How to remove XP Security

Monday, March 22nd, 2010 at 3:55 am
Home » Rogue Antispyware » XP Security

XP Security description

Don’t mistake XP Security for a real security tool. The program is able to report system infections but all the reports are fabricated. XPSecurity only imitates computer scan and infection warnings. It’s not capable of detecting threats or deleting them. The purpose of XP Security is tricking people into buying the program by loading counterfeit alerts. None of XPSecurity pop-ups should be taken seriously.

XP Security spreads via fraudulent online advertisements. It reaches its victims with help of trojans. It may hijack web browser and interrupt normal use of the compromised PC.

XP Security is a Rogue Antispyware software

How to manually remove XP Security

To remove XP Security spyware you must block XP Security sites, stop and remove processes, unregister DLL files, search and delete all other XP Security files and registry utility. Follow the XP Security detection and removal instructions below.

The most typical software removal method is to remove XP Security by using "Add or Remove Programs" service. However there may be hidden XP Security files, running processes and registries in your computer, so XP Security may recreate all other files after reboot.

XP Security manual removal instructions

Stop and remove XP Security processes:
pw.exe
MSASCui.exe Read more how to kill XP Security processes

Locate and delete XP Security registry entries:
HKEY_CURRENT_USER\Software\Classes\pezfile
HKEY_CLASSES_ROOT\pezfile
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1" Read more how to delete XP Security registry entries
Download RegistryBooster 2010 to scan errors caused by XP Security

Detect and delete other XP Security files:
%UserProfile%\Local Settings\Application Data\opRSK
%UserProfile%\Local Settings\Application Data\pw.exe
%UserProfile%\Local Settings\Application Data\MSASCui.exe
%UserProfile%\AppData\Local\opRSK
%UserProfile%\AppData\Local\pw.exe
%UserProfile%\AppData\Local\MSASCui.exe

We strongly recommend you to use spyware remover to track XP Security and automaticaly remove XP Security processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: ,

3 Responses to

XP Security

Trackbacks

Leave a Reply

Download does not start? Try a mirror download here
«
»