How to remove XP Security
XP Security description
XP Security is a copy of XP Security Tool and XP Smart Security 2010 parasites. That is why it’s also categorized as scamware. It starts to act once user’s computer is started. Malware downloads and installs itself automatically, because it spreads via trojan.
If you’ve noticed numerous pop-ups and warnings that state your PC is infected, do not believe any of it. This is fraud and all the information is rogue. XP Security seeks user to purchase illegal version of the malware, even if it states differently. This supposedly real XP Security security program can’t protect your computer from viruses. It only may cause you serious problems. That is why, you should use reputable anti-spyware application and kill the parasite.
How to get rid of XP Security
This infection can be removed using Spyware Doctor.
Spyware Doctor is widely valued as one of the best AntiSpyware programs available to protect you from XP Security and the latest internet security threats. If your computer is infected with XP Security we strongly recommend automatic spyware scanner.
How to manually remove XP Security
To get rid of spyware such as XP Security you need to remove processes, search and delete registry keys, DLL and other XP Security related files from your computer.
Take Note: The manual process of removing spyware from your computer is difficult and puts you at risk of damaging your computer. We advise using our automatic XP Security remover.
- Uninstall XP Security from Control Panel
Start > Settings > Control Panel > Add/Remove Programs. Double click to uninstall. - End these XP Security processes:
MSASCui.exe
pw.exe
To stop processes press Ctrl + Alt + Del or click Start > Run > type "taskmgr". Select malicious process in the list and click "End Process" button. -
Delete XP Security registry entries:
HKEY_CURRENT_USER\Software\Classes\pezfile
HKEY_CLASSES_ROOT\pezfile
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CURRENT_USER\Software\Classes\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\.exe\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_CLASSES_ROOT\pezfile\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "%1" %*
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command "(Default)" = "%UserProfile%\Local Settings\Application Data\pw.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "AntiVirusOverride" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center "FirewallOverride" = "1"
To open registry editor click Start > Run > type "regedit".
Warning! Manual registry entries editing may cause damage to your system.
Download Uniblue RegistryBooster 2010 to scan for registry errors. -
Search and delete these XP Security related files:
%UserProfile%\Local Settings\Application Data\opRSK
%UserProfile%\Local Settings\Application Data\pw.exe
%UserProfile%\Local Settings\Application Data\MSASCui.exe
%UserProfile%\AppData\Local\opRSK
%UserProfile%\AppData\Local\pw.exe
%UserProfile%\AppData\Local\MSASCui.exe

November 15th, 2010 10:52
[...] Security is a fake security tool and also can be found in a different names – XP Security and Win 7 Security malwares. This rogue application spreads via trojan horse which enters the [...]