Information about XP Security Tool
XP Security Tool is a rogue anti-spyware program. Basically, it's the same thing as XP Security Tool 2010. The rogue program is promoted through the use of phony online ads that pretend to be online anti-malware scanners. After the fake scan, those scanners state that your computer is infected and that you must install XP Security Tool to protect yourself. No matter what you click in those fake online warnings, you will be automatically redirected to the malicious site that promotes XPSecurityTool malware. Don't install this needless program. If it was installed without your knowledge, then get rid of XP Security Tool as soon as possible.
Once installed, XP Security Tool will ostensibly scan your computer and display various infections that won't be removed unless you first purchase the program. The scan results are of course false, so you can safely ignore them. To make things worse, this parasite will constantly display fake but legitimately looking security alerts from Windows Task bar. It may also hijack your Internet browser and slow down your computer. That's why you must remove XP Security Tool from the system upon detection. Please use the removal guide below to delete this infections from your computer manually.
XP Security Tool Facts
- XP Security Tool pretends to increase security of your PC
- XP Security Tool free version will show popups, alerts and fake results to convince you to pay
- XP Security Tool creators will not deliver license keys upon paying or the full version will not be functional
- XP Security Tool might be used to download and advertise other malicious software
- XP Security Tool might disable some of your PCs or its programs functions
Manual XP Security Tool removal instructions
Note: Manual removal of parasite XP Security Tool is tedious and dangerous task if done incorectly.
Stoping and deleting incorrect executables and DLLs, deleting registry entries might harm your PC.
Thus we recommend using Spyware Doctor of PCTools for automatical scan and removal of computer
parasites, or another reputable spyware remover.
Kill malicious Processes:
av.exe
ave.exe
ave.exe
Remove malicious Registery entries:
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\av.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_CLASSES_ROOT\secfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\ave.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Remove harmful Files:
av.exe
ave.exe
ave.exe
Scan your System:
Scan your System with free scanners for remaining computer parasites
XP Security Tool removal instructions comments
| Sparky / 2011-05-29 11:30 Vote: 0 0 | Quote |
| ThatÂ?s really shwred! Good to see the logic set out so well. | |
Related information
XP Security Tool 2010 is considered a rogue program because it is promoted through the use of Trojans, reports false system security threats and displays false scan results as a tactic to have you purchase the program. Once installed, it will supposedly scan your computer and display a variety of fake infections, but will not remove any of them until you purchase the program. These infections are all fake and are only being shown to trick you into purchasing XP Security Tool 2010....
Posted in: Rogue Anti-Spyware
 No comments yet |
 |
Vista Security Tool 2010 is one of those rogue anti-spyware programs that are able to install into any computer system without any notification. This malware application is equal to a strong headache for every computer user. The victims of Vista Security Tool 2010 suffer from plenty of different inconveniences such as unwanted system scan, annoying pop up ads, browser hijack, etc. In fact, the scanners are only imitating looking for infections instead of detecting real threats. Pop up...
Posted in: Rogue Anti-Spyware
|
No comments yet |
|
Online Protection Tool is a fake pop up that may appear on the Internet while browsing for any website. It has nothing in common with real notification by Windows and actually is created to rip computer users off.
Here is what the message states:
Windows Internet Security Your browser is under the threat of infection. Windows requires your permission to install online protection tool. Your browser is run in unsafe mode. Running the protection mode will help you to keep your...
Posted in: Rogue Anti-Spyware
|
1 comments |
|
Login
Spyware news
Compare Removers
