Remove XP Security Tool. Description and removal instructions
XP Security Tool is installed through the use of Trojan that displays fake security alerts. Once installed, the rogue security application will be automatically configured to scan your computer each time you log on into Windows. Furthermore, XP Security Tool will impersonate Windows Security Center and display fake security alerts and pop-ups claiming that the system is unprotected. The program will state that anti-virus software is disabled and that you must purchase XP Security Tool to ensure full PC protection. What is more, XP Security Toolr will block certain security websites and antivirus software. It will slow down your computer too. As you can see XP Security Tool is nothing more but a scam. Please use the removal guide below to remove this infection from your computer manually for free. You should also scan your PC with reliable and effective anti-spyware application to make sure there are no more malware on the system. XP Security Tool removal instructions: 1. Click Start->Run (or WinKey+R). Input: "command". Press Enter or click OK.  2. Type "notepad" as shown in the image below and press Enter. Notepad will open.  3. Copy and past the following text into Notepad: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USERSoftwareClasses.exe] [-HKEY_CURRENT_USERSoftwareClassessecfile] [-HKEY_CLASSES_ROOTsecfile] [-HKEY_CLASSES_ROOT.exeshellopencommand] [HKEY_CLASSES_ROOTexefileshellopencommand] @=""%1" %*" [HKEY_CLASSES_ROOT.exe] @="exefile" "Content Type"="application/x-msdownload" 4. Save file as "exefix.reg" (without quotation-marks) to your Desktop. NOTE: choose Save as type: All files  5. Double-click to open exefix.reg. Click "Yes" for Registry Editor prompt window. 6. Download Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan. If you can't complete the above steps then please use another PC to download an automatic removal tool and exefix.reg (Right Click (Save Target As)) to download file. Copy these files to USB flash drive or any other external media and transfer them to infected computer. Launch exefix.reg file first and then install Spyware Doctor. Related files: c:Documents and SettingsAll UsersApplication DataQJyrk5wvCU1, %UserProfile%Local SettingsApplication Dataav.exe, %UserProfile%Local SettingsApplication Dataave.exe, %UserProfile%Local SettingsApplication DataQJyrk5wvCU1, %UserProfile%Local SettingsApplication DataWRblt8464P, %UserProfile%Local SettingsTempQJyrk5wvCU1, %UserProfile%TemplatesQJyrk5wvCU1 XP Security Tool properties: • Changes browser settings • Shows commercial adverts • Connects itself to the internet • Stays resident in background Automatic XP Security Tool removal:remover for XP Security Tool
XP Security Tool manual removal:Kill processes:av.exe ave.exe Delete registry values: HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %* HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %* HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %* HKEY_CLASSES_ROOTsecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "%1" %* HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataav.exe" /START "C:Program FilesInternet Exploreriexplore.exe" HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "%1" %* HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "%1" %* HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "%1" %* HKEY_CLASSES_ROOTsecfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "%1" %* HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Dataave.exe" /START "C:Program FilesInternet Exploreriexplore.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1" HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1" Delete files: c:\Documents and Settings\All Users\Application Data\QJyrk5wvCU1 %UserProfile%\Local Settings\Application Data\av.exe %UserProfile%\Local Settings\Application Data\ave.exe %UserProfile%\Local Settings\Application Data\QJyrk5wvCU1 %UserProfile%\Local Settings\Application Data\WRblt8464P %UserProfile%\Local Settings\Temp\QJyrk5wvCU1 %UserProfile%\Templates\QJyrk5wvCU1 Other programs to remove XP Security Tool:• Malwarebytes Anti Malware - Review - Download• Malwarebytes Anti Malware - Review - Download • Windows Defender - Review - Download Information added: 18/03/10 Information updated: 27/03/10 Additional resources related to XP Security Tool:Attention: If you know or you have a website or page about XP Security Tool removal, feel free to add a link to this list: add url
more resources Post Comment:Attention: Use this form only if you have additional information about XP Security Tool parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
|
Latest spyware news:
 Eliminate annoying "Open with..." dialog box Attention! Norton Update Center is announced to be vulnerable for cross-site scripting, redirects and html injections! Attention! Nonexistent video on Facebook! A New Type of Phishing Attack - Tabnapping McAfee False Detection causes significant Window XP performance issues Three men responsible for the largest Spanish “botnet” Mariposa have been arrested How to Keep Your Credentials Save StopBadware is Fighting Against Cyber Criminals as a Non-Profit Organization The Most Successful Period for Cyber Criminals Don't Make Online Donations to ScammersSubscribe to news 
Similar parasites:
|
FORUM:
HELP:
Comments from visitors:
1. by doodlz. 2010-03-27 07:03:13