Welcome to remove-malware.net

How to remove XP Anti-Virus 2011 rogue anti-spyware

Malware Description:
We have labeled XP Anti-Virus 2011 (alias XP AntiVirus 2011) application ‘rogue’ due to several very relevant facts about it. This utility is off the legitimacy track since it is all about telling the lies to people about the actual state of their computers. XP Anti-Virus 2011 doesn’t enter one’s machine like regular software, i.e. it completely ignores the normal authorization guidelines, preferring backdoor installation instead of asking for a user’s approval. Actually, this particular method of intrusion is one of the core malicious advantages of XP Anti-Virus 2011 as it gives the badware some additional time of the victim’s unawareness. While running on the background, this scam tool changes Windows Registry and hence makes sure the random-named malicious process gets triggered automatically after every launch of the Operating System. Let’s now move on with this description and show you how XP Anti-Virus 2011 works after the preliminary phase of its attack is over. It starts aggressively acting on your nerves, stating that you have the infections you don’t actually have. XP Anti-Virus 2011 acts like that on purpose – just to try and convince you that something is seriously wrong with your computer’s security and your own cyber privacy. It runs scanners and displays alerts that misinform you of numerous threats purportedly residing inside your workstation. The false detection reports are always combined with some options to get this troubling situation resolved. Unfortunately, choosing to fix the problems will only get you to a screen designed for processing user payments via a fraudulent billing system. In other words, the hackers offer you a deal of registering XP Anti-Virus 2011 by means of buying it online. This will not help you at all though, as long as you remember that this program didn’t detect anything that’s real. Just do not fall for XP Anti-Virus 2011 malware interception reports and never pay for this fraud software. It’s strongly recommended to get rid of XP Anti-Virus 2011 in the shortest possible time.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

XP Anti-Virus 2011 Free Scanner and Remover: Download Now

XP Anti-Virus 2011 Screenshot:

How to remove XP Anti-Virus 2011 manually:
Manual removal of XP Anti-Virus 2011 is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• %Documents and Settings%\[User Name]\Local Settings\Application Data\opRSK
• %Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe
• %Documents and Settings%\[User Name]\Local Settings\Application Data\MSASCui.exe

The registry entries that need to be removed are as follows:

• HKEY_CURRENT_USER\Software\Classes\pezfile
• HKEY_CLASSES_ROOT\pezfile
• HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “%1″ %*
• HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “%1″ %*
• HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “%1″ %*
• HKEY_CLASSES_ROOT\pezfile\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “%1″ %*
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “%Documents and Settings%\[User Name]\Local Settings\Application Data\pw.exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″

Please be aware that manual removal of XP Anti-Virus 2011 is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal XP Anti-Virus 2011, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove Win 7 Anti-Virus 2011 rogue anti-spyware
How to remove Anti-Virus 2011 rogue anti-spyware
How to remove XP Home Security 2011 rogue anti-spyware
How to remove XP Antimalware 2011 rogue anti-spyware