Severity scale:  
  (94/100)

XP Security Tool 2011. How to remove? (Uninstall guide)

removal by Jake Doevan - -   Also known as XPSecurityTool2011 | Type: Rogue Antispyware
12

XP Security Tool 2011 is one of those names that are used for tricking PC users to open wallets and share their money with scammers. XP Security Tool infects computers through security vulnerabilities found and additionally changes its name according to the OS it finds (that’s why you can be attacked by Win 7 Security Tool 2011 or Vista Security Tool 2011 if your PC runs one of these OS that all will act identically). After noticing any of these names, don’t take them serious when they tell about tons of viruses detected! Instead of that rely only on reputable anti-spywares – after running a full system scan with them you will see that XP Security Tool 2011 is malware.

XP Security Tool 2011 acts identically just like any other malware hailing from this dangerous family of malwares. Firstly it will suggest its assistance to check computer’s system for viruses what means fake system scanners displayed. Malware will also show useless system scanners, alerts and notifications in reality having noting to do with a real state of computer. By showing all these messages, XP Security Tool 2011 tries to scare you about your machine and even “recommends“ its “licensed“ version as the only powerful removal tool. Here are some examples:

Internet Explorer alert. Visiting this site may pose a security threat to your system!
Possible reasons include:
– Dangerous code found in this site’s pages which installed unwanted software into your system.
– Suspicious and potentially unsafe network activity detected.
– Spyware infections in your system
– Complaints from other users about this site.
– Port and system scans performed by the site being visited.
Things you can do:
– Get a copy of Vista Antispyware 2011 to safeguard your PC while surfing the web (RECOMMENDED)
– Run a spyware, virus and malware scan
– Continue surfing without any security measures (DANGEROUS)
System danger!
Your system security is in danger. Privacy threats detected. Spyware, keyloggers or Trojans may be working the background right now. Perform an in-depth scan and removal now, click here.

Keep in mind that scanners of XP Security Tool 2011 reveal deliberately fabricated results that mean nothing. You should ignore all these warnings announcing “dangerous” files detected because mostly they are harmless files created by the same XP Security Tool 2011. Besides, never pay for this program as well because then you will only share your money with scammers. Instead of paying, we strongly recommend to remove XP Security Tool 2011. The guide written below should help you:

How to remove XP Security Tool 2011?

a) Burn these programs to CD or write them to USB disk. You can use your MP3 player, or smartphone if it has storage functions. This parasite does not spread through USB at the moment:

1. STOPzilla or an automatic removal tool below. Update STOPzilla and run a full system scan.

2.You might want to download Hitman Pro or Malwarebytes as alternate scanners. Though you are likely to be able to download them later on.

b) Boot normally. Wait for XP Security Tool 2011 to launch, and run exeregfix.reg . This should allow launching legitimate programs

c) Delete or remove the files that are mentioned in our files box. You can use STOPzilla to identify the infected files and additional infections or automatic XP Security Tool 2011 removal tool. Do not forget update it before scanning. Remove what it finds.

d) Scan with STOPzilla and secondary tools and reboot your PC. This should fully get rid of XP Security Tool 2011.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove XP Security Tool 2011 you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall XP Security Tool 2011. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.
Press mentions on Reimage

XP Security Tool 2011 manual removal:

Kill processes:
pw.exe

MSASCui.exe

Delete registry values:
HKEY_CURRENT_USERSoftwareClassespezfile

HKEY_CLASSES_ROOTpezfile

HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*

HKEY_CURRENT_USERSoftwareClassespezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*

HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*

HKEY_CLASSES_ROOTpezfileshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "%1" %*

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = "%UserProfile%Local SettingsApplication Datapw.exe" /START "C:Program FilesInternet Exploreriexplore.exe"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "AntiVirusOverride" = "1"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center "FirewallOverride" = "1"

Delete files:
%UserProfile%Local SettingsApplication DataopRSK

%UserProfile%Local SettingsApplication Datapw.exe

%UserProfile%Local SettingsApplication DataMSASCui.exe

%UserProfile%AppDataLocalopRSK

%UserProfile%AppDataLocalpw.exe

%UserProfile%AppDataLocalMSASCui.exe

About the author

Jake Doevan
Jake Doevan - Computer technology expert

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Jake Doevan
About the company Esolutions


  • Amanda

    The process changes so you will have to right click on the application and click on go to process to find the particular process related to the program.