Remove XP Smart Security 2010. Description and removal instructions

 
Title: XP Smart Security 2010
Also known as: XPSmartSecurity2010
Type: Spyware
Severity scale:XP Smart Security 2010 severity is 67  (67 / 100)
 
XP Smart Security 2010 is a rogue program from the same family as XP Internet Security 2010. This fake program is promoted through the use of malware as well as fake online anti-malware scanners. Usually, rogue program enter users' computers without their permissions. Most of the time, such programs come from fake online scanners that state that your computer is infected and that you should download and install XP Smart Security 2010 to protect your computer.

When the rogue program is installed, it will be configured to start automatically when you start Windows. After the fake scan, XP Smart Security 2010 will state that there are numerous infections on your computer. However, please note that the only security problem on the computer is XPSmartSecurity2010, you shouldn't purchase this program. Furthermore, it will display many fake security alerts that will state that your computer is infected with malware or under attack from a remote computer. What is more, this fake program will block legitimate antivirus and anti-spyware program as well as security related websites.

As you can see, XP Smart Security 2010 is absolutely needless programs that why it should be removed from your computer as soon as possible. Please follow the removal instructions below to remove this infection from your computer.

XP Smart Security 2010 removal instructions:

1. Click Start->Run (or WinKey+R). Input: "command". Press Enter or click OK.


2. Type "notepad" as shown in the image below and press Enter. Notepad will open.


3. Copy and past the following text into Notepad:


Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USERSoftwareClasses.exe]
[-HKEY_CURRENT_USERSoftwareClassessecfile]
[-HKEY_CLASSES_ROOTsecfile]
[-HKEY_CLASSES_ROOT.exeshellopencommand]

[HKEY_CLASSES_ROOTexefileshellopencommand]
@=""%1" %*"

[HKEY_CLASSES_ROOT.exe]
@="exefile"
"Content Type"="application/x-msdownload"

4. Save file as "exefix.reg" (without quotation-marks) to your Desktop.
NOTE: choose Save as type: All files


5. Double-click to open exefix.reg. Click "Yes" for Registry Editor prompt window.

6. Download Spyware Doctor or an automatic removal tool below. Update Spyware Doctor and run a full system scan.

If you can't complete the above steps then please use another PC to download an automatic removal tool and exefix.reg (Right Click (Save Target As)) to download file. Copy these files to USB flash drive or any other external media and transfer them to infected computer. Launch exefix.reg file first and then install Spyware Doctor.


Related files: %UserProfile%Local SettingsApplication Dataav.exe, %UserProfile%Local SettingsApplication Dataave.exe, %UserProfile%Local SettingsApplication DataWRblt8464P

XP Smart Security 2010 properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic XP Smart Security 2010 removal:

remover for XP Smart Security 2010

XP Smart Security 2010 manual removal:

Kill processes:
av.exe ave.exe
Delete registry values:
HKEY_CURRENT_USERSoftwareClasses.exe
HKEY_CURRENT_USERSoftwareClasses.exeDefaultIcon
HKEY_CURRENT_USERSoftwareClasses.exeshell
HKEY_CURRENT_USERSoftwareClasses.exeshellopen
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand
HKEY_CURRENT_USERSoftwareClasses.exeshellrunas
HKEY_CURRENT_USERSoftwareClasses.exeshellrunascommand
HKEY_CURRENT_USERSoftwareClasses.exeshellstart
HKEY_CURRENT_USERSoftwareClasses.exeshellstartcommand
HKEY_CURRENT_USERSoftwareClassessecfile
HKEY_CURRENT_USERSoftwareClassessecfileDefaultIcon
HKEY_CURRENT_USERSoftwareClassessecfileshell
HKEY_CURRENT_USERSoftwareClassessecfileshellopen
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand
HKEY_CURRENT_USERSoftwareClassessecfileshellrunas
HKEY_CURRENT_USERSoftwareClassessecfileshellrunascommand
HKEY_CURRENT_USERSoftwareClassessecfileshellstart
HKEY_CURRENT_USERSoftwareClassessecfileshellstartcommand
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand | @ = “”%AppData%av.exe” /START “%1″ %*”
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand | IsolatedCommand = “”%1″ %*”
HKEY_CURRENT_USERSoftwareClasses.exe | @ = “secfile”
HKEY_CURRENT_USERSoftwareClasses.exe | Content Type = “application/x-msdownload”
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand | @ = “”%AppData%av.exe” /START “%1″ %*”
HKEY_CURRENT_USERSoftwareClassessecfileshellopencommand | IsolatedCommand = “”%1″ %*”
Delete files:
%UserProfile%\Local Settings\Application Data\av.exe %UserProfile%\Local Settings\Application Data\ave.exe %UserProfile%\Local Settings\Application Data\WRblt8464P

Other programs to remove XP Smart Security 2010:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 18/03/10
Information updated: 22/04/10

Additional resources related to XP Smart Security 2010:

Attention: If you know or you have a website or page about XP Smart Security 2010 removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about XP Smart Security 2010 parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by .. 2010-04-22 13:04:59
All i did was open regedit
goto file find VMA.exe from the root ot the registry hive and deleted all instances of the file
clicked F3 to find next and rebooted all worked fine

thanks for the tip

2. by Ethan. 2010-04-16 19:04:35
i cant access my browser and my reg edit is disabled by administrator. also it stops me from doing a system restore and i really want it gone :(

3. by . 2010-04-13 15:04:23
i cant get onto sites on the computer that its on it just takes me to some page wich i cant get off on the internet browser

4. by . 2010-04-09 05:04:42
Unfortunately, I can't even log on to delete this virus as the computer keeps automatically resetting before i reach the log on screen.

Can anybody help?

5. by . 2010-04-05 12:04:59
Can anyone post the details of the people responsible for this ?
Or failing that any of their close relatives ?

6. by . 2010-03-31 12:03:50
excellent guide.....I just removed this virus, but the viral file name was "VMA.EXE" and the companion system file was "7VJ5". After removing, I performed a search for these file names and found additional copies of the "7VJ5" file in several other locations, which I promptly deleted.

7. by . 2010-03-21 01:03:42
thank you so much...awesome! will recommend this to other friends and family .


Latest spyware news:
Similar parasites: