XP Antimalware 2010 Rogue Anti-Spyware - removal guide

XP Antimalware 2010

Created: 2010-04-07 08:11:41 Author: Antonio W.

Information about XP Antimalware 2010

XP Antimalware 2010 is a rogue anti-malware program from the same family XP Security Tool. The rogue program is promoted through the use of Trojans that come from fake online scanners or bundled with other malware. They do this to scare you into thinking your PC is infected, even though a website can't possibly know this, in the hopes that you will download and install the XP Antimalware 2010.

Once installed, the fake program will scan your computer and display a list of infections found on your computer that you cannot remove unless you first purchase the program. Don't purchase it. This is nothing mroe but a scam. The rogue program reports non-existing infections and system security threats to scare you into thinking that your computer is infected. It also displays fake security alerts and pop-ups claiming that your computer is under attack from a remote computer. That's not true too. Just like the false scan results, fake security alerts should be ignored.

Furthermore, the rogue program will block legitimate anti-virus and anti-spyware programs to protect itself from being deleted. And it used browser hijacking to block security related websites and of course to redirect users to various misleading pages full of false information and bogus ads. As you can see, XP Antimalware 2010 is nothing more but a scam. If you find that your computer is infected with this malware, please use the removal instructions below to remove XP Antimalware 2010 from your PC as soon as possible. If you have already purchased this program then you should contact your credit card compnay and dispute the charges.

XP Antimalware 2010 Facts

For automatic XP Antimalware 2010 removal, please download Spyware Doctor:

Spyware Doctor

XP Antimalware 2010 pretends to increase security of your PC
XP Antimalware 2010 free version will show popups, alerts and fake results to convince you to pay
XP Antimalware 2010 creators will not deliver license keys upon paying or the full version will not be functional
XP Antimalware 2010 might be used to download and advertise other malicious software
XP Antimalware 2010 might disable some of your PCs or its programs functions

Manual XP Antimalware 2010 removal instructions

Note: Manual removal of parasite XP Antimalware 2010 is tedious and dangerous task if done incorectly. Stoping and deleting incorrect executables and DLLs, deleting registry entries might harm your PC. Thus we recommend using Spyware Doctor of PCTools for automatical scan and removal of computer parasites, or another reputable spyware remover.

1

Kill malicious Processes:

How to kill malicious processes

av.exe
ave.exe

2

Remove malicious Registery entries:

How to remove malicious registry entries

HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"

3

Remove harmful Files:

How to remove harmful files

av.exe
ave.exe

4

Scan your System:

Scan your System with free scanners for remaining computer parasites

*Name
*E-mail

Win 7 AntiMalware 2010

Created: 2010-03-18 11:43:11 Author:Ignas B.

Win 7 AntiMalware 2010 is a rogue anti-spyware program. This rogue anti-spyware program reports false system security threats, displays fake security alerts and notifications just to scare you into thinking that your PC is infected. Once installed, Win 7 AntiMalware 2010 will supposedly scan your computer and list a variety of infections or security problems on your computer. Then it will prompt you to pay for a full version of the program to remove computer security threats which do not...

Posted in: Rogue Anti-Spyware

No comments yet

Vista AntiMalware 2010

Created: 2010-04-07 03:53:14 Author:Ignas B.

Vista AntiMalware 2010 is a rogue program from the same family as Vista Antispyware 2010 and Vista Security. It pretends to security program that will scan your computer for malware and errors. In reality, though, this fake program will display false threats or infections on your computer to trick you into thinking that your computer is infected. Usually, this rogue program is advertised through the use of pop-ups that appear when visiting malicious websites. These pop-ups state that...

Posted in: Rogue Anti-Spyware

No comments yet

XP AntiMalware

Created: 2010-03-19 02:05:46 Author:Ignas B.

XP AntiMalware is a rogue anti-spyware program that uses misleading methods to trick you into thinking that your computer is infected. It's installed mostly through the use of trojans, adware and other malware. You should remove XP AntiMalware if your computer is already infected. Otherwise, this fake program can download additional malware which may cause even more damage to your computerOnce installed, XP AntiMalware will automatically scan your computer each time you log on to Windows....

Posted in: Rogue Anti-Spyware

No comments yet