By Jim
Updated on Tuesday, February 2nd, 2010
Are you plagued with annoying pop-ups warning you of multiple malware attacks? Maybe your system’s been infected with XP Internet Security, a dangerous malware that pretends to be a legitimate anti-spyware program.
XP Internet Security can conduct scans and reports, all of which are absolutely fake. They’re just meant to scare you into purchasing the full version of XP Internet Security. Is it a scam? You can bet your yearly salary it is. It’s simply designed to milk you of your hard-earned money. What do you get in return? zilch.
Introduced to unsuspecting victims through trojans, XP Internet Security can lie in waiting in malicious websites offering freebies like mp3s, video codecs, and Flash player updates. They can also be found in fake online scanners.
Is it dangerous? Well, if you end up purchasing the “full version” of XP Internet Security online, you’ll be sharing your credit card information in the hands of malicious individuals. That information may very well end up in the hands of even more wicked crooks. Identity theft – does that ring a bell?
So, yes, aside from being very annoying (because of all those pop-ups), XP Internet Security can be a very dangerous piece of software.
Symptoms Of Infection
- Your computer is acting slow. XP Internet Security slow down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. XP Internet Security infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious XP Internet Security infection.
Dangers Of Infection
Viruses like XP Internet Security will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.
Some XP Internet Security infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall XP Internet Security Processes
Delete XP Internet Security Files
%UserProfile%\\Local Settings\\Application Data\\WRblt8464P
Remove XP Internet Security Registry Files
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “%1″ %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\av.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″
Popular Search Terms
Remove XP Internet Security
Delete XP Internet Security
Uninstall XP Internet Security
How to get rid of XP Internet Security
How to remove XP Internet Security
XP Internet Security removal
Remove XPInternetSecurity
XPInternetSecurity removal
XP-Internet-Security
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal.
Posted under Fake Antispyware | No Comments
