Remove SecurityScannerSite.com. Description and removal instructions

 
Title: SecurityScannerSite.com

Type: Corrupt websites
Severity scale:SecurityScannerSite.com severity is 56  (56 / 100)
 
SecurityScannerSite.com is a corrupt website that promotes the rogue anti-spyware parasite XPAntivirus. Once you visit this website, SecurityScannerSite.com installs several malicious files into your system, and proceeds to harass you with numerous fake security pop-up baloons that state you have been infected with malware. If you click any of these, SecurityScannerSite.com automatically downloads XPAntivirus.

If you have visited this website, be sure to remove the infected files. Otherwise, enter 89.149.226.24 into your HOSTS file to avoid infection altogether.


Related files: XPAntivirusUpdate.exe, ntoskrnl.exe, ntoskrnl.exe.md5, explorer.exe.md5, XPAntivirus.exe, wininet.dll, shlwapi.dll

SecurityScannerSite.com properties:
• Shows commercial adverts

Automatic SecurityScannerSite.com removal:

remover for SecurityScannerSite.com

SecurityScannerSite.com manual removal:

Kill processes:
xpantivirusupdate.exe, ntoskrnl.exe, ntoskrnl.exe.md5, explorer.exe.md5, ntoskrnl.exe, xpantivirus.exe
Delete registry values:
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run xp antivirus
HKEY_CURRENT_USER\software\xp antivirus\options lastscan
HKEY_CURRENT_USER\software\xp antivirus\options afterregisterurl
HKEY_CURRENT_USER\software\xp antivirus\options autoscanonstartup
HKEY_CURRENT_USER\software\xp antivirus\options
HKEY_CURRENT_USER\software\xp antivirus\firstrun
HKEY_CURRENT_USER\software\xp antivirus\options helpurl
HKEY_CURRENT_USER\software\xp antivirus\options labelurl
HKEY_CURRENT_USER\software\xp antivirus\options minimizetotray
HKEY_CURRENT_USER\software\xp antivirus\options offsiteurl
HKEY_CURRENT_USER\software\xp antivirus\options programversion
HKEY_CURRENT_USER\software\xp antivirus\options startwithwindows
HKEY_CURRENT_USER\software\xp antivirus\options totalscans
HKEY_CURRENT_USER\software\xp antivirus\options transactionkey
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter displayname
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter errorcontrol
HKEY_CURRENT_USER\software\xp antivirus\options firstrunminimize
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: user
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 installdate
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 installlocation
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\xp antivirus
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run xp antivirus
HKEY_CURRENT_USER\software\xp antivirus\options autoupdate
HKEY_CURRENT_USER\software\xp antivirus\options billingurl
HKEY_CURRENT_USER\software\xp antivirus\options enableantirootkit
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 urlupdateinfo
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 helplink
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: app path
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: icon group
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 inno setup: setup version
HKEY_CURRENT_USER\software\xp antivirus\options firstrunurl
HKEY_CURRENT_USER\software\xp antivirus\options billingurlapproved
HKEY_CURRENT_USER\software\microsoft\windows\shellnoroam\muicache c:\program files\xpantivirus\xpantivirus.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 publisher
HKEY_CURRENT_USER\software\xp antivirus\options updateurl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter imagepath
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter start
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter type
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum count
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 nomodify
HKEY_CURRENT_USER\software\xp antivirus\options aff
HKEY_CURRENT_USER\software\xp antivirus\options registerurl
HKEY_CURRENT_USER\software\xp antivirus\options startminimized
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum initstartfailed
HKEY_CURRENT_USER\software\xp antivirus\options enablesysbackup
HKEY_CURRENT_USER\software\xp antivirus
HKEY_CURRENT_USER\software\xp antivirus\options checkhidden
HKEY_CURRENT_USER\software\xp antivirus\options enableadvanced
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 norepair
HKEY_CURRENT_USER\software\xp antivirus\options versionurl
HKEY_CURRENT_USER\software\xp antivirus\register
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9a19966f-ae0e-4699-8cce-9b6f5f1c352c}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 quietuninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 urlinfoabout
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum nextinstance
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\security
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\security security
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run xp antivirus
Unregister DLLs:
wininet.dll, shlwapi.dll

Delete files:
xpantivirusupdate.exe, ntoskrnl.exe, ntoskrnl.exe.md5, explorer.exe.md5, ntoskrnl.exe, xpantivirus.exe, wininet.dll, shlwapi.dll

Other programs to remove SecurityScannerSite.com:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 04/05/08
Information updated: 04/05/08

Additional resources related to SecurityScannerSite.com:

Attention: If you know or you have a website or page about SecurityScannerSite.com removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about SecurityScannerSite.com parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: