XP Antispyware 2012 Rogue Anti-Spyware - removal guide

XP Antispyware 2012

Created: 2012-01-25 03:02:45 Author: Renata Mykolaityte

Information about XP Antispyware 2012

XP Antispyware 2012 is a computer virus that disables users from using their PCs normally. That means you are not allowed to use even the basic functions of your computer and get on the internet as well! The main goal of XP Antispyware 2012 is to make you purchase its licensed version which is said to be the only one capable to fix your machine. In order to make its victims think about purchasing XP Antispyware 2012, this program will display numerous alerts and notifications that all will report the same thing: there are hundreds of trojans, malware and other viruses on your computer. However, we highly recommend ignoring XP Antispyware 2012 alerts and scanners because they are useless. Please, remove this scamware as soon as you notice it on your machine.

XP Antispyware 2012 can be categorized as rogue anti-spyware because it gets inside unnoticeably for a user after spotting some security vulnerabilities on the system. Chances that you also catch this virus increase when you have no anti-spyware program on your computer, so make sure you have one on your machine. Otherwise, the consequences of XP Antispyware 2012 activity will definitely make you disappointed: after some secret modifications, it will be launched as soon as you reboot your PC. In addition, it will display numerous deceptive alerts and scanners reporting about hundreds of parasites, such as spyware, keyloggers, adware etc. Most of its alerts say:

System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.

Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.

Keep in mind that all those alerts and security scanners are fabricated and that the only thing they are displayed for is to persuade you to register your copy of XP Antispyware 2012. Don't believe those promises that this malware will help you cope with the entire colony of threats. You should only remove XP Antispyware 2012 without any delay and ignore all those alerts redirecting to its payment page. To disable this threat, use one of these registration codes that will make your malware think that you have paid for its license: 2233-298080-3424 or 3425-814615-3990 (updated on 2011.11.29)

XP Antispyware 2012 Facts

For automatic XP Antispyware 2012 removal, please download Spyware Doctor:

Spyware Doctor

XP Antispyware 2012 pretends to increase security of your PC
XP Antispyware 2012 free version will show popups, alerts and fake results to convince you to pay
XP Antispyware 2012 creators will not deliver license keys upon paying or the full version will not be functional
XP Antispyware 2012 might be used to download and advertise other malicious software
XP Antispyware 2012 might disable some of your PCs or its programs functions

Manual XP Antispyware 2012 removal instructions

Note: Manual removal of parasite XP Antispyware 2012 is tedious and dangerous task if done incorectly. Stoping and deleting incorrect executables and DLLs, deleting registry entries might harm your PC. Thus we recommend using Spyware Doctor of PCTools for automatical scan and removal of computer parasites, or another reputable spyware remover.

1

Kill malicious Processes:

How to kill malicious processes

[random].exe

2

Remove malicious Registery entries:

How to remove malicious registry entries

HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" - '"%1" %*'
HKEY_CLASSES_ROOT\.exe\DefaultIcon "(Default)" = '%1'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile "Content Type" = 'application/x-msdownload'
HKEY_CLASSES_ROOT\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"'

3

Remove harmful Files:

How to remove harmful files

%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Local\[random].exe (look for 3-letter names)
%AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru

4

Scan your System:

Scan your System with free scanners for remaining computer parasites

*Name
*E-mail

Win 7 Antispyware 2012

Created: 2012-01-25 02:54:53 Author:Gaby C.

Win 7 Antispyware 2012 is a malicious application that should be encoutered from its fake security alerts that try to brainwash the victim and gain some money. This dangerous application has been spreading around through the fake system scanners, fake updates and other downloads that are insecure. If you have found Win 7 Antispyware 2012 program on your computer as well, you should notice its continuous alerts and scanners that always report the same story about trojans and other viruses...

Posted in: Rogue Anti-Spyware

No comments yet

Vista Home Security 2012

Created: 2012-01-25 02:53:39 Author:Gaby C.

Vista Home Security 2012 is a clear version of rogue anti-spyware which comes from the same family of rogue anti-spyware as Win 7 Home Security and others. Note that this predecessor has been on the list of the most devastating malicious programs of the last few months. Vista Home Security 2012 is almost the same in its GUI design and uses similar ways of distribution. This scamware tends to penetrate into computers in a pretty simple way – usually, it’s a trojan based intrusion...

Posted in: Rogue Anti-Spyware

No comments yet

XP Home Security 2012

Created: 2012-01-25 03:04:07 Author:Gaby C.

XP Home Security 2012 is a dangerous computer program that represents a group of malwares called Braviax. This malware is spread with a help of trojans, so it never asks permission when it tries to get inside the system. This stealthy infiltration method is additionally followed by fake system scanners and alerts that continuously report tons of trojans found. However, please ignore XP Home Security 2012 and its alerts no matter what they say. Just keep in mind that purchasing this program...

Posted in: Rogue Anti-Spyware

No comments yet