Welcome to remove-malware.net

How to remove XP Anti-Spyware rogue anti-spyware

Malware Description:
Did you know XP Anti-Spyware was not real antivirus software? If you have it on your computer, you should definitely read this post and learn some relevant facts about this one. XP Anti-Spyware states it’s there to help you combat all sorts of viruses. Unfortunately these statements are false and are in no way tied up to the reality. This program will neither find real threats nor assists you in removing anything that may actually jeopardize the further functioning of your system. Every time you start your PC, XP Anti-Spyware runs a scan to show you that there are many problems with the safety of your OS and your personal data stored there. It claims to find trojan horses (e.g. Trojan-BNK.Win32.Keylogger.gen), spyware and other dangerous things on your machine in order to make you believe your little cyber world is at risk. The intimidation element of XP Anti-Spyware’s technique is essential for attaining its fraudulent milestones. The malware wants to make it look like it’s a savior of your computer and insists that you purchase its full version for all of its ‘unique’ capabilities to be at your disposal. Well, in other words this app tells you that it will remove the malware it had detected, only you need to buy it first. Now, take a deep breath and give it some thinking. XP Anti-Spyware didn’t really find any existing threats on your PC. Consequently, there is nothing to remove – hence it makes no sense paying for the scam license. As a matter of fact, there is one thing to get rid of: it’s XP Anti-Spyware proper. This is exactly what we recommend you do right now. This malicious program may make you suffer the consequences you don’t want to run into.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

XP Anti-Spyware Free Scanner and Remover: Download Now

XP Anti-Spyware Screenshot:

How to remove XP Anti-Spyware manually:
Manual removal of XP Anti-Spyware is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Documents and Settings%\[User Name]\Local Settings\Application Data\opRSK
• %Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe
• %Documents and Settings%\[User Name]\Local Settings\Application Data\MSASCui.exe

The registry entries that need to be removed are as follows:

• HKEY_CURRENT_USER\Software\Classes\pezfile
• HKEY_CLASSES_ROOT\pezfile
• HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “%1″ %*
• HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “%1″ %*
• HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “%1″ %*
• HKEY_CLASSES_ROOT\pezfile\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “%1″ %*
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″

Please be aware that manual removal of XP Anti-Spyware is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal XP Anti-Spyware, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

There are currently no similar articles.