XP Antispyware 2011 is an important part of dangerous group of malwares, that have infected numerous PCs and seems like it was just a beginning. Mostly overtaking computers that run Windows XP, XP Antispyware 2011 reaches them through Trojans viruses that sneak inside secretly if machine is unprotected. Additionally, virus will do some secret modifications needed for its normal functionality, like launching just after computer’s reboot, and then will start its activity. You will notice XP Antispyware 2011 on various system security notifications that all will be concentrated for creating a need of the paid version. By telling you that there are tons of viruses detected, XP Antispyware 2011 will offer you to fix your computer with its useless “full” version. You should never do that and remove the trial version of XP Antispyware 2011. Otherwise, it will lead you PC to bigger security problems.
XP Antispyware 2011 displays foolishly looking alerts, system scanners, pop-up ads and notifications for making users scared about the viruses. None of them will tell a truth while they will be declaring:
Please keep in mind that XP Antispyware 2011 and all its relative programs like XP Security 2011 or Win 7 Security 2011 belong to rogue anti-spywares category what means that they will do their best for ripping users off. Don’t support the scammers by paying for it and remove XP Antispyware 2011. As soon as you notice misleading activity of malware, make sure you stop its executable pw.exe and MSASCui.exe and follow the additional guide for XP Antispyware 2011 removal.
To remove XP Antispyware 2011 you will need another PC, as removing it from safe mode with networking will not work in most of the cases.
a) Burn these programs to CD or write them to USB disk. You can use your MP3 player, or smartphone if it has storage functions. This parasite does not spread through USB at the moment:
1.STOPzilla or an automatic removal tool below. Update STOPzilla and run a full system scan.
2.You might want to download Hitman Pro or Malwarebytes as alternate scanners. Though you are likely to be able to download them later on.
b) Boot normally. Wait for XP Antispyware 2011 to launch, and run exeregfix.reg . This should allow launching legitimate programs
c) Delete or remove the files that are mentioned in our files box. You can use STOPzilla to identify the infected files and additional infections or automatic XP Antispyware 2011 removal tool. Do not forget update it before scanning. Remove what it finds.
d) Scan with STOPzilla and secondary tools and reboot your PC. This should fully get rid of XP Antispyware 2011.
UPDATE!!! One of PC security bloggers, S!Ri, has announced about a serial code that may help you to disable those malwares that change their names according to OS they find. Enter this serial code when doing registration: 1145-17884799-7733. This and the order number 21197673 should also work for earlier versions of this type of parasite. After typing them, you should become able to use your anti-spyware, if it fails follow the guide written above. Be aware that these numbers are expected to change in the near future!
XP Antispyware 2011 manual removal:
Delete registry values:
HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CURRENT_USERSoftwareClassespezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_CLASSES_ROOTpezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode
HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesInternet Exploreriexplore.exe"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"
%UserProfile%Local SettingsApplication DataopRSK
%UserProfile%Local SettingsApplication Datapw.exe
%UserProfile%Local SettingsApplication DataMSASCui.exe