Total XP Security Rogue Anti-Spyware - removal guide

Total XP Security

Created: 2010-03-18 11:04:09 Author: Paul McRubben

Information about Total XP Security

Total XP Security is classified as bogus anti-spyware software because of false scan results, fake security alerts and browser hijacking. Don't purchase this program, it's a scam! You should uninstall Total XP Security from your computer immediately after detection.

Usually, Total XP Security is promoted through the use of Trojan viruses. These trojans display fake notifications and pop-ups stating that your PC is seriously infected and has many privacy issues. It is very easy to confuse these fake alerts with the legitimate ones, especially for inexperienced users. This parasite may be also promoted on various malicious websites that provide free anti-malware scanners. These scanners will always display some sort of infections and take you to the homepage of Total XP Security.

Last, but not least, Total XP Security will hijack your Internet browser and display warnings about insecure connection or possible attacks from a remote computer. Furthermore, it may slow down your computer or make it unstable. The worst thing of course is that this parasite can install additional dangerous malware onto your computer. That's why we recommend you to use the removal guide below to manually remove Total XP Security from your PC once and for all.

Total XP Security Facts

For automatic Total XP Security removal, please download Spyware Doctor:

Spyware Doctor

Total XP Security pretends to increase security of your PC
Total XP Security free version will show popups, alerts and fake results to convince you to pay
Total XP Security creators will not deliver license keys upon paying or the full version will not be functional
Total XP Security might be used to download and advertise other malicious software
Total XP Security might disable some of your PCs or its programs functions

Manual Total XP Security removal instructions

Note: Manual removal of parasite Total XP Security is tedious and dangerous task if done incorectly. Stoping and deleting incorrect executables and DLLs, deleting registry entries might harm your PC. Thus we recommend using Spyware Doctor of PCTools for automatical scan and removal of computer parasites, or another reputable spyware remover.

1

Kill malicious Processes:

How to kill malicious processes

ave.exe
av.exe

2

Remove malicious Registery entries:

How to remove malicious registry entries

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"

3

Remove harmful Files:

How to remove harmful files

ave.exe
av.exe

4

Scan your System:

Scan your System with free scanners for remaining computer parasites

*Name
*E-mail

Total Win 7 Security

Created: 2010-03-18 11:11:50 Author:Ignas B.

Total Win 7 Security is classified as a rogue because it displays false scan results stating that your computer is seriously infected. Total Win 7 Security displays fake infections in order to scare you into thinking that your computer is infected and that you should buy the program to remove the infections. However, this program is nothing more but a scam. Don't pay for it. Usually, Total Win 7 Security is advertised through the use of Trojans and fake online scanners or ads. While...

Posted in: Rogue Anti-Spyware

No comments yet

Total Security

Created: 2009-11-10 22:18:57 Author:Jackus Zacepinskis

Total Security is the predecessor of Cyber Security. This parasite's popularity has waned quite a bit already, but people encounter it often nevertheless. Total Security uses downloader trojans and drive-by downloads to enter the system, and relies on misleading advertising to trick users into purchasing it's "licensed version", which is a non-existent thing altogether. Once inside, Total Security floods the user with popups and fake system notifications, claiming his system is infected,...

Posted in: Rogue Anti-Spyware

No comments yet

Total Vista Security

Created: 2010-03-16 04:49:16 Author:Renata Mykolaityte

Total Vista Security is a newly launched rogue antispyware program that is now becoming a dominating rogue program. Usually, it promotes and installs itself with a help of Trojan viruses, so a computer user has no idea when this parasites enters his system. Once it’s there, Total Vista Security launches its fake scanner without even asking for it. The program is undoubtedly going to display a long list of infections no matter if your computer has really got them or if it is...

Posted in: Rogue Anti-Spyware

No comments yet