nPath Ltd.

A friend of mine has come to me twice now with this malware on his computer called Antivirus XP 2008. He was on a website and a dialouge box reported that IE needed to download an update. My advice is to let automatic updates download needed updates for Microsoft products.

Here is what I did for remove it.

1.) Turn off system restore

Right click My Computer, choose properties, click the system restore tab, check the box “Turn off system restore”, OK

2.) Run the uninstatller.

This doesn’t really un-install the program but it does reveal the install location you’ll need later to delete it. Note it’s location

3.) Stop the proces.

Browse to the location noted above. press ctrl-alt-delete and choose task manager.
On the process tab end any program that appears in the folder noted above

4.) Delete the folder

browse to the c:\programs files folder and delete the folder noted above.

5.) Reboot

At this point a full system scan came back clean.

I’m sure there are registry entries and registered DLLs left but this is the novice’s guide to quickly getting rid of Antivirus XP 2008. If you know how to unregister Dlls and edit the registry then Google the info and do it. This pain-in-the neck has lots of web pages about removal.