Remove XP Security 2011
Removal instructions

Severity scale:  
XP Security 2011 is also known as XPSecurity2011 | Type: Rogue Antispyware | Tags: Braviax
XP Security 2011 is another way created by fraudulent cyber community to deceive PC users into wasting their money. Besides, because this program is categorized as rogue anti-spyware, people are also tricked into infecting their computers if they run Windows XP. XP Security 2011 is a successor of the very similar programs called XP Internet Security 2010 or recently released Win 7 Internet Security 2011. XP Security 2011 spreads its freeware executables through a fake online scanning sites and misleading pop-up ads that can be randomly displayed when you browse on the web.

Once XP Security 2011 finds itself in your computer, it quickly modifies the registry and invents a number of files so that it could later find them as infections. Additionally, OS gets paralyzed and malware starts disturbing the victim with its fabricated scanners and intensely streamed misleading popup ads. The above alerts tell you that your system is in great danger because it’s being attacked by some extremely dangerous viruses, trojans, keyloggers and additional malware. These alerts say:

System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.

System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

The only reason why XP Security 2011 plays all this tricky game by reporting imaginary infections is to make you concerned about the status of your computer security. Having fallen in this campaign, XP Security 2011 malware asks to make a purchase of its registered version if you want to save your PC. Now it should be clear that you must avoid this trickery and don’t purchase it. Don’t believe its ads and remove XP Security 2011 from your computer.

UPDATE!!! One of PC security bloggers, S!Ri, has announced about a serial code that may help you to disable those malwares like XP Security 2011 that change their names according to OS they find. Enter this serial code when doing registration: 1145-17884799-7733. This and the order number 21197673 should also work for earlier versions of this type of parasite. After typing them, you should become able to use your anti-spyware, if it fails follow the guide written below. Be aware that these numbers are expected to change in the near future!

To remove XP Security 2011 you will need another PC, as removing it from safe mode with networking will not work in most of the cases.

a) Burn these programs to CD or write them to USB disk. You can use your MP3 player, or smartphone if it has storage functions. This parasite does not spread through USB at the moment:

1.Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.

2.You might want to download Hitman Pro or Malwarebytes as alternate scanners. Though you are likely to be able to download them later on.

b) Boot normally. Wait for XP Security 2011 to launch, and run exeregfix.reg . This should allow launching legitimate programs

c) Delete or remove the files that are mentioned in our files box. You can use Spyware Doctor to identify the infected files and additional infections or automatic XP Security 2011 removal tool. Do not forget update it before scanning. Remove what it finds.

d) Scan with Spyware Doctor and secondary tools and reboot your PC. This should fully get rid of XP Security 2011.

XP Security 2011 properties:
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic XP Security 2011 removal:

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove XP Security 2011 you agree with our Privacy Policy and Agreement of Use.
Do it now!
remover for XP Security 2011 Happiness
Compatible with Microsoft
Spyware Doctor is recommended remover to uninstall XP Security 2011. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove XP Security 2011 using Spyware Doctor, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.

Alternate Software

Tested and Confirmed! STOPzilla removes XP Security 2011 (2010-11-13 05:17:55)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes XP Security 2011 (2010-11-13 05:17:55)
We are testing SpyHunter's efficiency at removing XP Security 2011 (2012-06-11 22:02:36)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing XP Security 2011 (2012-06-11 22:02:36)
Virus Removal Phone Support
Help Line to remove XP Security 2011

XP Security 2011 manual removal

Kill processes:
Delete registry values:
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CURRENT_USERSoftwareClassespezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOTpezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesInternet Exploreriexplore.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"
Delete files:
%UserProfile%Local SettingsApplication DataopRSK
%UserProfile%Local SettingsApplication Datapw.exe
%UserProfile%Local SettingsApplication DataMSASCui.exe
%UserProfile%AppDataLocalopRSK %UserProfile

Geolocation of XP Security 2011

This map reveals the prevalence of XP Security 2011. Countries and regions that have been affected the most are: India, Canada, United States, United Kingdom and Germany.

QR code for XP Security 2011 removal instructions

XP Security 2011 qrcode QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the website is that parasites like XP Security 2011 are really hard to remove on infected computer. you can quicly scan the QR code with your mobile device and have manual removal instructions to uninstall XP Security 2011 right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.

Information added: 2010-11-13 05:17
Information updated: 2012-06-11 19:25

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Users comments about XP Security 2011:

mine shows up as drw.exe
mine showed at grt.exe
mine shows up as fbb.exe
mine turned out to be lsd.exe
Mine shows as jbn.exe
This appeared on a staff system as jbn.exe
Mine was avc.exe
Mine was also jbn.exe
mine was lar.exe.
Could not run regedit or cmd from start/run.
Had to create a .bat file with regedit inside and double click it.
Once regedit opens, it's pretty simple.
Just search for lar.exe (or whatever it is in your case) and remove all of them.
did a system restore fixed issue! this pcdoctor crap ia bullshit wants money like the rest nothing for free!
I logged onto a different account on the PC, then ran system restore. things are looking fine now.
does not work this way any longer tryed failes to launch the file spyware that was downloaded to a usb card. also no longer allows you on the web.
The code I just used was 1147-175591-6550 it works i.e the xp security 2011 goes through the removing sequence. I can use my internet explorer once again, however I cannot download any malware software, or even access system restore or add remove programs!
thanks, the code is working
Thank you for the .bat advice
All solved. Mine was named jyn.exe
To register use : 1145-17884799-7733 or 1147-175591-6550
mine was sbg.exe ... so .. 3 letters . exe
Used hitman pro and it removed the problem.
On my pc it was listed as fpv.exe
All is well now
on these 3 letter files how do you find and identify them. I have had this once got rid of it and went to reload adobe and it came back stronger neweer version
A fellow worker has the file lve.exe and when I follwed these instructions to remove it - it came back stronger just like joe said. This time it even shut down applications that were running.

Whats frustrating is we were running software that doesnt seem to be able to detect the virus.
More comments...

Post Comment

Attention: Use this form only if you have additional information about XP Security 2011 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name


(All fields are required)
Like us on Facebook
Ask us
What's your antispyware?
I failed to remove XP Security 2011 using Spyware Doctor.


add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!