Severity scale:  
  (62/100)

XP Total Security 2011. How to remove? (Uninstall guide)

removal by Ugnius Kiguolis - -   Also known as XPTotalSecurity2011 | Type: Rogue Antispyware

XP Total Security 2011 is a rogue security program that is promoted through the use of Trojans. When this fake program is running, it will simulate a system scan and display a list of false system security threats. XP Total Security 2011 will display fake security warnings and impersonate Windows Security Center to make this scam look more realistic. It will also hijack your web browser and block antivirus and anti-spyware programs. Finally the rogue program will ask you to pay for a full version of the program to remove the non-existing infections. Don’t purchase it and remove XP Total Security 2011 from your computer upon detection.

XP Total Security 2011 protects itself quite effectively. It blocks legitimate security software and hijack web browsers. In some cases it blocks all programs, not only anti-virus or anti-spyware software. What is more, it will detect many of well known and reputable websites as harmful and display fake security alert stating that you may infect your PC if you open a particular website. And of course, it disables certain Windows functions such as Task Manager. It’s possible to remove it manually, but you have to re-enable those Windows functions at first. You may also download an automatic removal tool, but again have to fix some registry entries and terminate the main process of XP Total Security 2011 to be able to use malware removal tool. As you can see, XP Total Security 2011 is nothing more but a scam. If you have already purchased this rogue program then contact your credit card company and dispute the charges.

When trying to remove XP Total Security 2011, enter its manual registration code: 1147-175591-6550. Malware will think that you have paid for it and then will allow you to launch other security programs.

If this fails, reboot into safe mode with networking, kill its malicious processes and run licensed anti-spyware.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove XP Total Security 2011 you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall XP Total Security 2011. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.
Press mentions on Reimage
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing XP Total Security 2011 (2011-12-23)
Malwarebytes
We have tested Malwarebytes's efficiency in removing XP Total Security 2011 (2011-12-23)
Hitman Pro
We have tested Hitman Pro's efficiency in removing XP Total Security 2011 (2011-12-23)
Malwarebytes
We have tested Malwarebytes's efficiency in removing XP Total Security 2011 (2011-12-23)

XP Total Security 2011 manual removal:

Kill processes:
[random].exe

Delete registry values:
HKEY_CURRENT_USERSoftwareClasses.exe "(Default)" = 'exefile'

HKEY_CURRENT_USERSoftwareClasses.exe "Content Type" = 'application/x-msdownload'

HKEY_CURRENT_USERSoftwareClasses.exeDefaultIcon "(Default)" = '%1' = '"%UserProfile%Local SettingsApplication Data[random].exe" /START "%1" %*'

HKEY_CURRENT_USERSoftwareClasses.exeshellopencommand "IsolatedCommand" = '"%1" %*'

HKEY_CURRENT_USERSoftwareClasses.exeshellrunascommand "(Default)" = '"%1" %*'

HKEY_CURRENT_USERSoftwareClasses.exeshellrunascommand "IsolatedCommand" = '"%1" %*'

HKEY_CURRENT_USERSoftwareClassesexefile "(Default)" = 'Application'

HKEY_CURRENT_USERSoftwareClassesexefile "Content Type" = 'application/x-msdownload'

HKEY_CURRENT_USERSoftwareClassesexefileDefaultIcon "(Default)" = '%1'

HKEY_CURRENT_USERSoftwareClassesexefileshellopencommand "(Default)" = '"%UserProfile%Local SettingsApplication Data[random].exe" /START "%1" %*'

HKEY_CURRENT_USERSoftwareClassesexefileshellopencommand "IsolatedCommand" = '"%1" %*'

HKEY_CURRENT_USERSoftwareClassesexefileshellrunascommand "(Default)" = '"%1" %*'

HKEY_CURRENT_USERSoftwareClassesexefileshellrunascommand "IsolatedCommand" - '"%1" %*'

HKEY_CLASSES_ROOT.exeDefaultIcon "(Default)" = '%1'

HKEY_CLASSES_ROOT.exeshellopencommand "(Default)" = '"%UserProfile%Local SettingsApplication Data[random].exe" /START "%1" %*'

HKEY_CLASSES_ROOT.exeshellopencommand "IsolatedCommand" = '"%1" %*'

HKEY_CLASSES_ROOT.exeshellrunascommand "(Default)" = '"%1" %*'

HKEY_CLASSES_ROOT.exeshellrunascommand "IsolatedCommand" = '"%1" %*'

HKEY_CLASSES_ROOTexefile "Content Type" = 'application/x-msdownload'

HKEY_CLASSES_ROOTexefileshellopencommand "IsolatedCommand" = '"%1" %*'

HKEY_CLASSES_ROOTexefileshellrunascommand "IsolatedCommand" = '"%1" %*'

HKEY_CLASSES_ROOTexefileshellopencommand "(Default)" = '"%UserProfile%Local SettingsApplication Data[random].exe" /START "%1" %*'

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellopencommand "(Default)" = '"%UserProfile%Local SettingsApplication Data[random].exe" /START "C:Program FilesMozilla Firefoxfirefox.exe"'

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetFIREFOX.EXEshellsafemodecommand "(Default)" = '"%UserProfile%Local SettingsApplication Data[random].exe" /START "C:Program FilesMozilla Firefoxfirefox.exe" -safe-mode'

HKEY_LOCAL_MACHINESOFTWAREClientsStartMenuInternetIEXPLORE.EXEshellopencommand "(Default)" = '"%UserProfile%Local SettingsApplication Data[random].exe" /START "C:Program FilesInternet Exploreriexplore.exe"'

Delete files:
[random].exe



Delete directories:
%AllUsersProfile%[random]

%AppData%[random]

%Temp%[random]

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions