Windows XP Repair virus – how to get rid manually

Windows XP Repair is just a useless program coming from rogue virus family that distributes fake system repairing and security softwares. Windows XPRepair program is a typical scamware which is designed to earn money for hackers by asking innocent internet users to pay the license fee for this bogus tool because it claims to be an antivirus scanner and offers paid virus removal services (that it dose not perform in real). A few months ago, a virus called Windows Repair similar to “WindowsXP Repair” appeared which infected thousands of computers around the world. This malware has also some new releases of it with different names i.e Windows 7 Restore, Win-7 repair, vista Repair. Beware of all these misleading programs.
fake windows xp repair virus Windows XP Repair virus   how to get rid manually
infectious method of WindowsXPRepair virus is same as other rogue spywares. It places itself into your computer with the help of trojans and worms through malicious websites. Once it is there in your machine, it will only focus to scare you of viruses and force you to pay the virus removal fee in the form of its license. Windows XP Repair displays a fake scanning process and then reports numerous virus detections. It keeps alerting you and displays warnings to make you think that computer is in danger and your windows is damged by the virus. Once you are convinced, it asks you to buy the full version of Windows XP Repair to get your system repaired.

Please Remember! All warnings, alerts and virus removal offers made by Windows XP Repair are fake. This program is totally a bogus software and it is specially designed to extort your money by selling its useless security products. It has no ability to examine, detec viruses or repair your windows. But Windows XP Repair is a harmful spyware which brings new malwares to your system, it steals your personal information and if you buy it with a credit card, it sends your credit card information to hackers. You should ignore its warnings, avoid purchase of this program, avoid clicking any link within its popups and do not install any additional component of it. All you have to do is to immediately remove it from your computer upon detection.

How to remove Windows XP Repair virus manually:

To remove this virus manually, complete the following set of tasks. Do not forget to create a backup before getting started to the manual removal guide.
To do these steps, you may also want to know,
How to delete registry entries

Delete Windows XP Repair Registry Entries:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ‘0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random]”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ‘0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ‘0?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ‘1?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ‘1?
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ‘1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ‘1?

Delete Windows XP Repair files:
%TempDir%%Documents and Settings%\[UserName]\Desktop\Windows XP Repair.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\Windows XP Repair\
%Documents and Settings%\[UserName]\Start Menu\Programs\Windows XP Repair\Uninstall Windows XP Repair.lnk
%Documents and Settings%\[UserName]\Start Menu\Programs\Windows XP Repair\Windows XP Repair.lnk
%Documents and Settings%\All Users\Application Data\~
%Documents and Settings%\All Users\Application Data\~r
%Documents and Settings%\All Users\Application Data\[random].dll
%Documents and Settings%\All Users\Application Data\[random].exe
%Documents and Settings%\All Users\Application Data\[random].exe
%Desktop%\Windows XP Repair.lnk
%Programs%\Windows XP Repair
%Programs%\Windows XP Repair\Windows XP Repair.lnk

Auto Removal

To remove this virus Automatically, We suggest following tools:

Malware Bytes Anti-Malware (Download)


  1. Jason says:

    So I have deleted all the registry entries listed (and my task manager now works again). However, none of my programs are available still. Additionally, when I try to delete the files listed, I can’t find any of them; in fact, when I open my documents and settings folder, there is nothing inside, and there is not a Tempdir folder to be found. Any suggestions on what to do?

  2. Dave says:

    Try running Windows restore

  3. Larry says:

    Google for unhide.exe

  4. Jason says:

    Tried it to no avail…any other ideas?

  5. Nonso says:

    @Jason: it sure sucks that the Program Files shortcuts are all cleared and there are no distinct ways to get them back except reinstalling the programs themselves(a bit cumbersome but very effective) for those who want to go the whole hog. The sad thing is
    the programs are still existing on your system and if you know the commonly used program command, you can still access them. e.g. winword.exe for MS Word, excel.exe for MS Excel, notepad.exe for notepad, Acrord32.exe for Adobe Acrobat etc.