XPAntivirusSecurity.com is fake security website that promotes XP antivirus Protection rogue security application. XPAntivirusSecurity.com offers XP antivirus Protection for free scan. XP Antivirus Protection shows fake warning alerts and shows false scanning results to trick you into buying XP Antivirus Protection for $49.95.
If your computer is infected by XPAntivirusSecurity.com hijacker, your computer is in trouble because it does transfer back and forth information from the infected computer which makes it a potential for application/data theft.
Download – Removal Tool for XPAntivirusSecurity.com
Screenshots:
XPAntivirusSecurity.com
XP Antivirus Protections Alert
Symptoms of XPAntivirusSecurity.com
Pop up balloon warning messages claiming that your PC is infected.
- "Critical System Error",
- "Your computer is infected",
- "Trojan-Spy.win32@mx",
- "Virus Alert",
- "Security Alert"
- "System Alert" or
- "Spyware.Cyberlog-X" infections..
- Hijacked homepage to XPAntivirusSecurity.com webpage.
- Flashing icons appear on your system tray (Near of your system clock).
Manual Removal Process:
Search and kill the following processes (Learn Here)
xpantivirus.exe,
xpantivirusupdate.exe,
ntoskrnl.exe,
install_xp.exe,
download.exe
Remove XPAntivirusSecurity.com files & dlls files (Learn Here)
xpantivirus.exe
%program_files%\xpantivirus\xpantivirusupdate.exe
%program_files%\xpantivirus\sysbackup\ntoskrnl.exe
install_xp.exe
download.exe
%program_files%\xpantivirus\sysbackup\ntoskrnl.exe.md5
%program_files%\xpantivirus\unins000.exe
xpantivirusupdate.exe
%program_files%\xpantivirus\sysbackup\explorer.exe
%program_files%\xpantivirus\unins000.exe
%program_files%\xpantivirus\sysbackup\explorer.exe.md5
%program_files%\xpantivirus\xpantivirusupdate.exe
%program_files%\xpantivirus\sysbackup\ntoskrnl.exe
%program_files%\xpantivirus\sysbackup\explorer.exe
%program_files%\xpantivirus\xpantivirus.exe
Remove/Modify corrupt Registry Entries (Learn Here)
HKEY_CURRENT_USER\software\xp antivirus\options lastscan
HKEY_CURRENT_USER\software\xp antivirus\options afterregisterurl
HKEY_CURRENT_USER\software\xp antivirus\options autoscanonstartup
HKEY_CURRENT_USER\software\xp antivirus\options
HKEY_CURRENT_USER\software\xp antivirus\options minimizetotray
HKEY_CURRENT_USER\software\xp antivirus\options offsiteurl
HKEY_CURRENT_USER\software\xp antivirus\options programversion
HKEY_CURRENT_USER\software\xp antivirus\options startwithwindows
HKEY_CURRENT_USER\software\xp antivirus\firstrun
HKEY_CURRENT_USER\software\xp antivirus\options helpurl
HKEY_CURRENT_USER\software\xp antivirus\options labelurl
HKEY_CURRENT_USER\software\xp antivirus\options totalscans
HKEY_CURRENT_USER\software\xp antivirus\options transactionkey
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter imagepath
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter start
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter type
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum count
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 nomodify
HKEY_CURRENT_USER\software\xp antivirus\options aff
HKEY_CURRENT_USER\software\xp antivirus\options registerurl
HKEY_CURRENT_USER\software\xp antivirus\options startminimized
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xpantivirusfilter\enum initstartfailed
HKEY_CURRENT_USER\software\xp antivirus\options enablesysbackup
HKEY_CURRENT_USER\software\xp antivirus
HKEY_CURRENT_USER\software\xp antivirus\options checkhidden
HKEY_CURRENT_USER\software\xp antivirus\options enableadvanced
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xp antivirus_is1 norepair
HKEY_CURRENT_USER\software\xp antivirus\options versionurl
HKEY_CURRENT_USER\software\xp antivirus\register
