How to remove XP Total Security 2011

Wednesday, March 9th, 2011 at 6:12 am
Home » Rogue Antispyware » XP Total Security 2011

XP Total Security 2011 description

XP Total Security 2011 is a clone of Vista Total Security 2011 and Win7 Total Security 2011 frauds. The program is malicious and fraudulent but it presents itself as a security application. This may mislead some people into purchasing XP TotalSecurity 2011. Avoid the trap and don’t waste your money for this tool.

XPTotalSecurity 2011 uses deceptive ways to gain a purchase. It imitates system scan and it also loads numerous fabricated warnings. Victims of XP Total Security 2011 should keep in mind that the tool is not able to detect or delete infections.

Here are some examples of XP Total Security 2011 pop-ups:

Privacy threat!
Spyware intrusion detected. Your system is infected. System integrity is at risk. Private data can be stolen by third parties, including credit card details and passwords. Click here to perform a security repair.

System Hijack!
System security threat was detected. Viruses and/or spyware may be damaging your system now. Prevent infection and data loss or stealing by running a free security scan.

Stealth intrusion!
Infection detected in the background. Your computer is now attacked by spyware and rogue software. Eliminate the infection safely, perform a security scan and deletion now.

XP Total Security 2011 is a Rogue Antispyware software

How to manually remove XP Total Security 2011

To remove XP Total Security 2011 spyware you must block XP Total Security 2011 sites, stop and remove processes, unregister DLL files, search and delete all other XP Total Security 2011 files and registry utility. Follow the XP Total Security 2011 detection and removal instructions below.

The most typical software removal method is to remove XP Total Security 2011 by using "Add or Remove Programs" service. However there may be hidden XP Total Security 2011 files, running processes and registries in your computer, so XP Total Security 2011 may recreate all other files after reboot.

XP Total Security 2011 manual removal instructions

Stop and remove XP Total Security 2011 processes:
[random].exe Read more how to kill XP Total Security 2011 processes

Locate and delete XP Total Security 2011 registry entries:
HKEY_CURRENT_USER\Software\Classes\.exe "(Default)" = 'exefile'
HKEY_CURRENT_USER\Software\Classes\.exe "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon "(Default)" = '%1' = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile "(Default)" = 'Application'
HKEY_CURRENT_USER\Software\Classes\exefile "Content Type" = 'application/x-msdownload'
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" = '%1'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command "IsolatedCommand" - '"%1" %*'
HKEY_CLASSES_ROOT\.exe\DefaultIcon "(Default)" = '%1'
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "(Default)" = '"%1" %*'
HKEY_CLASSES_ROOT\.exe\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile "Content Type" = 'application/x-msdownload'
HKEY_CLASSES_ROOT\exefile\shell\open\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\runas\command "IsolatedCommand" = '"%1" %*'
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "%1" %*'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode'
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = '"%UserProfile%\Local Settings\Application Data\[random 3 letters].exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"'
Read more how to delete XP Total Security 2011 registry entries
Download RegistryBooster 2010 to scan errors caused by XP Total Security 2011

Detect and delete other XP Total Security 2011 files:
%AllUsersProfile%\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Local\[random].exe
%AppData%\Local\t3e0ilfioi3684m2nt3ps2b6lru
%AppData%\Roaming\Microsoft\Windows\Templates\t3e0ilfioi3684m2nt3ps2b6lru
%Temp%\t3e0ilfioi3684m2nt3ps2b6lru

We strongly recommend you to use spyware remover to track XP Total Security 2011 and automaticaly remove XP Total Security 2011 processes, registries and files as well as other spyware threats.

Download does not start? Try a mirror download here

Tags: , , , , , ,

8 Responses to

XP Total Security 2011

  1. Mike

    hello all!
    my computer has been infected by “xp total security 2011″
    thanks to a product code found on this page I can use my internet again
    BUT
    to the real issue. I’m trying to remove “xp total security 2011″
    I tried downloading numerous remover tools designed for this trojan, but none of them seem to get far enough to do so (probably due to the trojan itself)
    the add/remove programs option has obviously been blocked, as with virtually everything else on my computer.
    I’ve tried to access registry editor, but that also wont open.
    I’ve tried every suggestion i could find on how to open regedit, including run—> regedit, regedt, regedt32, regedit.exe, regedit.com, etc.
    no matter what i do I can’t seem to access anything that will allow me to remove this trojan from my system.
    can anyone shed some light on either how to remove “xp total security 2011″, or how to access regedit? im at the end of my rope here, could really use some help.

    Reply

    Luciana Reply:

    You should be able to access registry editor and other system tools once you boot your PC into safe mode.

    Reply

  2. Katgy

    I would love to have that product code.
    my desktop is infected and I can’t acess the internet to download the removal tool

    HELP

    Reply

    Luciana Reply:

    You can download antimalware program on another computer and then copy the installation file to your computer.

    Reply

  3. Brian

    Ugh, this is the third rouge antivirus software that got me, so I am typing this on a different computer while the removal tool installs :(

    Reply

  4. Rysa

    after my laptop has been affected by the xp total security 2011,i cant download any anti viruses include the xp total security 2011 remove tool(its cant be saved).Help me!

    Reply

    Luciana Reply:

    You can always use another computer to download security tools and then copy the installation files to the infected computer.

    Reply

  5. Thomas W.

    Open Task Manager (ctrl – alt – delete) and close the [random].exe file. It could be a string of numbers, or something you’re not familiar with. You should then be able to open regedit. You might have to close it a couple of times as it popped up again with me. After you have opened regedit, remove the strings (some of which I did not have, just remove the ones you can find). Then you can open programs, download an anti-malware program and get it over with..

    Reply

Leave a Reply

Download does not start? Try a mirror download here