Fake antivirus tools are now counted by hundreds and thousands, but still keep emerging. The pace of new counterfeits release is not going down, but the counterfeits are becoming more and more similar. XP Home Security 2011 is no exception to this trend as it looks pretty similar with hundreds of other counterfeits. However, it bears a unique name and this is going to protect it for a while until it is not banned at all levels.
Being very similar to other fake AV tools, the adware in question is known to practice extremely adverse behavior towards infected PC (even in the case of installation of the program by user, it is considered an infection due to the deceptive description provided by the adware promoters). That is, XP Home Security 2011 removal is matter of urgency, even as compared to other AV tools. In order to get rid of XP Home Security 2011 asap, but also to cover other security issues, click here to start free scan.
Being very similar to other fake AV tools, the adware in question is known to practice extremely adverse behavior towards infected PC (even in the case of installation of the program by user, it is considered an infection due to the deceptive description provided by the adware promoters). That is, XP Home Security 2011 removal is matter of urgency, even as compared to other AV tools. In order to get rid of XP Home Security 2011 asap, but also to cover other security issues, click here to start free scan.
XP Home Security 2011 screenshot:
XP Home Security 2011 removal tool:
XP Home Security 2011 manual removal guide:
Delete XP Home Security 2011 files:
%Documents and Settings%\[User Name]\Local Settings\Application Data\[random].exe
%Documents and Settings%\[All Users]\[random]
%Documents and Settings%\[All Users]\Application Data\[random]
%Documents and Settings%\[User Name]\Templates\[random]
%Temp%\[random]
Delete XP Home Security 2011 registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1′ = ‘”%Documents and Settings%\[User Name]\Local Settings\Application Data\[random].exe” /START “%1″ %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1′
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%Documents and Settings%\[User Name]\Local Settings\Application Data\[random].exe” /START “%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\DefaultIcon “(Default)” = ‘%1′
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%Documents and Settings%\[User Name]\Local Settings\Application Data\[random].exe” /START “%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\runas\command “(Default)” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CLASSES_ROOT\exefile\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\exefile\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%Documents and Settings%\[User Name]\Local Settings\Application Data\[random].exe” /START “%1″ %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%Documents and Settings%\[User Name]\Local Settings\Application Data\[random].exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%Documents and Settings%\[User Name]\Local Settings\Application Data\[random].exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%Documents and Settings%\[User Name]\Local Settings\Application Data\[random].exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”‘
No comments:
Post a Comment