How to remove XP Total Security 2011
Wednesday, March 9th, 2011 at 6:12 amHome » Rogue Antispyware » XP Total Security 2011
XP Total Security 2011 description
XP Total Security 2011 is a clone of Vista Total Security 2011 and Win7 Total Security 2011 frauds. The program is malicious and fraudulent but it presents itself as a security application. This may mislead some people into purchasing XP TotalSecurity 2011. Avoid the trap and don’t waste your money for this tool.
XPTotalSecurity 2011 uses deceptive ways to gain a purchase. It imitates system scan and it also loads numerous fabricated warnings. Victims of XP Total Security 2011 should keep in mind that the tool is not able to detect or delete infections.
Here are some examples of XP Total Security 2011 pop-ups:
Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.
System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.
Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.
XP Total Security 2011 is a Rogue Antispyware software
How to manually remove XP Total Security 2011
To remove XP Total Security 2011 spyware you must block XP Total Security 2011 sites, stop and remove processes, unregister DLL files, search and delete all other XP Total Security 2011 files and registry utility. Follow the XP Total Security 2011 detection and removal instructions below.
The most typical software removal method is to remove XP Total Security 2011 by using "Add or Remove Programs" service. However there may be hidden XP Total Security 2011 files, running processes and registries in your computer, so XP Total Security 2011 may recreate all other files after reboot.
XP Total Security 2011 manual removal instructions
Stop and remove XP Total Security 2011 processes:
[random].exe
Read more how to kill XP Total Security 2011 processes
Locate and delete XP Total Security 2011 registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" - '"%1" %*'
HKEY_CLASSES_ROOT\.exe\DefaultIcon "(Default)" = '%1'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile "Content Type" = 'application/x-msdownload'
HKEY_CLASSES_ROOT\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"'
Read more how to delete XP Total Security 2011 registry entries
Download RegistryBooster 2010 to scan errors caused by XP Total Security 2011
Detect and delete other XP Total Security 2011 files:
%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Local\[random].exe
%AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru
We strongly recommend you to use spyware remover to track XP Total Security 2011 and automaticaly remove XP Total Security 2011 processes, registries and files as well as other spyware threats.



April 7th, 2011 at 4:04 pm
hello all!
my computer has been infected by “xp total security 2011″
thanks to a product code found on this page I can use my internet again
BUT
to the real issue. I’m trying to remove “xp total security 2011″
I tried downloading numerous remover tools designed for this trojan, but none of them seem to get far enough to do so (probably due to the trojan itself)
the add/remove programs option has obviously been blocked, as with virtually everything else on my computer.
I’ve tried to access registry editor, but that also wont open.
I’ve tried every suggestion i could find on how to open regedit, including run—> regedit, regedt, regedt32, regedit.exe, regedit.com, etc.
no matter what i do I can’t seem to access anything that will allow me to remove this trojan from my system.
can anyone shed some light on either how to remove “xp total security 2011″, or how to access regedit? im at the end of my rope here, could really use some help.
Reply
Luciana Reply:
April 10th, 2011 at 2:43 am
You should be able to access registry editor and other system tools once you boot your PC into safe mode.
Reply
May 21st, 2011 at 7:54 pm
I would love to have that product code.
my desktop is infected and I can’t acess the internet to download the removal tool
HELP
Reply
Luciana Reply:
May 23rd, 2011 at 9:55 am
You can download antimalware program on another computer and then copy the installation file to your computer.
Reply
May 27th, 2011 at 10:11 am
Ugh, this is the third rouge antivirus software that got me, so I am typing this on a different computer while the removal tool installs
Reply
May 29th, 2011 at 10:46 am
after my laptop has been affected by the xp total security 2011,i cant download any anti viruses include the xp total security 2011 remove tool(its cant be saved).Help me!
Reply
Luciana Reply:
May 30th, 2011 at 5:56 am
You can always use another computer to download security tools and then copy the installation files to the infected computer.
Reply
May 30th, 2011 at 11:17 am
Open Task Manager (ctrl – alt – delete) and close the [random].exe file. It could be a string of numbers, or something you’re not familiar with. You should then be able to open regedit. You might have to close it a couple of times as it popped up again with me. After you have opened regedit, remove the strings (some of which I did not have, just remove the ones you can find). Then you can open programs, download an anti-malware program and get it over with..
Reply