By Jim
Updated on Sunday, July 31st, 2011
XP Antivirus 2012 is a very tricky form of rogue spyware. It has recently been taking the internet by storm and infecting thousands upon thousands of computers across the globe. Once the virus slips itself onto your system it can create a whole horde of problems like slow computer speeds, fake scans, and annoying pop ups.
If you discover you are infected, the smart thing to do would be to remove it right away. Not only can viruses like XP Antivirus 2012 infect your computer, distort performance, and cause severe problems, it can also steal potentially private information like credit card numbers and bank information.
The best way to get rid of it is to use an antispyware software. For more information about how to remove XP Antivirus 2012 please continue reading.
Symptoms Of Infection
- Your computer is acting slow. XP Antivirus 2012 slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. XP Antivirus 2012 infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious XP Antivirus 2012 infection.
Dangers Of Infection
Viruses like XP Antivirus 2012 will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.
Some XP Antivirus 2012 infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall XP Antivirus 2012 Processes
Delete XP Antivirus 2012 Files
%AppData%\Local\[random].exe
%AppData%\Local\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%Temp%\[random]
Remove XP Antivirus 2012 Registry Files
HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1? = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1? %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Internet Explorer\iexplore.exe”
Popular Search Terms
Remove XP Antivirus 2012
Delete XP Antivirus 2012
Uninstall XP Antivirus 2012
How to get rid of XP Antivirus 2012
How to remove XP Antivirus 2012
XP Antivirus 2012 removal
Remove XP Antivirus 2012
XP Antivirus 2012 removal
XP Antivirus 2012
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Posted under Fake Antispyware | No Comments
