleted all the xp police file in C:\Program Files but Xp police isnt uninstalled..

    It keeps interfering with my internet. is there a way to uninstall it completely??

    email: mahutahs@yahoo.co.nz

  92. By ila on Feb 24, 2009 | Reply

    I am having a problem also with this xp police antivirus I can’t get it uninstalled from my computer. It keeps coming up and interupts everything. Help PLEASE.

  93. By elena on Feb 24, 2009 | Reply

    THANK YOU SO MUCH!!!!!!!!!!

  94. By j’s on Feb 25, 2009 | Reply

    the quicknessinc !! thank you!!
    you are awesome and deleting those files felt great.
    thank you.

  95. By Ian on Feb 25, 2009 | Reply

    thequicknessinc…. you have now achieved ” LEGEND ” status !! thanks soooooo much

  96. By dazed and confused on Feb 26, 2009 | Reply

    I have a differant problem. I am on an admin account yet it wont let me edit the registry. It says it is disabled by the admin though. What should I do and thanx in advance?

  97. By dazed and confused on Feb 26, 2009 | Reply

    Ps I forgot to mention that the process is killed and I have deleated the folder already

  98. By Foz on Feb 27, 2009 | Reply

    Hey guys, i had this virus too, dunno if it is the same pne that has caused other issues but i did notice that the Folder Options had been hidden. I checked in msconfig and aload of startup software was listed by referencing hidden files in the %temp% folder. Someone mentioned that this thing seems to manipulate and i agree, that is unless it’s downloading other viruses as it goes. I had some pathetic AV installed and now i cannot run a new one, the splash screen comes up but the process gets killed. The guys who have wrote this unfortunately know their stuff

  99. By Logan on Mar 3, 2009 | Reply

    I have a system that I am working with that got this virus. I did the manual uninstall and have scoured the registry and see no sign of it, but when I try to download a new AV program or execute programs such as HijackThis or Spybot, nothing happens…acts as if I never started the program…some it lets me install then kills when I try to start the task any ideas?

  100. By david on Mar 4, 2009 | Reply

    I have been through all of the steps on this page but i still get redirected to some creap website when I use any search engine on internet explorer. I also am still unable to run any spyware that I download. Obviously I have not gottem everything. Anyone have any suggestions?

  101. By Jamz on Mar 4, 2009 | Reply

    There are many versions of this “anti-virus” scam. I have removed it on more machines than I can remember, all I can hope is the people responsible die a slow and painfull death. Only after watching ther entire family suffer the same fate.

  102. By XPPOLICEHATER on Mar 8, 2009 | Reply

    damn that xp police fake “antivirus” thingy.
    it was automatically installed on my pc when i was sleeping.
    i have downloaded an anti-spyware program and dang..
    bye xp police.>:)

  103. By Shadow on Aug 29, 2009 | Reply

    If anyones interested I believe that the As*****s who took the time to write this virus have changed the name it’s now Windows Police Pro I just spent an hour getting rid of it, well I hope I did. Think jails to easy for them Public Hanging would be Better.

  104. By Help on Sep 3, 2009 | Reply

    I can’t do a system restore.
    Nothing I type in RUN works “application configuration is incorrect”.
    I try to run my current anti-spyware and it’s not recognized
    I try to download new anti-spyware and it won’t run

    Does anyone have any advice?

    Please!!

  105. By niceandnaughtybella on Sep 5, 2009 | Reply

    Hello to all, I too have been going step by step to get rid of this virus. It is very frustrating. I have an antivirus program that it seems to have blocked from me using. I just downloaded Spyware terminator, not sure if that is gonna work or not. I have also been doing remote access with a technician, but, there were things that he even missed. I did google and there are other things to look for like gif’s and such. Im still battling this thing!! Its been a week for me, yikes. Good luck to all of you and thanks to the ones that had the good advice :)

  106. By Dmansik on Sep 5, 2009 | Reply

    Someone please help me. I have followed the directions but this virus seems to have taken control of my computer. It will not let me access the processes necessary to remove it. It blocks everything wuth a screen that says ERROR, someone please help me and reply.

  107. By Jessica on Nov 18, 2009 | Reply

    I can’t even think of who would even try to do this crap. It is low life and dirty. I have absolutely no acess to my computer and have to constantly ask for my daughter’s laptop. This is nothing but a bunch of bull.

  108. By Johnny on Nov 29, 2009 | Reply

    I’ve got the XPPolice virus on my computer and apparently the version that I’ve got is on steroids, because it seems to be a lot more resilient than what others are reporting here.
    I admit that Operating Systems and Virus Removal are not my specialty, but I’m a programmer in case that helps. In other words I’m not a complete nubie, but feel free to talk down to me if necessary :)

    Regedit: I can’t open it.

    TaskManager: If I open really quickly when I first log onto the computer, it will come up, but there isn’t an XPPolice.exe task. There are 10+ svchost.exe processes. I can kill a few of these via “Right Click > End Process Tree”, but they come back within 10 seconds. Others I can’t kill.

    Command Prompt: If I try to open the command prompt by “Start > Programs > Accessories > etc.” a command window pops up with the following address: C:\Windows\System32\desote.exe but it disappears almost immediately and the Command prompt never appears.

    Windows Explorer: I can open it. But after about 60 seconds, the entire computer locks up and I have to perform a hard reboot (hold in the power button for approximately 10 seconds). I’ve tried to delete the desote.exe file via Windows Explorer (a lot of fast clicking), but I get an “Access denied” type message. I tried to rename it (obviously that didn’t work).

    McAfee: Wow I’m really glad I made that purchase :) If I’m fast I can open it and start a scan, but the computer locks up after about 60 seconds and requires a hard reboot.

    Safe Mode: If I try to start the computer in Safe Mode, Safe Mode with Networking, Safe Mode with Command Prompt, etc. I get the blue screen.

    Any help that someone can provide would be greatly appreciated. I am willing to just reformat the computer, but I would like to get some files off of it first. I have an FTP server set up on another computer so if I could get some limited functionality I could move the files and then reformat.

Post a Comment