Get Rid of XP Total Security 2011 as Even Its Installation Method So Suggests

The way of this program delivery by itself suggests XP Total Security 2011 removal. Usual method applied to implant this program is to entice users visiting seemingly harmless website. Users consider such websites harmless, because part of its name is a name of evidently trustworthy source e.g. MSN.
Suggested website appears to be a scanner or a home-page of a security solution. Needless to guess, the solution is a counterfeit presented to users under the name of XP Total Security 2011.
The website suddenly seems to be closed and then a popup appears at the middle or top of the desktop. It would rave something about issues detected on the computer system and then guide user directly to the adware download and installation dialog. In fact, the popup and the dialog are modified pages of the malware website.
As you can see, the wizard is also a showcase as real installation is performed via backdoor anyway. As a consequence, user’s approval of the adware installation is a part of  the user’s cheating. That is, hackers want to make an appearance that users themselves install the program.
Get rid of XP Total Security 2011 rogue and misleading system utility, as well as launch free scan in order to detect and exterminate real security and privacy threats.  

XP Total Security 2011 screenshot:

XP Total Security 2011 removal tool:

Download XP Total Security 2011 Remover

XP Total Security 2011 manual removal guide:

Delete infected files:

%UserProfile%\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%UserProfile%\Local Settings\Application Data\[3 RANDOM LETTERS].exe
%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru

 Delete infected registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[3 RANDOM LETTERS].exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[3 RANDOM LETTERS].exe” /START “C:\Program Files\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[3 RANDOM LETTERS].exe” /START “C:\Program Files\Internet Explorer\iexplore.exe”‘
HKEY_CLASSES_ROOT\.exe\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\runas\command “(Default)” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[3 RANDOM LETTERS].exe” /START “%1″ %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\.exe\DefaultIcon “(Default)” = ‘%1′
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[3 RANDOM LETTERS].exe” /START “%1″ %*’
HKEY_CLASSES_ROOT\exefile\shell\open\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\exefile\shell\runas\command “IsolatedCommand” = ‘”%1″ %*’
HKEY_CLASSES_ROOT\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1′ = ‘”%UserProfile%\Local Settings\Application Data\[3 RANDOM LETTERS].exe” /START “%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1″ %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1″ %*’