Title: SecurityScannerSite.com

Type: Corrupt websites

Remove SecurityScannerSite.com. Removal instructions

Severity scale:

(56 / 100)

SecurityScannerSite.com is a corrupt website that promotes the rogue anti-spyware parasite XPAntivirus. Once you visit this website, SecurityScannerSite.com installs several malicious files into your system, and proceeds to harass you with numerous fake security pop-up baloons that state you have been infected with malware. If you click any of these, SecurityScannerSite.com automatically downloads XPAntivirus.

If you have visited this website, be sure to remove the infected files. Otherwise, enter 89.149.226.24 into your HOSTS file to avoid infection altogether.

Related files: XPAntivirusUpdate.exe, ntoskrnl.exe, ntoskrnl.exe.md5, explorer.exe.md5, XPAntivirus.exe, wininet.dll, shlwapi.dll

SecurityScannerSite.com properties:
• Shows commercial adverts

Automatic SecurityScannerSite.com removal:

remover for SecurityScannerSite.com

SpyHunter is recommended remover to uninstall SecurityScannerSite.com. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove SecurityScannerSite.com using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing SecurityScannerSite.com (2008-05-04 07:38:52)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing SecurityScannerSite.com (2008-05-04 07:38:52)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing SecurityScannerSite.com (2008-05-04 07:38:52)

XoftSpySE Anti Spyware

download | review

SecurityScannerSite.com manual removal:

FORUM:
Discuss SecurityScannerSite.com in
spyware removal forum

Kill processes:
xpantivirusupdate.exe, ntoskrnl.exe, ntoskrnl.exe.md5, explorer.exe.md5, ntoskrnl.exe, xpantivirus.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run xp antivirus
HKEY_CURRENT_USER\software\xp antivirus\options lastscan
HKEY_CURRENT_USER\software\xp antivirus\options afterregisterurl
HKEY_CURRENT_USER\software\xp antivirus\options autoscanonstartup
HKEY_CURRENT_USER\software\xp antivirus\options
HKEY_CURRENT_USER\software\xp antivirus\firstrun
HKEY_CURRENT_USER\software\xp antivirus\options helpurl
HKEY_CURRENT_USER\software\xp antivirus\options labelurl
HKEY_CURRENT_USER\software\xp antivirus\options minimizetotray
HKEY_CURRENT_USER\software\xp antivirus\options offsiteurl
HKEY_CURRENT_USER\software\xp antivirus\options programversion
HKEY_CURRENT_USER\software\xp antivirus\options startwithwindows
HKEY_CURRENT_USER\software\xp antivirus\options totalscans
HKEY_CURRENT_USER\software\xp antivirus\options transactionkey
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter displayname
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter errorcontrol
HKEY_CURRENT_USER\software\xp antivirus\options firstrunminimize
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: user
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 installdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 installlocation
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\xp antivirus
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run xp antivirus
HKEY_CURRENT_USER\software\xp antivirus\options autoupdate
HKEY_CURRENT_USER\software\xp antivirus\options billingurl
HKEY_CURRENT_USER\software\xp antivirus\options enableantirootkit
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 urlupdateinfo
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 helplink
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: app path
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: icon group
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: setup version
HKEY_CURRENT_USER\software\xp antivirus\options firstrunurl
HKEY_CURRENT_USER\software\xp antivirus\options billingurlapproved
HKEY_CURRENT_USER\software\microsoft\windows\shellnoroam\muicache c:\program files\xpantivirus\xpantivirus.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 publisher
HKEY_CURRENT_USER\software\xp antivirus\options updateurl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter imagepath
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter start
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter type
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum count
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 nomodify
HKEY_CURRENT_USER\software\xp antivirus\options aff
HKEY_CURRENT_USER\software\xp antivirus\options registerurl
HKEY_CURRENT_USER\software\xp antivirus\options startminimized
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum initstartfailed
HKEY_CURRENT_USER\software\xp antivirus\options enablesysbackup
HKEY_CURRENT_USER\software\xp antivirus
HKEY_CURRENT_USER\software\xp antivirus\options checkhidden
HKEY_CURRENT_USER\software\xp antivirus\options enableadvanced
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 norepair
HKEY_CURRENT_USER\software\xp antivirus\options versionurl
HKEY_CURRENT_USER\software\xp antivirus\register
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9a19966f-ae0e-4699-8cce-9b6f5f1c352c}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 quietuninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 urlinfoabout
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum nextinstance
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\security
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\security security
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run xp antivirus

HELP:
how to remove registry entries

Unregister DLLs:
wininet.dll, shlwapi.dll

HELP:
how to unregister malicious DLLs

Delete files:
xpantivirusupdate.exe, ntoskrnl.exe, ntoskrnl.exe.md5, explorer.exe.md5, ntoskrnl.exe, xpantivirus.exe, wininet.dll, shlwapi.dll

HELP:
how to remove harmful files

Information added: 2008-05-04 05:01:37
Information updated: 2008-05-04 05:01:37

Additional resources related to SecurityScannerSite.com:

Attention: If you know or you have a website or page about SecurityScannerSite.com removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about SecurityScannerSite.com parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.