Remove XP Internet Security 2010. Description and removal instructions

 
Title: XP Internet Security 2010
Also known as: XPInternetSecurity2010, XPInternet Security 2010
Type: Spyware
Severity scale:XP Internet Security 2010 severity is 72  (72 / 100)
 
XP Internet Security 2010 is a rogue security program that reports false threats and displays fake security alerts to make you think that your computer is infected. This malware is distributed through the use of Trojans that usually come from fake online anti-malware scanners or misleading video websites. Once a Trojan virus is installed, it will download and install XP Internet Security 2010 virus on your PC. The rogue program comes as an update for Windows. The rogue program itself is a typical scareware. It reports false infections and asks to pay for a full version of the program to supposedly remove those infections. The most important thing to remember is that XPInternet Security 2010 is a scam, don't buy it! Instead please use the removal guide below to remove this infection from your PC as soon as possible.

XP Internet Security 2010 graphical user interface
[Figure 1. XP Internet Security 2010 graphical user interface]

Unfortunately, XP Internet Security 2010 uses aggressive methods to protect itself from being removed. It blocks anti-virus and anti-malware software. It may block other programs too, even if they are not related with computer security. XP Internet Security 2010 has a list of executable files that can be launched and it checks that list every time you open a particular program. What is more, it modifies Windows registry and hijacks Internet Explorer and Firefox web browsers. This parasite will display fake security warnings and block certain websites claiming that those websites are dangerous and host malware.

XPInternetSecurity2010 removal instructions:

1. Click Start->Run (or WinKey+R). Input: "command". Press Enter or click OK.


2. Type "notepad" as shown in the image below and press Enter. Notepad will open.


3. Copy and past the following text into Notepad:


Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]
[-HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]

[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"

[-HKEY_CLASSES_ROOT\secfile]

4. Save file as "exefix.reg" (without quotation-marks) to your Desktop.
NOTE: choose Save as type: All files


5. Double-click to open exefix.reg. Click "Yes" for Registry Editor prompt window.

6. Download Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.

If you can't complete the above steps then please use another PC to download an automatic removal tool and exefix.reg (Right Click (Save Target As)) to download file. Copy these files to USB flash drive or any other external media and transfer them to infected computer. Launch exefix.reg file first and then install Spyware Doctor.


Related files: av.exe, WRblt8464P

XP Internet Security 2010 properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic XP Internet Security 2010 removal:

remover for XP Internet Security 2010

XP Internet Security 2010 manual removal:

Kill processes:
av.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Classes\.exe
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\.exe\shell
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start
HKEY_CURRENT_USER\Software\Classes\.exe\shell\start\command
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Classes\secfile\DefaultIcon
HKEY_CURRENT_USER\Software\Classes\secfile\shell
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas
HKEY_CURRENT_USER\Software\Classes\secfile\shell\runas\command
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start
HKEY_CURRENT_USER\Software\Classes\secfile\shell\start\command
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USER\Software\Classes\.exe | @ = “secfile”
HKEY_CURRENT_USER\Software\Classes\.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | @ = “”%AppData%\av.exe” /START “%1″ %*”
HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command | IsolatedCommand = “”%1″ %*”
Delete files:
%UserProfile%\\Local Settings\\Application Data\\av.exe %UserProfile%\\Local Settings\\Application Data\\WRblt8464P

Other programs to remove XP Internet Security 2010:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 28/01/10
Information updated: 25/04/10

Additional resources related to XP Internet Security 2010:

Attention: If you know or you have a website or page about XP Internet Security 2010 removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about XP Internet Security 2010 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Damian. 2010-04-25 07:04:39
manual instruction seems to work:) thx

2. by Queen of the Games. 2010-04-24 16:04:44
it doesn't work :S

3. by . 2010-04-22 03:04:29
the proscees to kill was called ave.exe on my pc

4. by . 2010-04-07 14:04:53
just had this ugly virus...
so far norton internet program i have got rid of it...
boy is that money well spent...
it often gets rid of things before they even have a chance to start

5. by . 2010-04-03 23:04:19
I would like to try this but when I turn on the computer, I get a blue error screen. Any ideas?

6. by . 2010-03-31 14:03:09
This seems like a pretty bull shit extortion scheme. I wouldn't be surprised if spyware doctor is the one behind this virus.

Why link the program to scan for free if it requires purchase to delete.

7. by . 2010-03-31 12:03:44
So what do I delete? is it the "1.*% stuff??

I cant even run malwarebytes? It wont open what do I do???

8. by . 2010-03-22 02:03:37
I also did this.. and now I cant open ANY .exe files.. and i cant access my registry.. can someone please help me? Help pls!

9. by . 2010-03-21 18:03:43
i did this.. and now i cant open ANY .exe files.. and i cant access my registry.. can someone please help me? Thanks

10. by türkish. 2010-03-17 07:03:22
Tskler = Thks you Admin ;=

11. by . 2010-03-12 05:03:52
does this work?

12. by . 2010-03-10 10:03:37
Thank you Sooooo much!!! It works, what a relief!

13. by . 2010-03-08 19:03:51
get a version of norton 360 i have installed and scanned . i dont know if the av.exe file is still present but it will let me get on the internet and isnt telling me that i have infected files

14. by . 2010-03-08 03:03:10
Spyware Doctor is not free, and the free download does nothing but scan. It would be better to download one of the other malware programs.

15. by . 2010-03-05 16:03:54
omg, thank yuo so much, i was scared shitless my mom would think i did that. (she always does ) i just hope it doesn' t come back when i restart the computer :/

16. by . 2010-03-05 07:03:13
This thing sucks, I thought I got rid of it but everytime I restart my computer it comes back.

17. by . 2010-03-04 20:03:50
...man, i cant even change my url or go to another link without this this saying i cant go to another site...

18. by . 2010-03-04 19:03:20
when i open the "exefix" it say "registry editing has been disable by your administration"... what should i do.... help please

19. by . 2010-03-04 14:03:40
wtf... followed manual instructions, did step 1 and 2, but i can't seem to find the files that i need to delete. but after doing the first two steps, i no longer get the annoying pop ups and the icon is gone. but where are the files?

20. by . 2010-03-03 20:03:26
thank you so much. you save my life

See more comments about XP Internet Security 2010 >>>
Latest spyware news:
Similar parasites: