Welcome to remove-malware.net

How to remove XP Antispyware 2010 rogue anti-spyware

Malware Description:
XP Antispyware 2010 has evidently appeared in the software world to make it worse. This program is a scam tool developed by computer criminals. It’s rogue anti-spyware, which implies it’s targeting money retrieval from credulous people. This crimeware spreads through exploit kits and hijacker domains hosting the corresponding malicious downloader. When we were analyzing XP Antispyware 2010 on our test workstation, here is what we saw. The first thing it does is running a scanner that supposedly impersonates checking your system for unsafe software and all types of infections. Conforming to what we had predicted, XP Antispyware 2010 scanner returned results that claimed we had 25 infections on the perfectly clear Operating System. That’s odd, isn’t it? Well, it’s just the beginning though. XP Antispyware 2010 went on and started displaying system tray notifications at random. Those started warning us about system hijack, privacy threats and similar issues. Of course, those are not true either. Then, just like an average PC user, we tried to open Internet Explorer to find some information on XP Antispyware 2010 and how to treat it. But the moment IE shortcut was clicked, we received a popup warning that said “XP Antispyware 2010 Firewall Alert”. It informed us that the web browser was infected with Trojan-BNK.Win32.Keylogger.gen. We proceeded by clicking the ‘Continue unportected’ option, and then tried to type in some URL into the address bar. What we got instead of the targeted website was a page reading “Internet Explorer alert. Visiting this site may pose a security threat to your system!”. So it appears that XP Antispyware 2010 blocks the Internet connection to prevent people from seeking some solutions to get this pest removed. Considering this, if you got attacked by XP Antispyware 2010, we advise you to either use an alternative browser, or boot into Safe Mode by hitting F8 button before Windows starts loading. Safe Mode with Networking should prevent this rogue from blocking things like IE and similar. A complete XP Antispyware 2010 removal guide is provided below, so please check it out.

Malware Type: Rogue Anti-Spyware

Malware Author: Unknown

Threat Level: Critical

Advice: Immediately remove and scan for additional malware

XP Antispyware 2010 Free Scanner and Remover: Download Now

XP Antispyware 2010 Screenshot:

XP Antispyware 2010 Fake Firewall Alert Screenshot:

How to remove XP Antispyware 2010 manually:
Manual removal of XP Antispyware 2010 is a feasible objective if you have sufficient expertise in dealing with program files, processes, .dll files and registry entries.

The files to be deleted are listed below:

• %UserProfile%\AppData\Local\av.exe
• %UserProfile%\AppData\Local\WRblt8464P

The registry entries that need to be removed are as follows:

• HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “(Default)” = “av.exe” /START “%1″ %*
• HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command “(Default)” = “av.exe” /START “%1″ %*
• HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = “av.exe” /START “%1″ %*
• HKEY_CLASSES_ROOT\secfile\shell\open\command “(Default)” = “av.exe” /START “%1″ %*
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = “av.exe” /START “firefox.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = “av.exe” /START “firefox.exe” -safe-mode
• HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = “av.exe” /START “iexplore.exe”
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “AntiVirusOverride” = “1″
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center “FirewallOverride” = “1″

Please, be aware that manual removal of XP Antispyware 2010 is a cumbersome process and does not always ensure complete deletion of the malware, due to the fact that some files might be hidden or may get reanimated automatically afterwards. Moreover, manual interference of this kind may cause damage to the system. That’s why we strongly recommend automatic removal XP Antispyware 2010, which will save your time and enable avoiding any system malfunctions and guarantee the needed result.

Related Articles:

How to remove Win 7 Antispyware 2010 rogue anti-spyware
How to remove Vista Antispyware 2010 rogue anti-spyware
How to remove Antivirus XP 2010 rogue anti-spyware
How to remove XP Antivirus Pro 2010 rogue anti-spyware