XP Home Security 2012 Rogue Anti-Spyware - removal guide

XP Home Security 2012

Created: 2012-01-25 03:04:07 Author: Renata Mykolaityte

Information about XP Home Security 2012

XP Home Security 2012 is a dangerous computer program that represents a group of malwares called Braviax. This malware is spread with a help of trojans, so it never asks permission when it tries to get inside the system. This stealthy infiltration method is additionally followed by fake system scanners and alerts that continuously report tons of trojans found. However, please ignore XP Home Security 2012 and its alerts no matter what they say. Just keep in mind that purchasing this program means sharing your money with scammers. Instead of doing that, you should simply remove XP Home Security 2012 from your computer and never let such scams from Braviax family enter your computer. This can be easily done with a help of reputable anti-spyware program.

As we have mentioned earlier, XP Home Security 2012 will begin to annoy you as soon as it gets inside the system. It typically starts once the PC is rebooted and then runs startup system scanners and displays false alerts claiming about malware detected. This tactic is widely spread between such viruses as rogue anti-spywares, so ignore all those notifications claiming that something is really wrong with your computer. Most of the claim:

System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.

System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.

Please, keep in mind that the only goal of XP Home Security 2012 is to scare you and then make you purchase its full version. For this purpose, every time you click on its pop-ups and scan reports, the malware will redirect you to its purchase website asking you to fill some credit card details and other information. If you also have this malware on your computer, you may find some difficulties when trying to remove XP Home Security 2012. To get online, use these registration codes that will make your virus think that you made a payment for its license: 2233-298080-3424 or 3425-814615-3990. In addition, run a full system scan with updated anti-spyware and remove all infected files from your computer.

XP Home Security 2012 Facts

For automatic XP Home Security 2012 removal, please download Spyware Doctor:

Spyware Doctor

XP Home Security 2012 pretends to increase security of your PC
XP Home Security 2012 free version will show popups, alerts and fake results to convince you to pay
XP Home Security 2012 creators will not deliver license keys upon paying or the full version will not be functional
XP Home Security 2012 might be used to download and advertise other malicious software
XP Home Security 2012 might disable some of your PCs or its programs functions

Manual XP Home Security 2012 removal instructions

Note: Manual removal of parasite XP Home Security 2012 is tedious and dangerous task if done incorectly. Stoping and deleting incorrect executables and DLLs, deleting registry entries might harm your PC. Thus we recommend using Spyware Doctor of PCTools for automatical scan and removal of computer parasites, or another reputable spyware remover.

1

Kill malicious Processes:

How to kill malicious processes

[random].exe

2

Remove malicious Registery entries:

How to remove malicious registry entries

HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" - '"%1" %*'
HKEY_CLASSES_ROOT\.exe\DefaultIcon "(Default)" = '%1'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile "Content Type" = 'application/x-msdownload'
HKEY_CLASSES_ROOT\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"'

3

Remove harmful Files:

How to remove harmful files

%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Local\[random].exe (look for 3-letter names)
%AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru

4

Scan your System:

Scan your System with free scanners for remaining computer parasites

*Name
*E-mail

Vista Home Security 2012

Created: 2012-01-25 02:53:39 Author:Gaby C.

Vista Home Security 2012 is a clear version of rogue anti-spyware which comes from the same family of rogue anti-spyware as Win 7 Home Security and others. Note that this predecessor has been on the list of the most devastating malicious programs of the last few months. Vista Home Security 2012 is almost the same in its GUI design and uses similar ways of distribution. This scamware tends to penetrate into computers in a pretty simple way – usually, it’s a trojan based intrusion...

Posted in: Rogue Anti-Spyware

No comments yet

Vista Security 2012

Created: 2012-01-26 03:40:57 Author:Gaby C.

Vista Security 2012 is a rogue anti-spyware that uses sneaky methods helping it to get users' money. In order to receive some credits, this malware displays continuous system scanners and alerts that all report the same thing: your PC is dangerously infected by tons of viruses. However, you should never believe such messages displayed by Vista Security 2012 name. Keep in mind that this program is a dangerous malware that in reality has an empty virus database, so it has no capabilities to...

Posted in: Rogue Anti-Spyware

1 comments

Win 7 Security 2012

Created: 2012-01-25 03:30:18 Author:Gaby C.

Win 7 Security 2012 is a dangerous anti-spyware program that pretends to be important for computer's security. However, in reality that's just an updated version of the virus that was noticed in the beginning of June, 2011 for the first time. Note that you must ignore all the reports and notifications displayed by Win 7 Security 2012 and never purchase this program. Instead of protecting your computer against malware, it will simply take your money and will continue its annoying activity...

Posted in: Rogue Anti-Spyware

No comments yet