XP Antivirus 2012 Rogue Anti-Spyware - removal guide

XP Antivirus 2012

Created: 2012-01-25 03:41:29 Author: Renata Mykolaityte

Information about XP Antivirus 2012

XP Antivirus 2012 is a rogue antivirus program that has been infecting more and more computer systems for a while now. It's a program that spreads through Trojan viruses and infiltrates into computers completely secretly. Once inside it pretends being an antispyware program by imitating all it functions. However, it is a rogue program that has no useful functions and only wants to swindle your money away.

XP Antivirus 2012 runs a fake system scanner and reports about detecting tons of malicious files on your system. In order to remove them the program asks to pay for a full version of a program. However, this wouldn't change anything as such program doesn't even exist as an antispyware. So basically you will pay for nothing.

Moreover, the program will cause tons of fake security notifications and pop up ads to your system. All of them are fake and only displayed in order to create an illusion your system is badly infected. Ignore them as nothing that they state is trustful information.

You have to get rid of XP Antivirus 2012 as soon as you find its activity on your system. Run a full system scan with a reputable antispyware program and eliminate XP Antivirus 2012 quickly and easily. In case you have already made a payment for it, contact your bank as soon as possible to dispute the charge.

XP Antivirus 2012 Facts

For automatic XP Antivirus 2012 removal, please download Spyware Doctor:

Spyware Doctor

XP Antivirus 2012 pretends to increase security of your PC
XP Antivirus 2012 free version will show popups, alerts and fake results to convince you to pay
XP Antivirus 2012 creators will not deliver license keys upon paying or the full version will not be functional
XP Antivirus 2012 might be used to download and advertise other malicious software
XP Antivirus 2012 might disable some of your PCs or its programs functions

Manual XP Antivirus 2012 removal instructions

Note: Manual removal of parasite XP Antivirus 2012 is tedious and dangerous task if done incorectly. Stoping and deleting incorrect executables and DLLs, deleting registry entries might harm your PC. Thus we recommend using Spyware Doctor of PCTools for automatical scan and removal of computer parasites, or another reputable spyware remover.

1

Kill malicious Processes:

How to kill malicious processes

[random].exe

2

Remove malicious Registery entries:

How to remove malicious registry entries

HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" - '"%1" %*'
HKEY_CLASSES_ROOT\.exe\DefaultIcon "(Default)" = '%1'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile "Content Type" = 'application/x-msdownload'
HKEY_CLASSES_ROOT\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"'

3

Remove harmful Files:

How to remove harmful files

%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Local\[random].exe (look for 3-letter names)
%AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru

4

Scan your System:

Scan your System with free scanners for remaining computer parasites

*Name
*E-mail

XP Security 2012

Created: 2012-01-25 03:17:03 Author:Renata Mykolaityte

XP Security 2012 is a rogue antivirus program that was designed by computer hackers in order to steal money from random computer users. The application employs Trojans to make the infiltration of XP Security 2012. The application uses a fake scanner which pretends to look for infections on your machine, but in fact it has nothing useful to offer. The program also uses fake security notifications and pop up ads warning that your system is infected and recommends getting a full version of XP...

Posted in: Rogue Anti-Spyware

No comments yet

Win 7 Antivirus 2012

Created: 2012-01-25 03:10:57 Author:Renata Mykolaityte

Win 7 Antivirus 2012 is a rogue antivirus program that belongs to a family of multi rogue infections. The program can change its name according to the operating system the targeted system is running. Win 7 Antivirus 2012 can be noticed on the systems running Windows 7 operating system. The program infiltrates into computers using Trojan viruses. This way of infiltration is completely secret and computer users cannot remove the infection at the time of infiltration. As soon as the...

Posted in: Rogue Anti-Spyware

No comments yet

Internet Security 2012

Created: 2012-01-25 02:41:58 Author:Renata Mykolaityte

Internet Security 2012 is a fake antivirus program that was designed by computer hackers as a clone of previous fake antivirus Privacy Protection. It's a program that displays various security notifications and pop up ads to create an illusion that your system is infected. Then it recommends purchasing a full version of Internet Security 2012 claiming that it will fix a problems that exist on your machine. Here are the messages that you will probably notice if your system gets infected by...

Posted in: Rogue Anti-Spyware

No comments yet