How to remove XP Antispyware
Tuesday, November 23rd, 2010 at 7:25 amHome » Rogue Antispyware » XP Antispyware
XP Antispyware description
XP Antispyware is a malicious piece of software. Instead of deleting malware it loads pop-ups and keeps asking for money. XPAntispyware may also appear as Vista Antispyware and Win 7 Antispyware.
XP Antispyware is able to fabricate security alerts and system scan report. None of the notifications delivered by XP Anti-Spyware is real even if they look like Windows messages. The fake alerts are only meant to intimidate victims into purchasing XP Antispyware. Avoid the scam! XP Antispyware is not a real spyware remover and it might be even dangerous. It may disable regular security applications and it may hijack web browser.
XP Antispyware is a Rogue Antispyware software
How to manually remove XP Antispyware
To remove XP Antispyware spyware you must block XP Antispyware sites, stop and remove processes, unregister DLL files, search and delete all other XP Antispyware files and registry utility. Follow the XP Antispyware detection and removal instructions below.
The most typical software removal method is to remove XP Antispyware by using "Add or Remove Programs" service. However there may be hidden XP Antispyware files, running processes and registries in your computer, so XP Antispyware may recreate all other files after reboot.
XP Antispyware manual removal instructions
Stop and remove XP Antispyware processes:
pw.exe
MSASCui.exe
Read more how to kill XP Antispyware processes
Locate and delete XP Antispyware registry entries:
HKEY_CURRENT_USER\Software\Classes\pezfile
HKEY_CLASSES_ROOT\pezfile
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
Read more how to delete XP Antispyware registry entries
Download RegistryBooster 2010 to scan errors caused by XP Antispyware
Detect and delete other XP Antispyware files:
%UserProfile%\Local Settings\Application Data\opRSK
%UserProfile%\Local Settings\Application Data\pw.exe
%UserProfile%\Local Settings\Application Data\MSASCui.exe
%UserProfile%\AppData\Local\opRSK
%UserProfile%\AppData\Local\pw.exe
%UserProfile%\AppData\Local\MSASCui.exe
We strongly recommend you to use spyware remover to track XP Antispyware and automaticaly remove XP Antispyware processes, registries and files as well as other spyware threats.
Trackbacks
- Remove Vista Antispyware, VistaAntispyware removal
- Remove Win 7 Antispyware, Win7 Antispyware removal



XP Antispyware