Free XP Antivirus 2012 removal instructions

Rogue Antispyware:

XP Antispyware 2012 iis a fake antivirus program that spreads on computers through fake scanners online which imitate scanning computer systems and attempt to make you believe your system is badly infected. By the end the program offers getting a full version of XP Antivirus 2012 in order to remove all unwanted files from your system.

The program can also get inside the computer using hacked websites. No matter what kind of infiltration it is going to be, once XP Antivirus 2012 is inside you will find it almost impossible to eliminate it from there.

First of all, the program will run computer scanner with each system reboot. The scanner will be used for a few minutes and by the end the program will display a list of files that are supposedly harming your system. In order to remove them you will be asked to purchase a full version of XP Antivirus 2012.

Additionally, your Windows would start using proxy server which would intercept all Internet requests and would not allow you browsing the Internet. The program will say that the website you want to visit is infected.

As you understand, XP Antivirus 2012 is a malicious application and it cannot be taken for granted. Please use a reputable antispyware program and delete XP Antivirus 2012 from your computer as soon as you detect it on your computer.

NOTE! manual removal of XP Antivirus 2012 might be dangerous if not performed carefully. We recommend using an automatic remover -Spyware doctor which decreases risk of harming your PC.

Free manual removal instructions

NOTE! You need to have a lot of computer kmowledge to remove spyware properly from your personal computer. Main things you have to know is:
1. How to STOP running proccesses
2. How to unregister DLLs
3. How to remove files and Registry entries

Stop XP Antivirus 2012 processes:

Unregister XP Antivirus 2012 Dlls:

Remove XP Antivirus 2012 files:

%AllUsersProfile%\[random]
%AppData%\Local\[random].exe
%AppData%\Local\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%Temp%\[random]

Remove XP Antivirus 2012 registry entries:

HKEY_CURRENT_USER\Software\Classes\.exe “(Default)” = ‘exefile’
HKEY_CURRENT_USER\Software\Classes\.exe “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\.exe\DefaultIcon “(Default)” = ‘%1? = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\.exe\shell\runas\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile “(Default)” = ‘Application’
HKEY_CURRENT_USER\Software\Classes\exefile “Content Type” = ‘application/x-msdownload’
HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon “(Default)” = ‘%1?
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %*’
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “IsolatedCommand” – ‘”%1? %*’
HKEY_CLASSES_ROOT\.exe\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_CLASSES_ROOT\exefile\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%1? %*’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe”‘
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Mozilla Firefox\firefox.exe” -safe-mode’
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command “(Default)” = ‘”%UserProfile%\Local Settings\Application Data\[random].exe” /START “%Program Files%\Internet Explorer\iexplore.exe”

NOTE! manual removal of XP Antivirus 2012 might be dangerous if not performed carefully. We recommend using an automatic remover -Spyware doctor which decreases risk of harming your PC.

Keyword Search

Search by First Lettera b c d e f g h i j k l m n o p q r s t u v w x y z 0 1 2 3 4 5 6 7 8 9