Severity scale  
  (67/100)

XP Home Security 2012. How to Remove? (Uninstall Guide)

removal by - -   Also known as XPHomeSecurity2012 | Type: Rogue Antispyware
12

XP Home Security 2012 is a rogue anti-spyware program that simulates a system scan and reports false scan results just to scare you and make you think that your computer is infected with Trojans, worms and other malware. Once installed, it will display fake security alerts or notifications and then inform you that you need to pay money to register the program if you want to remove the infections and computer threats, which of course do not even exist. Do not pay for this software and get rid of XP Home Security 2012 from your computer upon detection using the removal stated guide below.

XP Home Security 2012 displays warnings and notifications about serious security threats and privacy issues. It will also state that it has detected many critical spyware objects and that these objects can expose private information, for example:

XP Home Security 2012 Firewall Alert
XP Home Security 2012 has blocked a program from accessing the internet
Internet Explorer is infected with Trojan-BNK.Win32.Keylogger.gen
Private data can be stolen by third parties, including credit card details and passwords.

Malware Intrusion
Sensitive areas of your system were found to be under attack. Spy software attack or virus infection possible. Prevent further damage or your private data will get stolen. Run an anti-spyware scan now. Click here to start.

Of course, that's not true. This is just a part of whole scam. Besides, no matter what you decide to do, it will ask to pay for a full version of the program to protect your computer from malware and possible attacks from the Internet. Just ignore all of this and read the removal instructions carefully. Use updated anti-spyware to remove XP Home Security 2012 as soon as possible!

Note that if you can't launch your anti-spyware, there are some special tips you should know:

1. Try renaming the executable to something else, like iexplore.exe so XP Home Security 2012 will not block it.

2. From another user account on Windows XP system

3. Launch anti-malware programs from safe mode with networking.

4. Stop XP Home Security 2012 processes with task manager or other utility.

5. Using codes like 3425-814615-3990 or 9443-077673-5028 to disable malware.

This will allow running legitimate anti-malware programs and completely clean your PC from Win 7 Total Security 2012.

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall XP Home Security 2012. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall XP Home Security 2012. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes XP Home Security 2012 (2011-06-08 13:42:14)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes XP Home Security 2012 (2011-06-08 13:42:14)
Plumbytes
We are testing Plumbytes's efficiency (2012-04-25 06:56)
Hitman Pro
STOPzilla
Tested and Confirmed! STOPzilla removes XP Home Security 2012 (2011-06-08 13:42:14)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes XP Home Security 2012 (2011-06-08 13:42:14)
Webroot SecureAnywhere AntiVirus

XP Home Security 2012 manual removal

Kill processes:
kdn.exe
Delete registry values:
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\BrowserEmulation "TLDUpdates" = '1'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%LocalAppData%\kdn.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = '1'
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = '1'
Delete files:
%AllUsersProfile%\Application Data\u3f7pnvfncsjk2e86abfbj5h
%LocalAppData%\kdn.exe
%LocalAppData%\u3f7pnvfncsjk2e86abfbj5h
%Temp%\u3f7pnvfncsjk2e86abfbj5h
%UserProfile%\Templates\u3f7pnvfncsjk2e86abfbj5h

Geolocation of XP Home Security 2012

Map reveals the prevalence of XP Home Security 2012. Countries and regions that have been affected the most are: United States.

Information updated:

Comments on XP Home Security 2012

0
0
Novi
I had the virus. Downloaded the fix onto a usb drive. Fixed it. That was 4 weeks ago, now all of a sudden searchcore.net/426 shows up in my browser and the computer wont recognize my IP address. ARGH! I cannot get rid of this searchcore thing. Was there perhaps another piece of this terrible virus that did not get fixed the first time. I am ready to throw my computer out the window.
0
0
tekctrl
I found and deleted the 3-letter executable, but then discovered that it had somehow disabled the Microsoft Updates and Microsoft Security Essentials updaes. They reported that they were on and active, but would fail if I tried to do a manual update. Just because the barrage of "Youre Infected" windows stops does Not mean that youre clean. If your systems are updating ok, well and good. If they wont update, you have more cleaning to do.
0
0
alexandar
kuta software ha sala is ne mera system hijack kr dya ha yh ek virus ha sala plzzzzzzzzzzzzzz jn k pc mein aa chuka window dobara kr lo ni to maree jao ge avien
0
0
Scharf
My suggestions for the best way to perform these tasks is to reboot and start in safe mode. then install off a usb drive...then run these anti-spam programs. Do quick and then full....after that you should be ok.
0
0
POPEAL
QKM.exe Removed. Stubborn.
0
0
Anis
If you delete the ntuser.dat file for the specific user, the program will stop running aswell. It worked for me, and its alot faster. Of course you need to have a second administrator account on your computer to be able to do that, and you need a freshly restarded pc that the infected user(on my pc it was only one user that was infected) hasnt logged into yet(if the user has logged in while the computer was started the ntuser.dat file cant be deleted for that specific user.
1
0
OD
Mine came up as bsq.exe. There is a really good YouTube video that helped me remove this stupid thing. Its called "How to Remove XP Home Security 2012". Its 9:14 long, and I did a bit of pausing during it, but it made things easy. Hope that helps.
0
0
Loustar
this code no longer works. tried it with and without the dashes - 2233-298080-3424, 3425-814615-3990 - is there another code?
0
0
BND
Looks like my variant was named WUA.exe
0
0
ConMan
Thank you so much thus us awesome!!!!!!
More comments »

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)