By Jim
Updated on Thursday, May 6th, 2010
XP Security, also called XPSecurity, is one of the newly-active rogue anti-spyware people have noticed in the last few months. As with other software of this bent, its main goal is to get you to purchase the supposed paid version of this fake scanner application. It will throw up alerts that your disk is filled with bad viruses and redirect browsers to webpages with ads directing you to give up your credit card to pay for it. Don’t fall for it!
While sometimes it might end up that paying for this badware will do nothing more than dent your credit balance a bit. What you might not be sure of is where your credit details end up. It might get harvested into a credit card cloning scheme or be part of an identity theft ring. The safest route then is to just ignore all the fancy stuff it does to get you to pay for something that won’t give anything back.
Software like these often don’t come alone. It might have brought along with it other harmful software like keyloggers, backdoor openers and the like which are there to extract every valuable byte in your computer and turn it into cash one way or another. Hackers can sell your data, use your passwords to control your Facebook or Twitter accounts and they can even outright buy stuff using your eCommerce accounts.
Read on for a cure to this nefarious malware.
Symptoms Of Infection
- Your computer is acting slow. XP Security slows down your system significantly. This includes starting up, shutting down, playing games, and surfing the web.
- You are getting pestered with pop ups. XP Security infects your registry and uses it to launch annoying pop up ads out of nowhere.
- Searches are redirected or your homepage and desktop are settings are changed. This is a symptom of a very serious XP Security infection.
Dangers Of Infection
Viruses like XP Security will infect your registry and other important system files. If the infection is not treated it can cause a complete collapse of your system.
Some XP Security infections contain spyware and keyloggers which can be used to record sensitive data like passwords, credit card, bank account, and social security numbers. The longer you allow the infection to fester, the greater the chance of identity fraud.
How To Remove Infection Manually
Uninstall XP Security Processes
Delete XP Security Files
Remove XP Security Registry Files
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “%1? %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%UserProfile%\Local Settings\Application Data\ave.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1?
Popular Search Terms
Remove XP Security
Delete XP Security
Uninstall XP Security
How to get rid of XP Security
How to remove XP Security
XP Security removal
Remove XPSecurity
XPSecurity removal
XP-Security
Warning! If Spyware Doctor is blocked by the virus then run your system in safe mode and try again. To do this reboot your system and tap F8 repeatedly as your computer starts up. Then run Spyware Doctor as normal. If this doesn’t work try renaming the Spyware Doctor EXE file.
Posted under Fake Antispyware | No Comments
